Mirrors/inspec
2
0
Fork 0
mirror of https://github.com/inspec/inspec synced 2024-11-23 13:13:22 +00:00
Code Issues Projects Releases Packages Wiki Activity
3511 commits 453 branches 1898 tags 74 MiB
Commit graph

744 commits

Author SHA1 Message Date
jtimberman
d7fad68541 add "packages" resource 
This pull request adds a packages resource so that we can check for pattern matches against all the packages on a system. This initially implements only dpkg support for debian-based platforms so we can cover this use case:

```ruby
describe packages(/^xserver-xorg.*/) do
  its("list") { should be_empty }
end
```

This uses FilterTable so we can supply additional queries, too.

```ruby
describe packages(/vi.+/).where { status != 'installed' } do
  its('statuses') { should be_empty }
end
```

Users can specify the name as a string or a regular expression. If it is a string, we will escape it and convert it to a regular expression to use in matching against the full returned list of packages. If it is a regular expression, we take that as is and use it to filter the results.

While some package management systems such as `dpkg` can take a shell glob argument to filter their results, we eschew this and require a regular expression to match multiple package names because we will need this to work across other platforms in the future. This means that the following:

```ruby
packages("vim")
```

Will return *all* the "vim" packages on the system. The `packages` resource will take `"vim"`, turn it into `/vim/`, and greedily match anything with "vim" in the name. To match only a single package named `vim`, it needs to be an anchored regular expression.

```ruby
packages(/^vim$/)
```

Signed-off-by: Joshua Timberman <joshua@chef.io>

Use entries instead of list

Added a few more tests and non installed package in output
Signed-off-by: Alex Pop <apop@chef.io>

fix lint

Signed-off-by: Alex Pop <apop@chef.io>

Signed-off-by: Joshua Timberman <joshua@chef.io>
 2017-02-07 10:29:11 +00:00
Alex Pop
52842de552 Provide a way to force it vs its for any argument 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-02-03 19:26:02 +00:00
Alex Pop
920ff068e6 Allow setting of the tests array 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-02-03 15:03:09 +00:00
Alex Pop
83e44f9d2a add another variable handling example test 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-02-03 08:28:46 +00:00
Alex Pop
f7444ed372 update the tests to reflect the list->entries migration and where support 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-02-03 08:28:46 +00:00
Christoph Hartmann
58585e3455 switch to faraday as http backend 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2017-02-02 22:13:36 +01:00
Alex Pop
495185b581 derive xinetd protocol from socket_type when not defined in the config file 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-02-01 11:19:24 +00:00
Alex Pop
6f3a9d22d7 define protocol as done in CentOS 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-01-31 14:47:21 +00:00
Alex Pop
a3de32ad04 Fix xinetd parsing of services from the same file. Expose resource.protocols 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-01-31 12:40:29 +00:00
Alex Pop
80ad877e02 Wrap regex in parenthesis no matter of the matcher used, ex: match, cmp 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-01-30 11:51:06 +00:00
Alex Pop
5a087bd256 Add matchers and expectations to all object tests 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-01-30 11:21:57 +00:00
Alex Pop
11429a54d3 Add Inspec::Variable test to a control 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-01-30 11:01:02 +00:00
Alex Pop
ce90f0aa30 Add Inspec::List and Inspec::Control tests 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-01-30 11:01:02 +00:00
Alex Pop
660b997342 Add negate! support for the describe.one object 
Signed-off-by: Alex Pop <apop@chef.io>
 2017-01-30 11:01:02 +00:00
Christoph Hartmann
78b7a2c680 Merge pull request #1435 from postgred/kernel_module_version 
Version method for kernel_module
 2017-01-27 17:49:23 +01:00
Andrey Aleksandrov
3783357e50
Add version method to kernel_module 
Signed-off-by: Andrey Aleksandrov <postgred@gmail.com>
 2017-01-27 13:33:41 +03:00
Christoph Hartmann
976e5d85e4 improve http header handling 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2017-01-26 17:16:37 +01:00
Guilhem Lettron
51ca98c468 Add an http test method 
Signed-off-by: Guilhem Lettron <g.lettron@criteo.com>
 2017-01-26 12:02:54 +01:00
Christoph Hartmann
c2d92d8e86 use new devsec baseline 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2017-01-25 20:22:38 +01:00
Christoph Hartmann
efab62ef00 optimize regular expression for postgres config parsing 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2017-01-05 13:16:47 +01:00
Jeremy J. Miller
72b0c0dd2e control and lib eval unit tests 
Signed-off-by: Jeremy J. Miller <jm@chef.io>
 2017-01-04 11:33:14 -05:00
Wei, He
370269c2dd Yum.repo should show correct name 
https://github.com/chef/inspec/issues/1390

Signed-off-by: Wei, He <weihe924stephen@gmail.com>
 2017-01-04 11:10:38 +09:00
Dominik Richter
74ed60ce5f Merge pull request #1387 from jvrplmlmn/package-brew-unit-test 
Unit test the 'package' resource for OSX (with brew)
 2017-01-03 12:24:46 +01:00
Christoph Hartmann
07ee8ecd66 call ssh cookbook from prepare cookbook 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2017-01-03 11:40:09 +01:00
Christoph Hartmann
ab097ef8d1 update functional tests 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2017-01-03 11:06:05 +01:00
Javier Palomo Almena
07b41eb9df Fix wrong description for the Solaris cases in the unit tests of the 'package' resource 
Obvious fix.

Signed-off-by: Javier Palomo Almena <javier.palomo.almena@gmail.com>
 2017-01-02 18:06:59 +01:00
Javier Palomo Almena
8ab8fcdda5 Unit test the package resource for Darwin 
Signed-off-by: Javier Palomo Almena <javier.palomo.almena@gmail.com>
 2017-01-02 17:57:41 +01:00
Javier Palomo Almena
3f1986eb6f Mock 'brew info --json=v1 curl' to facilitate unit testing the package resource for the darwin platform 
Signed-off-by: Javier Palomo Almena <javier.palomo.almena@gmail.com>
 2017-01-02 17:57:20 +01:00
Christoph Hartmann
7a0b0803bd add fallback syntax for serverspec tests 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-12-15 16:16:17 +01:00
Christoph Hartmann
6e2b21e1f8 Merge pull request #1366 from makotots/mn/json-variable-name-fix 
JSON resource's error message is missing filename when file is not found
 2016-12-15 15:17:28 +01:00
Makoto Nozaki
42cffeea61 Fix variable name. Add test. 
Signed-off-by: Makoto Nozaki <makoto.nozaki@twosigma.com>
 2016-12-15 08:00:56 -05:00
Jeremy J. Miller
6481f00454 cmp better support for version ops 
Signed-off-by: Jeremy J. Miller <jm@chef.io>
 2016-12-14 23:45:38 -05:00
Franklin Webber
4695c9e7be Fixes for functional tests and better displaying dep. profiles 
* Fixes an issue when specifying no profile
* Fixes an issue when displaying a profile that has included/required profiels
* Fixes an issue when specifying profiles with only metadata
* Fixes formatting for spacing to ensure it adheres to previous alignment
* Fixes issue with the Control object and the rolling up of failed
  and skipped examples.

Signed-off-by: Franklin Webber <franklin@chef.io>
 2016-12-14 13:34:53 -06:00
Lee Briggs
02530310cd Updating tests for profile versions 
Signed-off-by: Lee Briggs <lbriggs@apptio.com>
 2016-12-14 16:20:27 +00:00
Christoph Hartmann
1472fd4bff deactivate functional tests until logging is reintroduced 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-12-02 19:52:34 +01:00
Victoria Jeffrey
bdf5eae15e Extend inspec compliance cli to support automate backend 
Signed-off-by: Victoria Jeffrey <vjeffrey@chef.io>
 2016-11-30 13:27:50 +01:00
Christoph Hartmann
db4ce72407 merge json tests for vendored profiles 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-11-30 11:17:17 +01:00
Christoph Hartmann
8346d2acfd Merge pull request #1333 from Wing924/fix_regexp_in_processes 
fix bug: RegExp in processes resource can't match long-run process #1332
 2016-11-30 10:13:38 +01:00
Wei, He
fd04daf77c add testcase for #1332 
Signed-off-by: Wei, He <weihe924stephen@gmail.com>
 2016-11-30 13:25:44 +09:00
Christoph Hartmann
826c9fd4c8 add functional tests for tar lockfile reading 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-11-30 00:37:47 +01:00
Christoph Hartmann
8808c57cae Extend functional tests for vending based on feedback from @alexpop 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-11-29 23:40:42 +01:00
Christoph Hartmann
5bfc9745e3 move default cache creation to profile implementation 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-11-29 14:28:03 +01:00
Juan Carlos Castillo Cano
58ef61f1f4 Show process name during inspec output 
Signed-off-by: Juan Carlos Castillo Cano <jccastillocano@gmail.com>
 2016-11-29 11:00:43 +00:00
Christoph Hartmann
a990d20fcd Merge pull request #1306 from username-is-already-taken2/digitalgaz/windows_task 
Adding windows_task resource
 2016-11-25 11:46:42 -07:00
Christoph Hartmann
ded7d4c3c4 Merge pull request #1304 from jkerry/AddJUnitFormatterSupport 
Adding JUnit formatter support
 2016-11-25 11:33:45 -07:00
hannah-radish
91fe22f044 Replaced Colors for output 
Signed-off-by: hannah-radish <hannah@radish-life.com>
 2016-11-23 20:19:18 -07:00
hannah-radish
ebb3bc729a Introduce new (awesome) CLI icons for results 
Signed-off-by: Hannah Maddy hannah@radish-life.com
 2016-11-23 20:06:17 -07:00
jkerry
944040fcf9 adding functional tests for the junit rspec formatter 
Signed-off-by: jkerry <john@kerryhouse.net>
 2016-11-22 14:45:34 -05:00
jkerry
3ee2808e08 Adding the initial top-level functional tests for inspec result junit xml 
Signed-off-by: jkerry <john@kerryhouse.net>
 2016-11-21 08:06:46 -05:00
username-is-already-taken2
e6e47eec4c Added unit tests, only took most of the night :) 2016-11-20 20:07:59 +00:00
username-is-already-taken2
20de35157c Added integration tests 2016-11-20 20:07:59 +00:00
Christoph Hartmann
e3347f0ef0 ensure metadata release entry is a string, even if yml thinks it is a float 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-11-20 12:38:27 -07:00
Christoph Hartmann
fef4f9447b add functional tests 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-11-09 11:49:51 -06:00
Christoph Hartmann
2c75a2c8db Merge pull request #1280 from grimm26/apt 
improved regex for matching deb sources
 2016-11-09 11:19:13 -06:00
Mark Keisler
bd33aa7175 improved regex for matching deb sources 
also added tests.
Signed-off-by: Mark Keisler <mark@mitsein.net>
 2016-11-09 11:10:46 -06:00
Christoph Hartmann
66449cae32 add functional tests 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-11-09 09:12:10 -06:00
Christoph Hartmann
4b22400012 update functional tests 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-11-04 18:01:28 +01:00
Christoph Hartmann
7d7e1efef3 move file mount test to mount_spec.rb 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-11-03 22:23:50 +01:00
Christoph Hartmann
e78d682c24 activate file integration tests in docker 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-11-03 22:13:45 +01:00
Artem Sidorenko
9d766252f7 Contain matcher maps to include matcher with warning 
to allow easier migration from serverspec, where contain
matcher is used often

Signed-off-by: Artem Sidorenko <artem@posteo.de>
 2016-11-03 20:58:34 +01:00
Dave Parfitt
51378d326b adds profile signing/verification 
Signed-off-by: Dave Parfitt <dparfitt@chef.io>
 2016-10-27 14:44:10 +02:00
Christoph Hartmann
9d86f7b022 Fix unit test and activate verbose mock backend to see missing command in cli output 
Signed-off-by: Christoph Hartmann <chris@lollyrock.com>
 2016-10-27 14:33:34 +02:00
Jeremy J. Miller
5494ec0c60 refactored file resource unit tests 
Signed-off-by: Jeremy J. Miller <jm@chef.io>
 2016-10-26 15:57:30 +02:00
Jeremy J. Miller
cda492af96 file/dir permissions for os_prepare file recipe 
Signed-off-by: Jeremy J. Miller <jm@chef.io>
 2016-10-26 15:57:30 +02:00
Jeremy J. Miller
c4abbed2a6 adding integration test 
Signed-off-by: Jeremy J. Miller <jm@chef.io>
 2016-10-26 15:57:30 +02:00
Alex Pop
70416a35b4 use command instead of comm and set user column width on linux 
Signed-off-by: Alex Pop <apop@chef.io>
 2016-10-17 15:39:13 +01:00
Anirudh Gupta
8efec7ac6c fix processes resource for os's where username is long to avoid truncation 2016-10-17 11:46:16 +01:00
Alex Pop
5d51b7a0aa dot inspect actual value to match the expected string one 2016-10-13 07:13:51 -07:00
Alex Pop
6719cf544d add tests for cmp output 2016-10-10 05:40:22 -07:00
Artem Sidorenko
77738dd895 Some further tests for Mint 2016-10-08 23:34:56 +02:00
Artem Sidorenko
aa725fe2df Linux Mint support for service resource 2016-10-08 23:34:56 +02:00
Alex Pop
10116724fc Missing registry keys should not exist 2016-10-05 14:55:04 +02:00
Dominik Richter
441967510f bugfix: support nil entries in filter table 2016-10-05 13:04:00 +02:00
Victoria Jeffrey
47c6427082 print profile info before test results (inherited profiles) 2016-09-27 10:39:35 -04:00
Steven Danna
7aa4c6da8e Fix require_controls DSL method 
Previous, require_controls was including all controls from the named
profile, despite the documented behavior being that it only includes
controls explicitly pulled in by the user.  The cause was two-fold:

1) A previous refactor meant that we weren't removing the rule from the
correct context, and

2) We weren't descending down the dependency tree when filtering rules.

This commit fixes the require_controls DSL method and adds a test to
help prevent future regressions.

Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-26 15:20:56 +02:00
Steven Danna
f23a0d1098
Bump lockfile version to 1.0 
Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-26 09:51:04 +01:00
Christoph Hartmann
dab8ff5c13 replace wmi win32_useraccount with adsi users 2016-09-26 01:31:44 +02:00
Alex Pop
13da437dcc Show skip_message and correct title 2016-09-23 07:47:21 +01:00
Christoph Hartmann
f7ec24a337 implement filter table for group/groups resource 2016-09-23 00:53:24 +02:00
Steven Danna
d29e8768ca Rename --no-write-lockfile to --no-create-lockfile 
Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-22 10:08:32 +02:00
Steven Danna
2f3a916080 Always write lockfiles for local top-level profiles 
This commit threads through some state related to whether or not a
profile is "local", that is whether it is a directory on disk.  If it
is, we then write out the lockfile to disk.

Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-22 10:08:32 +02:00
Steven Danna
8d63db9a2b
Change :shasum key to :sha256 for future upgrade 
Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-21 10:51:04 +01:00
Steven Danna
6814d6ad2b
Fail if a remote source content doesn't match lockfile 
If a URL based source does not match the shasum recorded in the
lockfile, it likely means a new version has been pushed to the remote
source. In this case, we fail to help ensure that when using a lockfile
we always run the same code as when the lockfile was created.

Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-21 10:15:52 +01:00
David Pell
155995adfd In ApacheConf#include_files, check for abs paths 
If the path is absolute, just use what was passed, otherwise build an
absolute path using `@conf_dir`.

Fixes #1013
 2016-09-20 09:11:09 -04:00
Alex Pop
e1faebd527 Include code description in the output of failed controls 2016-09-20 10:10:08 +01:00
Steven Danna
b2146d8758 Allow users to reference resources from dependencies 
All resources from deps are added into the control_eval_context used by
the current profile. However, if there is a name conflict, the last
loaded resource wins. The new `require_resource` dsl method allows the
user to do the following:

    require_resource(profile: 'profile_name',
                     resource: 'other',
                    as: 'renamed')

    describe renamed do
      ...
    end

Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-19 19:08:43 +02:00
Christoph Hartmann
17ce99df7f use Gem::Version instead of a regular expression for a test version bump 2016-09-19 18:58:30 +02:00
Dominik Richter
6792550f8c adopt new json formatting 2016-09-19 13:45:03 +02:00
Dominik Richter
38f2680cf4 static keys in all json 2016-09-19 12:00:14 +02:00
Victoria Jeffrey
ecac8ae9cb print profile summary and test summary 2016-09-18 21:53:16 -04:00
Steven Danna
be1a61f2e5 Process transitive dependencies from lock file 
This is a regression introduced by the changes from string to symbol
keys in v0.34.0. It seems that our test cookbook that had a nested
dependency example wasn't actually wired up to run.

This adds a basic functional test and corrects the typo.

Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-15 09:41:40 +02:00
Christoph Hartmann
5088795ffc Merge pull request #1077 from chef/ssd/no-gpg-for-you 
Don't gpg-sign commits during tests
 2016-09-14 17:57:35 +02:00
Steven Danna
7fbb768fc7 Don't gpg-sign commits during tests 
If you have gpg singing globally enabled, the tests would ask you for
your gpg pin.  This is not fun.

Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-14 17:50:37 +02:00
Christoph Hartmann
178156499f Merge pull request #1076 from chef/ssd/issue-1074 
Ensure resources are visible inside its blocks
 2016-09-14 17:48:26 +02:00
Steven Danna
8024eea8b7
Ensure resources are visible inside its blocks 
The recent changes to provide isolated views of the available resources
was not extended to Rspec::ExampleGroups. This ensures that
ExampleGroups have access to the same resources as the enclosing
Inspec::Rule.

Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-14 16:27:59 +01:00
Steven Danna
f2e587f6d5
Skip controls from profile's that don't support the current platform 
Any controls included from profiles that don't support our current
platform are now marked as skipped.

Fixes #1049
 2016-09-14 09:57:53 +01:00
Steven Danna
8f10ee53c5 Provide inspec.yml shortcut syntax 
- Allow users to elide the `name` attributes
- Assume a default source of supermarket

Fixes #1048

Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-14 08:46:06 +02:00
Christoph Hartmann
9c7d06c167 use simple config for security policy resource 2016-09-12 12:20:57 +02:00
Steven Danna
b48b9edae9
Improve duplicate and cycle detection in resolver 
Signed-off-by: Steven Danna <steve@chef.io>
 2016-09-12 10:57:55 +01:00
Christoph Hartmann
a2143b8249 identify enabled/disabled accounts for windows 2016-09-12 11:40:25 +02:00