2016-03-25 00:31:19 +00:00
|
|
|
# encoding: utf-8
|
|
|
|
# author: Dominik Richter
|
|
|
|
# author: Christoph Hartmann
|
|
|
|
|
|
|
|
require 'functional/helper'
|
|
|
|
|
|
|
|
describe 'inspec exec' do
|
|
|
|
include FunctionalHelper
|
|
|
|
|
|
|
|
it 'can execute the profile' do
|
|
|
|
out = inspec('exec ' + example_profile)
|
|
|
|
out.stderr.must_equal ''
|
|
|
|
out.exit_status.must_equal 0
|
2016-06-15 17:27:56 +00:00
|
|
|
stdout = out.stdout.force_encoding(Encoding::UTF_8)
|
|
|
|
stdout.must_include "\n\e[32m ✔ ssh-1: Allow only SSH Protocol 2\e[0m\n"
|
|
|
|
stdout.must_include "\n\e[32m ✔ tmp-1.0: Create /tmp directory\e[0m\n"
|
|
|
|
stdout.must_include "\n\e[37m ○ gordon-1.0: Verify the version number of Gordon (1 skipped)\e[0m\n"
|
|
|
|
stdout.must_include "\nSummary: 4 successful 0 failures 1 skipped\n"
|
2016-03-25 00:31:19 +00:00
|
|
|
end
|
|
|
|
|
2016-06-14 12:41:45 +00:00
|
|
|
it 'executes a minimum metadata-only profile' do
|
|
|
|
out = inspec('exec ' + File.join(profile_path, 'simple-metadata'))
|
2016-03-25 00:31:19 +00:00
|
|
|
out.stderr.must_equal ''
|
|
|
|
out.exit_status.must_equal 0
|
2016-06-14 12:41:45 +00:00
|
|
|
out.stdout.must_equal "
|
|
|
|
Profile: yumyum profile
|
|
|
|
Version: unknown
|
|
|
|
|
|
|
|
|
|
|
|
Summary: 0 successful 0 failures 0 skipped
|
|
|
|
"
|
2016-03-25 00:31:19 +00:00
|
|
|
end
|
|
|
|
|
2016-06-14 12:41:45 +00:00
|
|
|
it 'executes a metadata-only profile' do
|
|
|
|
out = inspec('exec ' + File.join(profile_path, 'complete-metadata'))
|
2016-03-25 00:31:19 +00:00
|
|
|
out.stderr.must_equal ''
|
|
|
|
out.exit_status.must_equal 0
|
2016-06-14 12:41:45 +00:00
|
|
|
out.stdout.must_equal "
|
|
|
|
Profile: title (name)
|
|
|
|
Version: 1.2.3
|
|
|
|
|
|
|
|
|
|
|
|
Summary: 0 successful 0 failures 0 skipped
|
|
|
|
"
|
2016-03-25 00:31:19 +00:00
|
|
|
end
|
|
|
|
|
2016-06-14 12:41:45 +00:00
|
|
|
it 'executes a specs-only profile' do
|
|
|
|
out = inspec('exec ' + File.join(profile_path, 'spec_only'))
|
2016-04-11 14:30:35 +00:00
|
|
|
out.stderr.must_equal ''
|
2016-06-14 12:41:45 +00:00
|
|
|
out.exit_status.must_equal 1
|
2016-06-15 17:27:56 +00:00
|
|
|
out.stdout.force_encoding(Encoding::UTF_8).must_equal "
|
|
|
|
\e[32m ✔ working should eq \"working\"\e[0m
|
|
|
|
\e[37m ○ skippy This will be skipped intentionally.\e[0m
|
|
|
|
\e[31m ✖ failing should eq \"as intended\"
|
2016-06-14 12:41:45 +00:00
|
|
|
expected: \"as intended\"
|
|
|
|
got: \"failing\"
|
|
|
|
|
|
|
|
(compared using ==)
|
|
|
|
\e[0m
|
|
|
|
|
|
|
|
Summary: 1 successful 1 failures 1 skipped
|
|
|
|
"
|
2016-04-11 14:30:35 +00:00
|
|
|
end
|
|
|
|
|
2016-06-14 12:41:45 +00:00
|
|
|
it 'executes only specified controls' do
|
|
|
|
out = inspec('exec ' + example_profile + ' --controls tmp-1.0')
|
2016-04-11 14:30:35 +00:00
|
|
|
out.stderr.must_equal ''
|
|
|
|
out.exit_status.must_equal 0
|
2016-06-14 12:41:45 +00:00
|
|
|
out.stdout.must_include "\nSummary: 1 successful 0 failures 0 skipped\n"
|
2016-04-11 14:30:35 +00:00
|
|
|
end
|
|
|
|
|
2016-06-14 12:41:45 +00:00
|
|
|
it 'can execute a simple file with the default formatter' do
|
|
|
|
out = inspec('exec ' + example_control)
|
|
|
|
out.stderr.must_equal ''
|
|
|
|
out.exit_status.must_equal 0
|
|
|
|
out.stdout.must_include 'Summary: 2 successful 0 failures 0 skipped'
|
2016-03-25 00:31:19 +00:00
|
|
|
end
|
|
|
|
|
2016-04-05 16:07:00 +00:00
|
|
|
describe 'with a profile that is not supported on this OS/platform' do
|
2016-04-17 00:04:10 +00:00
|
|
|
let(:out) { inspec('exec ' + File.join(profile_path, 'skippy-profile-os')) }
|
2016-04-05 16:07:00 +00:00
|
|
|
let(:json) { JSON.load(out.stdout) }
|
|
|
|
|
2016-04-17 00:04:10 +00:00
|
|
|
it 'exits with an error' do
|
|
|
|
out.stderr.must_match /^This OS\/platform \(.+\) is not supported by this profile.$/
|
|
|
|
out.exit_status.must_equal 1
|
2016-04-05 16:07:00 +00:00
|
|
|
end
|
2016-04-17 00:04:10 +00:00
|
|
|
end
|
2016-04-05 16:07:00 +00:00
|
|
|
|
2016-04-16 19:34:23 +00:00
|
|
|
describe 'with a profile that is supported on this version of inspec' do
|
|
|
|
let(:out) { inspec('exec ' + File.join(profile_path, 'supported_inspec')) }
|
|
|
|
|
|
|
|
it 'exits cleanly' do
|
|
|
|
out.stderr.must_equal ''
|
|
|
|
out.exit_status.must_equal 0
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
describe 'with a profile that is not supported on this version of inspec' do
|
|
|
|
let(:out) { inspec('exec ' + File.join(profile_path, 'unsupported_inspec')) }
|
|
|
|
|
|
|
|
it 'does not support this profile' do
|
|
|
|
out.exit_status.must_equal 1
|
|
|
|
out.stderr.must_equal "This profile requires InSpec version >= 99.0.0. You are running InSpec v#{Inspec::VERSION}.\n"
|
|
|
|
end
|
|
|
|
end
|
2016-06-03 19:36:16 +00:00
|
|
|
|
|
|
|
describe 'with a profile that loads a library and reference' do
|
|
|
|
let(:out) { inspec('exec ' + File.join(profile_path, 'library')) }
|
|
|
|
|
|
|
|
it 'executes the profile without error' do
|
|
|
|
out.exit_status.must_equal 0
|
|
|
|
end
|
|
|
|
end
|
2016-03-25 00:31:19 +00:00
|
|
|
end
|