mirror of
https://github.com/inspec/inspec
synced 2024-11-14 00:47:10 +00:00
274 lines
8.9 KiB
Ruby
274 lines
8.9 KiB
Ruby
require "functional/helper"
|
|
require "tmpdir"
|
|
|
|
describe "example inheritance profile" do
|
|
include FunctionalHelper
|
|
|
|
parallelize_me!
|
|
|
|
it "can vendor profile dependencies" do
|
|
prepare_examples("inheritance") do |dir|
|
|
out = inspec("vendor " + dir + " --overwrite")
|
|
|
|
_(out.stdout).must_include "Dependencies for profile #{dir} successfully vendored to #{dir}/vendor"
|
|
|
|
_(File.exist?(File.join(dir, "vendor"))).must_equal true
|
|
_(File.exist?(File.join(dir, "inspec.lock"))).must_equal true
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
it "can vendor profile dependencies with a relative path" do
|
|
prepare_examples("inheritance") do |dir|
|
|
relative_path = File.join(dir, "../", File.basename(dir))
|
|
out = inspec("vendor " + relative_path + " --overwrite")
|
|
|
|
_(File.exist?(File.join(dir, "vendor"))).must_equal true
|
|
_(File.exist?(File.join(dir, "inspec.lock"))).must_equal true
|
|
_(Dir.glob(File.join(dir, "vendor", "*"))).wont_be_empty
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
it "can vendor profile dependencies with a backslash in path on Windows" do
|
|
return unless is_windows?
|
|
|
|
prepare_examples("inheritance") do |dir|
|
|
dir_with_backslash = File.join(dir, "..\\", File.basename(dir))
|
|
out = inspec("vendor " + dir_with_backslash + " --overwrite")
|
|
|
|
_(File.exist?(File.join(dir, "vendor"))).must_equal true
|
|
_(File.exist?(File.join(dir, "inspec.lock"))).must_equal true
|
|
_(Dir.glob(File.join(dir, "vendor", "*"))).wont_be_empty
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
it "can vendor profile dependencies from the profile path" do
|
|
prepare_examples("inheritance") do |dir|
|
|
out = inspec("vendor --overwrite", "cd #{dir} &&")
|
|
|
|
# this fixes the osx /var symlink to /private/var causing this test to fail
|
|
out.stdout.gsub!("/private/var", "/var")
|
|
_(out.stdout).must_include "Dependencies for profile #{dir} successfully vendored to #{dir}/vendor"
|
|
|
|
_(File.exist?(File.join(dir, "vendor"))).must_equal true
|
|
_(File.exist?(File.join(dir, "inspec.lock"))).must_equal true
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
it "can vendor profile dependencies from git" do
|
|
git_depends_path = File.join(profile_path, "git-fetcher", "basic")
|
|
|
|
Dir.mktmpdir do |tmpdir|
|
|
FileUtils.cp_r(git_depends_path + "/.", tmpdir)
|
|
_(File.exist?(File.join(tmpdir, "vendor"))).must_equal false
|
|
|
|
out = inspec("vendor " + tmpdir + " --overwrite")
|
|
|
|
_(out.stdout).must_include "Dependencies for profile #{tmpdir} successfully vendored to #{tmpdir}/vendor"
|
|
|
|
_(File.exist?(File.join(tmpdir, "vendor"))).must_equal true
|
|
_(File.exist?(File.join(tmpdir, "inspec.lock"))).must_equal true
|
|
# Check that our vendor directory exists
|
|
_(Dir.glob(File.join(tmpdir, "vendor", "*")).length).must_equal 1
|
|
# Check that our vendor directory has contents
|
|
_(Dir.glob(File.join(tmpdir, "vendor", "*", "*")).length).must_be :>=, 8
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
it "ensure nothing is loaded from external source if vendored profile is used" do
|
|
prepare_examples("meta-profile") do |dir|
|
|
out = inspec("vendor " + dir + " --overwrite")
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
|
|
_(File.exist?(File.join(dir, "vendor"))).must_equal true
|
|
_(File.exist?(File.join(dir, "inspec.lock"))).must_equal true
|
|
|
|
# TODO: split
|
|
out = inspec("exec " + dir + " -l debug --no-create-lockfile")
|
|
|
|
_(out.stdout).must_include 'Using cached dependency for {:url=>"https://github.com/dev-sec/ssh-baseline/archive/master.tar.gz"'
|
|
_(out.stdout).must_include 'Using cached dependency for {:url=>"https://github.com/dev-sec/ssl-baseline/archive/master.tar.gz"'
|
|
_(out.stdout).must_include 'Using cached dependency for {:url=>"https://github.com/chris-rock/windows-patch-benchmark/archive/master.tar.gz"'
|
|
_(out.stdout).wont_include "Fetching URL:"
|
|
_(out.stdout).wont_include "Fetched archive moved to:"
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
skip_windows! # Breakage confirmed, only on CI: https://buildkite.com/chef-oss/inspec-inspec-master-verify/builds/2355#2c9d032e-4a24-4e7c-aef2-1c9e2317d9e2
|
|
assert_exit_code 100, out
|
|
end
|
|
end
|
|
|
|
it "ensure json/check command do not fetch remote profiles if vendored" do
|
|
prepare_examples("profile") do |dir|
|
|
out = inspec("vendor " + dir + " --overwrite")
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
|
|
# TODO: split
|
|
out = inspec("json " + dir + " --output " + dst.path)
|
|
|
|
hm = JSON.load(File.read(dst.path))
|
|
_(hm["name"]).must_equal "profile"
|
|
_(hm["controls"].length).must_be :>=, 4
|
|
|
|
# out.stdout.scan(/Copy .* to cache directory/).length.must_equal 3
|
|
# out.stdout.scan(/Dependency does not exist in the cache/).length.must_equal 1
|
|
_(out.stdout.scan(/Fetching URL:/).length).must_equal 0
|
|
|
|
_(out.stderr).must_include "----> creating #{dst.path}"
|
|
|
|
assert_exit_code 0, out
|
|
|
|
# TODO: split
|
|
# execute check command
|
|
out = inspec("check " + dir + " -l debug")
|
|
|
|
_(out.stdout.scan(/Fetching URL:/).length).must_equal 0
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
it "use lockfile in tarball" do
|
|
prepare_profiles("dependencies/inheritance") do |dir|
|
|
# ensure the profile is vendored and packaged as tar
|
|
out = inspec("vendor " + dir + " --overwrite")
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
|
|
# TODO: split
|
|
out = inspec("archive " + dir + " --overwrite")
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
|
|
# TODO: split
|
|
# execute json command
|
|
out = inspec("json inheritance-1.0.0.tar.gz -l debug")
|
|
|
|
_(out.stdout.scan(/Fetching URL:/).length).must_equal 0
|
|
_(out.stdout).wont_match(/Fetching URL:/)
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
it "can move vendor files into custom vendor cache" do
|
|
prepare_examples("meta-profile") do |dir|
|
|
out = inspec("vendor " + dir + " --overwrite")
|
|
|
|
_(File.exist?(File.join(dir, "vendor"))).must_equal true
|
|
_(File.exist?(File.join(dir, "inspec.lock"))).must_equal true
|
|
_(File.exist?(File.join(dir, "vendor_cache"))).must_equal false
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
|
|
# TODO: split
|
|
# Run `inspec exec` to create vendor cache
|
|
inspec("exec " + dir + " --vendor-cache " + dir + "/vendor_cache")
|
|
# TODO: capture out and test exit/stderr?
|
|
|
|
_(File.exist?(File.join(dir, "vendor_cache"))).must_equal true
|
|
vendor_files = Dir.entries("#{dir}/vendor/").sort
|
|
vendor_cache_files = Dir.entries("#{dir}/vendor_cache/").sort
|
|
_(vendor_files).must_equal vendor_cache_files
|
|
end
|
|
end
|
|
|
|
it "vendors profiles when using a local path" do
|
|
local_depends_path = File.join(profile_path, "local-depends")
|
|
dir_profile_path = File.join(profile_path, "complete-profile")
|
|
tar_profile_path = File.join(profile_path,
|
|
"archived-profiles",
|
|
"tar_profile-1.0.0.tar.gz")
|
|
zip_profile_path = File.join(profile_path,
|
|
"archived-profiles",
|
|
"zip_profile-1.0.0.zip")
|
|
|
|
Dir.mktmpdir do |tmpdir|
|
|
[dir_profile_path, tar_profile_path, zip_profile_path].each do |profile|
|
|
included_tmpdir = File.join(tmpdir, File.basename(profile))
|
|
FileUtils.cp_r(profile, included_tmpdir)
|
|
end
|
|
|
|
profile_tmpdir = File.join(tmpdir, File.basename(local_depends_path))
|
|
FileUtils.cp_r(local_depends_path + "/.", profile_tmpdir)
|
|
|
|
out = inspec("vendor " + profile_tmpdir + " --overwrite")
|
|
|
|
vendor_list = Dir.glob(File.join(profile_tmpdir, "vendor", "*"))
|
|
_(vendor_list.length).must_equal 3
|
|
vendor_list.each do |entry|
|
|
# confirm archives were extracted into folders
|
|
_(File.directory?(entry)).must_equal true
|
|
_(Dir.glob(File.join(entry, "*")).length).must_be(:>=, 1)
|
|
end
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
it "extracts archives in vendor directory when present" do
|
|
archive_depends_path = File.join(profile_path, "archive-depends")
|
|
|
|
Dir.mktmpdir do |tmpdir|
|
|
FileUtils.cp_r(archive_depends_path + "/.", tmpdir)
|
|
|
|
out = inspec("vendor " + tmpdir + " --overwrite")
|
|
|
|
Dir.glob(File.join(tmpdir, "vendor", "*")).each do |file|
|
|
_(file).wont_match(/(\.tar.*$|\.zip$)/)
|
|
end
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
it "can vendor profile with required inputs" do
|
|
archive_depends_path = File.join(profile_path, "profile-with-required-inputs")
|
|
|
|
Dir.mktmpdir do |tmpdir|
|
|
FileUtils.cp_r(archive_depends_path + "/.", tmpdir)
|
|
|
|
out = inspec("vendor " + tmpdir)
|
|
|
|
_(out.stderr).must_equal ""
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
end
|