Version 3.15.0

.gitlab-ci.yml

@@ -0,0 +1,5 @@
+include:
+  - project: devops/pipeline-components
+    ref: main
+    file: cloudron-app.gitlab-ci.yml
+

CHANGELOG

@@ -2379,3 +2379,325 @@ Improve replication performance. See (#12080, #12054, #12009) for more details.
 * fix: go mod update v1.33.0 https://pkg.go.dev/vuln/GO-2024-2611 by @harshavardhana in #19208
 * bucket import: avoid overwriting bucket creation date by @poornas in #19207
 * Set expected expiry date for ExpiredObjectAllVersions by @krisis in #19210
+
+[3.13.5]
+* Update minio to 2024-03-10T02-53-48Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-03-10T02-53-48Z)
+* make immediate purge non-blocking up to 100,000 entries per drive (#19231)
+* make immediate purge non-blocking upto 100000 entries per drive
+* Bonus: turn-off O_DIRECT verification when FSType is 'XFS'
+
+[3.13.6]
+* Update minio to 2024-03-15T01-07-19Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-03-15T01-07-19Z)
+* allow dynamically changing max_object_versions per object (#19265)
+
+[3.13.7]
+* Update minio to 2024-03-21T23-13-43Z
+* [Changelog](https://github.com/minio/minio/releases/tag/2024-03-21T23-13-43Z)
+* write anything beyond 4k to be written in 4k pages by @harshavardhana in https://github.com/minio/minio/pull/19269
+* fix wrong time.Parse params order by @alingse in https://github.com/minio/minio/pull/19279
+* implement a flag to specify custom crossdomain.xml by @harshavardhana in https://github.com/minio/minio/pull/19262
+* fix: add a default requests deadline when deadline is 0 by @harshavardhana in https://github.com/minio/minio/pull/19287
+* add deprecated expiry_workers to be ignored by @harshavardhana in https://github.com/minio/minio/pull/19289
+* add additional logs for the decom during metadata save by @harshavardhana in https://github.com/minio/minio/pull/19288
+* feat: add user to NOTIFY_REDIS by @jiuker in https://github.com/minio/minio/pull/19285
+* change the notification queue full message by @harshavardhana in https://github.com/minio/minio/pull/19293
+* list: Fix IsTruncated and NextMarker when encountering expired objects by @vadmeste in https://github.com/minio/minio/pull/19290
+* xl: Purge instead of moving to trash with near filled disks by @vadmeste in https://github.com/minio/minio/pull/19294
+* crypto: generate OEK using HMAC-SHA256 instead of SHA256 by @aead in https://github.com/minio/minio/pull/19297
+* decom: Fix failed status after a failed decommission by @vadmeste in https://github.com/minio/minio/pull/19300
+* Handle zero versions qualified for expiration by @krisis in https://github.com/minio/minio/pull/19301
+* avoid triggering heals on metacache files if any by @harshavardhana in https://github.com/minio/minio/pull/19299
+* add IAM policyDB lookup fallbacks to drives by @harshavardhana in https://github.com/minio/minio/pull/19302
+* replication: enforce precondition for multipart by @poornas in https://github.com/minio/minio/pull/19306
+* fix: peer addr returned as empty string by @anjalshireesh in https://github.com/minio/minio/pull/19308
+* fix: Fix crash when logging events and anonymous is enabled by @vadmeste in https://github.com/minio/minio/pull/19313
+* use retry during policy reload from drives by @harshavardhana in https://github.com/minio/minio/pull/19307
+* Encode dir obj names before expiration by @krisis in https://github.com/minio/minio/pull/19305
+* fix batch snowball to close channel after listing finishes by @poornas in https://github.com/minio/minio/pull/19316
+
+[3.13.8]
+* Update minio to 2024-03-26T22-10-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/2024-03-26T22-10-45Z)
+* Webhook targets refactor and bug fixes by @zveinn in https://github.com/minio/minio/pull/19275
+* fix: convert multiple callers to use toStorageErr(err) correctly by @harshavardhana in https://github.com/minio/minio/pull/19339
+* fix: should return when error happend by @jiuker in https://github.com/minio/minio/pull/19342
+* bring back minor DNS cache for k8s setups by @harshavardhana in https://github.com/minio/minio/pull/19341
+* Adding dashboard for MinIO node metrics by @shtripat in https://github.com/minio/minio/pull/19329
+* Fix races in IAM cache lazy loading by @klauspost in https://github.com/minio/minio/pull/19346
+* allow configuring inline shard size value by @harshavardhana in https://github.com/minio/minio/pull/19336
+* replication:fix precondition check for multipart by @poornas in https://github.com/minio/minio/pull/19349
+
+[3.13.9]
+* Update minio to 2024-03-30T09-41-56Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-03-30T09-41-56Z)
+* Support for SSE-C encrypted objects with site and bucket replication.
+* CPU issue addressed when you have 1000's of folder prefixes at bucket root.
+* LDAP support normalization of DN names for consistent behavior.
+
+[3.13.10]
+* Update minio to 2024-04-06T05-26-02Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-04-06T05-26-02Z)
+* Reduce big message RPC allocations by @klauspost in #19390
+* Prioritize the bucket configs first during the decommissioning by @Praveenrajmani in #19393
+* fix: missing metrics for healed objects by @harshavardhana in #19392
+* Always return slice with cap by @klauspost in #19395
+* Adding console targets back into systemtarget log slice by @zveinn in #19398
+* feat: support EdDSA/Ed25519 for oss by @jiuker in #19397
+* update to latest deps by @harshavardhana in #19399
+* Avoid using a nil transport when the config is not initialized by @vadmeste in #19405
+
+[3.13.11]
+* Update minio to 2024-04-18T19-09-19Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-04-18T19-09-19Z)
+* fix: add fallbackDisks for disk healing by @harshavardhana in #19425
+* fix: increase the tiering part size to 128MiB by @harshavardhana in #19424
+* heal: Add more per disk healing result in the audit by @vadmeste in #19427
+* batch-repl: Do not allow both source/target to be remote by @vadmeste in #19434
+* Allow setting readOnlyRootFilesystem in securityContext by @AlexanderThaller in #19437
+* Add a warning when the total size of an object versions exceeds 1 TiB by @vadmeste in #19435
+* make if-none-match PUT/POST RFC compliant by @harshavardhana in #19448
+* fix: unknow contentType for ArchiveFileHandler by @jiuker in #19451
+
+[3.13.12]
+* Update minio to 2024-04-28T17-53-50Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-04-28T17-53-50Z)
+* updating tests to use new mc --enc flags by @zveinn in #19508
+* fix: get rid of large buffers by @harshavardhana in #19549
+* cleanup: Simplify usage of MinIOSourceProxyRequest by @rluetzner in #19553
+* optimize ftp/sftp upload() implementations to avoid CPU load by @harshavardhana in #19552
+* add ILM + site-replication tests by @harshavardhana in #19554
+* Store object EC in metadata header by @klauspost in #19534
+* Reduce parallelReader allocs by @klauspost in #19558
+* make LRU cache global for internode tokens by @harshavardhana in #19555
+* fix: ignore signaturev2 for policy header check by @jiuker in #19551
+* build(deps): bump golang.org/x/net from 0.19.0 to 0.23.0 in /docs/debugging/s3-verify by @dependabot in #19559
+* Disable trailing header support for MinIO tiers by @krisis in #19561
+* re-use transport and set stronger backwards compatible Ciphers by @harshavardhana in #19565
+* do not panic on rebalance during server restarts by @harshavardhana in #19563
+* Fix RenameData data race by @klauspost in #19579
+* Remove leading zero strings in return value of (*xlMetaV2)getDataDirs() by @seiyab in #19567
+* fix: can't get total disksize for decom status by @jiuker in #19585
+* make renameData() more defensive during overwrites by @harshavardhana in #19548
+* Add system CPU metrics to metrics-v3 by @anjalshireesh in #19560
+* fix: avoid some IAM import errors if LDAP enabled by @donatello in #19591
+* simplify listener implementation setup customizations in right place by @harshavardhana in #19589
+* Add cluster notification metrics in metrics-v3 by @balamurugana in #19533
+* Fix few wrongly defined metric types by @anjalshireesh in #19586
+* fix: site-replication will reset group status when add user by @jiuker in #19594
+* Validates PostgreSQL table name by @ramondeklein in #19602
+* xl-meta: Allow combining multiple unversioned objects by @klauspost in #19604
+* support preserving renameData() on inlined content during overwrites by @harshavardhana in #19609
+* fix: IAM import for LDAP should replace mappings by @donatello in #19607
+* fix: IAM LDAP access key import bug by @donatello in #19608
+* Fixes an internal error while force-deleting a bucket by @ramondeklein in #19614
+* Update Console UI to v1.3.0 by @cesnietor in #19617
+* fix: LDAP init. issue when LDAP server is down by @donatello in #19619
+* heal: Fix regression in healing a new fresh drive by @vadmeste in #19615
+* add metrics ioerror counter for alerts on I/O errors by @harshavardhana in #19618
+* Fix DeleteObject API for unversioned objects with insufficient read q… by @poornas in #19581
+* deprecate usage of sha256-simd by @harshavardhana in #19621
+* heal: Avoid marking a bucket as done when remote drives are offline by @vadmeste in #19587
+* helm: fix port types in CiliumNetworkPolicy by @twelho in #19232
+* Add process metrics in metrics-v3 by @anjalshireesh in #19612
+* Handle failures in pool rebalancing by @Praveenrajmani in #19623
+* heal/list: Fix rare incomplete listing with flaky internode connections by @vadmeste in #19625
+* iam reload policy mapping of STS users properly by @poornas in #19626
+* a bunch of fixes for error handling by @harshavardhana in #19627
+
+[3.13.13]
+* Update minio to 2024-05-01T01-11-10Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-05-01T01-11-10Z)
+* Always unfreeze when connection dies by @klauspost in #19634
+* avoid data race for testing by @jiuker in #19635
+* Suppress metrics with zero values by @shtripat in #19638
+* Allow custom SFTP algorithm selection by @klauspost in #19636
+* fix: a crash in RemoveReplication target by @harshavardhana in #19640
+* ilm: Handle DeleteAllVersions action differently for DEL markers by @krisis in #19481
+
+[3.13.14]
+* Update minio to 2024-05-07T06-41-25Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-05-07T06-41-25Z)
+* Fix --stfp "mac-algos=..." overwrites cipher algorithms by @klauspost in #19643
+* enhance ListSVCs() API to return more info to avoid InfoSvc() by @harshavardhana in #19642
+* Wait one minute after startup to restart decommissioning by @klauspost in #19645
+* add logrotate support for MinIO logs by @harshavardhana in #19641
+* Return listing when exceeding min disk errors by @klauspost in #19644
+* fix: Filter out cust. AssumeRole Token for audit by @donatello in #19646
+* support compression after rotation of logs by @harshavardhana in #19647
+* Add cluster IAM metrics in metrics-v3 by @balamurugana in #19595
+* Use better gzip for log rotate by @klauspost in #19651
+* Change endpoint format for per-bucket metrics by @anjalshireesh in #19655
+* replication: Avoid proxying if requested object is a deletemarker by @poornas in #19656
+* With retention, skip actions expiring all versions by @krisis in #19657
+* extend server config.yaml to support per pool set drive count by @harshavardhana in #19663
+* Fix Walk missing entries with opts.Marker set by @klauspost in #19661
+* avoid using 10MiB EC buffers in maxAPI calculations by @harshavardhana in #19665
+* turn-off coloring if we have std{err,out} dumb terminals by @harshavardhana in #19667
+* add support for specific error response for InvalidRange by @harshavardhana in #19668
+* support 'mc support perf object' with root login disabled by @harshavardhana in #19672
+* fix: Ignore AWSAccessKeyId check for SignV2 policy condition by @jiuker in #19673
+* Make WalkDir return errors by @klauspost in #19677
+* support ETag value to be '*' by @harshavardhana in #19682
+* Update Console version to v1.4.0 by @bexsoft in #19684
+* Set Console Redirect URL env variable by @cesnietor in #19683
+* fix: collect quorum errors for deletePrefix() by @harshavardhana in #19685
+* Support user certificate based authentication on SFTP by @olljanat in #19650
+
+[3.13.15]
+* Update minio to 2024-05-10T01-41-38Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-05-10T01-41-38Z)
+* fix: unexpected credentials missing while passing (05/09/24)
+* remove references for MINIO_SERVER_URL (05/09/24)
+* add log-prefix name for specifying custom log-name (#19712) (05/09/24)
+* Revert "Fix incorrect merging of slash-suffixed objects (#19699)" (05/09/24)
+* fix: truncate Expiration to second when Add ServiceAccount (#19674) (05/10/24)
+* Fix incorrect merging of slash-suffixed objects (#19699) (05/09/24)
+* deprecate unexpected healing failed counters (#19705) (05/09/24)
+* pass around correct endpoint while registering remote storage (#19710) (05/09/24)
+* ldap-import: Add additional logs (#19691) (05/09/24)
+* results must be a single channel to avoid overwriting healing.bin (#19702) (05/09/24)
+* chore: use errors.New to replace fmt.Errorf with no parameters (#19568) (05/09/24)
+* upgrade to go1.22.x (05/09/24)
+* allow caller context during reloads() to cancel (#19687) (05/08/24)
+* grid: Fix a window of a disconnected node not marked as offline (#19703) (05/09/24)
+* Accept multipart checksums with part count (#19680) (05/08/24)
+* kms: add support for MinKMS and remove some unused/broken code (#19368) (05/08/24)
+* return appropriate error upon reaching maxClients() (#19669) (05/07/24) 
+
+[3.13.16]
+* Update minio to 2024-05-27T19-17-46Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-05-27T19-17-46Z)
+* Major optimization in handling hung network disconnects, and related tests and hardening added #19719, #19605, #19741
+* Fix a medium CVE for information disclosure - during GETs with conditional headers such as If-modified-since, if-unmodified-since #19810
+
+[3.13.17]
+* Update minio to 2024-05-28T17-19-04Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-05-28T17-19-04Z)
+
+[3.13.18]
+* Update minio to 2024-06-04T19-20-08Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-04T19-20-08Z)
+
+[3.13.19]
+* Update minio to 2024-06-06T09-36-42Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-06T09-36-42Z)
+
+[3.13.20]
+* Update minio to 2024-06-11T03-13-30Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-11T03-13-30Z)
+* Disable caching of encrypted objects by @klauspost in #19890
+* Calculate correct object size while replication by @shtripat in #19888
+* Don't tier directory objects by @krisis in #19891
+* Update docker build script to pull all changes by @donatello in #19892
+* Two way streams fixes - take 2 by @klauspost in #19796
+
+[3.13.21]
+* Update minio to 2024-06-13T22-53-53Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-13T22-53-53Z)
+
+[3.13.22]
+* Update minio to 2024-06-22T05-26-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-22T05-26-45Z)
+
+[3.13.23]
+* Update minio to 2024-06-26T01-06-18Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-26T01-06-18Z)
+
+[3.13.24]
+* Update minio to 2024-06-28T09-06-49Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-28T09-06-49Z)
+
+[3.13.25]
+* Update minio to 2024-06-29T01-20-47Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-29T01-20-47Z)
+
+[3.13.26]
+* Update minio to 2024-07-04T14-25-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-04T14-25-45Z)
+
+[3.13.27]
+* Update minio to 2024-07-10T18-41-49Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-10T18-41-49Z)
+* Add typos check to Makefile by @vadmeste in #20051
+* Abstract grid connections by @klauspost in #20038
+* Fix documentation for removal of delete markers ILM rule by @allanrogerr in #20056
+* batch: Update job info object on success by @krisis in #20053
+* Log replication errors once by @shtripat in #20063
+
+[3.13.28]
+* Update minio to 2024-07-13T01-46-15Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-13T01-46-15Z)
+
+[3.13.29]
+* Update minio to 2024-07-15T19-02-30Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-15T19-02-30Z)
+
+[3.13.30]
+* Update minio to 2024-07-16T23-46-41Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-16T23-46-41Z)
+
+[3.13.31]
+* Update minio to 2024-07-26T20-48-21Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-26T20-48-21Z)
+
+[3.13.32]
+* Update minio to 2024-07-29T22-14-52Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-29T22-14-52Z)
+
+[3.13.33]
+* Update minio to 2024-07-31T05-46-26Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-31T05-46-26Z)
+
+[3.13.34]
+* Update minio to 2024-08-03T04-33-23Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-08-03T04-33-23Z)
+
+[3.13.35]
+* Update minio to 2024-08-17T01-24-54Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-08-17T01-24-54Z)
+
+[3.13.36]
+* Update minio to 2024-08-26T15-33-07Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-08-26T15-33-07Z)
+
+[3.13.37]
+* Update minio to 2024-08-29T01-40-52Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-08-29T01-40-52Z)
+* fix: string format when log IAM refresh take over 5s by @jiuker in #20331
+* when a drive is closed cancel the cleanupTrash goroutine by @harshavardhana in #20337
+* add more details on the payload sent to webhook audit by @harshavardhana in #20335
+* bucket-metadata: Reload events/repl-targets for all buckets by @vadmeste in #20334
+
+[3.13.38]
+* Update minio to 2024-09-09T16-59-28Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-09-09T16-59-28Z)
+* Skip non existent ldap entities while import (#20352)
+* Dont hard error for nonexisting LDAP entries instead of logging them
+
+[3.13.39]
+* Update minio to 2024-09-13T20-26-02Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-09-13T20-26-02Z)
+* PutObject() for multi-pooled was holding large region locks, which was not necessary. This affects almost all slowpoke clients and lengthy uploads.
+* Re-arrange locks for CompleteMultipart, PutObject to be close to rename()
+
+[3.14.0]
+* Update minio to 2024-09-22T00-33-43Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-09-22T00-33-43Z)
+* Limit S3 Select JSON documents to 10MB by @klauspost in #20439
+* remove windows CI/CD for now by @harshavardhana in #20441
+* Fix behavior of AddServiceAccountLDAP for non-admin users by @taran-p in #20442
+* Added iam import tests for openid by @shtripat in #20432
+* batch: Set a default retry attempts and a prefix by @vadmeste in #20452
+* Ensure proper stale_uploads_cleanup_interval is used at all times by @ramondeklein in #20451
+
+[3.15.0]
+* Update minio to 2024-10-02T17-50-41Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-10-02T17-50-41Z)
+* Limit jstream parse depth by @klauspost in #20474
+* remove the list from 'mc stat' from testing via '--no-list' by @harshavardhana in #20468
+* cleanup existing part.N's before renamePart() by @harshavardhana in #20466
+* hold on to batch job stats till cleanup by @poornas in #20480
+* use absolute path for binary checksum verification by @harshavardhana in #20487
+* Fix PPC cgroup memory limit by @klauspost in #20488

CloudronManifest.json

@@ -5,8 +5,8 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Distributed object storage",
-  "version": "3.13.4",
+  "version": "3.15.0",
-  "upstreamVersion": "2024-03-07T00-43-48Z",
+  "upstreamVersion": "RELEASE.2024-10-02T17-50-41Z",
   "healthCheckPath": "/minio/login",
   "memoryLimit": 2147483648,
   "httpPort": 8000,

Dockerfile

@@ -3,7 +3,8 @@ FROM cloudron/base:4.2.0@sha256:46da2fffb36353ef714f97ae8e962bd2c212ca091108d768
 RUN mkdir -p /app/code
 WORKDIR /app/code
 
-ARG VERSION=RELEASE.2024-03-07T00-43-48Z
+# renovate: datasource=github-releases packageName=minio/minio extractVersion=^(?<version>.+)$ versioning=regex:^RELEASE\.(?<major>\d{4})-(?<minor>\d{2})-(?<patch>\d{2})T(?<build>.+)
+ARG VERSION=RELEASE.2024-10-02T17-50-41Z
 
 # sometimes here https://dl.min.io/server/minio/release/linux-amd64/archive/
 # RUN wget https://dl.min.io/server/minio/release/linux-amd64/minio.${VERSION} -O /app/code/minio && chmod +x /app/code/minio

renovate.json

@@ -0,0 +1,6 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "local>devops/renovator//config/app/default.json5"
+  ]
+}

test/package.json

@@ -9,10 +9,10 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "chromedriver": "^122.0.4",
+    "chromedriver": "^129.0.0",
     "expect.js": "^0.3.1",
-    "mocha": "^10.3.0",
+    "mocha": "^10.7.3",
-    "selenium-webdriver": "^4.18.1",
+    "selenium-webdriver": "^4.25.0",
-    "superagent": "^8.1.2"
+    "superagent": "^10.1.0"
   }
 }

test/test.js

@@ -1,11 +1,7 @@
 #!/usr/bin/env node
 
 /* jshint esversion: 8 */
-/* global describe */
+/* global it, xit, describe, before, after, afterEach */
-/* global before */
-/* global after */
-/* global it */
-/* global xit */
 
 'use strict';
 
@@ -28,24 +24,38 @@ if (!process.env.USERNAME || !process.env.PASSWORD) {
 describe('Application life cycle test', function () {
     this.timeout(0);
 
-    const LOCATION = 'test';
+    const LOCATION = process.env.LOCATION || 'test';
     const TEST_TIMEOUT = parseInt(process.env.TIMEOUT, 10) || 30000;
     const BUCKET = 'cloudrontestbucket';
     const EXEC_ARGS = { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' };
 
     let browser, app;
     let athenticated_by_oidc = false, rootPassword;
-    let username = process.env.USERNAME;
+    const username = process.env.USERNAME;
-    let password = process.env.PASSWORD;
+    const password = process.env.PASSWORD;
 
     before(function () {
-        browser = new Builder().forBrowser('chrome').setChromeOptions(new Options().windowSize({ width: 1280, height: 1024 })).build();
+        const chromeOptions = new Options().windowSize({ width: 1280, height: 1024 });
+        if (process.env.CI) chromeOptions.addArguments('no-sandbox', 'disable-dev-shm-usage', 'headless');
+        browser = new Builder().forBrowser('chrome').setChromeOptions(chromeOptions).build();
+        if (!fs.existsSync('./screenshots')) fs.mkdirSync('./screenshots');
     });
 
     after(function () {
         browser.quit();
     });
 
+    afterEach(async function () {
+        if (!process.env.CI || !app) return;
+
+        const currentUrl = await browser.getCurrentUrl();
+        if (!currentUrl.includes(app.domain)) return;
+        expect(this.currentTest.title).to.be.a('string');
+
+        const screenshotData = await browser.takeScreenshot();
+        fs.writeFileSync(`./screenshots/${new Date().getTime()}-${this.currentTest.title.replaceAll(' ', '_')}.png`, screenshotData, 'base64');
+    });
+
     async function waitForElement(elem) {
         await browser.wait(until.elementLocated(elem), TEST_TIMEOUT);
         await browser.wait(until.elementIsVisible(browser.findElement(elem)), TEST_TIMEOUT);