mirror of
https://github.com/inspec/inspec
synced 2024-11-26 14:40:26 +00:00
313 lines
10 KiB
Ruby
313 lines
10 KiB
Ruby
require "helper"
|
||
require "train"
|
||
|
||
ENV["CHEF_LICENSE"] = "accept-no-persist"
|
||
|
||
CMD = Train.create("local", command_runner: :generic).connection
|
||
|
||
class Module
|
||
include Minitest::Spec::DSL
|
||
end
|
||
|
||
module FunctionalHelper
|
||
extend Minitest::Spec::DSL
|
||
extend Minitest::Guard
|
||
|
||
let(:repo_path) do
|
||
path = File.expand_path("../..", __dir__)
|
||
# fix for vagrant repo pathing
|
||
path.gsub!("//vboxsvr", "C:") if is_windows?
|
||
path
|
||
end
|
||
let(:inspec_path) { File.join(repo_path, "inspec-bin", "bin", "inspec") }
|
||
libdir = File.expand_path "lib"
|
||
let(:exec_inspec) { [Gem.ruby, "-I#{libdir}", inspec_path].join " " }
|
||
let(:mock_path) { File.join(repo_path, "test", "fixtures") }
|
||
let(:profile_path) { File.join(mock_path, "profiles") }
|
||
let(:examples_path) { File.join(profile_path, "old-examples") }
|
||
let(:integration_test_path) { File.join(repo_path, "test", "integration", "default") }
|
||
let(:all_profiles) { Dir.glob("#{profile_path}/**/inspec.yml") }
|
||
let(:all_profile_folders) { all_profiles.map { |path| File.dirname(path) } }
|
||
|
||
let(:complete_profile) { "#{profile_path}/complete-profile" }
|
||
let(:example_profile) { File.join(examples_path, "profile") }
|
||
let(:meta_profile) { File.join(examples_path, "meta-profile") }
|
||
let(:example_control) { File.join(example_profile, "controls", "example-tmp.rb") }
|
||
let(:inheritance_profile) { File.join(examples_path, "inheritance") }
|
||
let(:shell_inheritance_profile) { File.join(repo_path, "test", "fixtures", "profiles", "dependencies", "shell-inheritance") }
|
||
let(:failure_control) { File.join(profile_path, "failures", "controls", "failures.rb") }
|
||
let(:simple_inheritance) { File.join(profile_path, "simple-inheritance") }
|
||
let(:sensitive_profile) { File.join(examples_path, "profile-sensitive") }
|
||
let(:config_dir_path) { File.join(mock_path, "config_dirs") }
|
||
|
||
let(:dst) do
|
||
# create a temporary path, but we only want an auto-clean helper
|
||
# so remove the file and give back the path
|
||
res = Tempfile.new("inspec-shred")
|
||
res.close
|
||
FileUtils.rm(res.path)
|
||
TMP_CACHE[res.path] = res
|
||
end
|
||
|
||
root_dir = windows? ? "C:" : "/etc"
|
||
ROOT_LICENSE_PATH = "#{root_dir}/chef/accepted_licenses/inspec".freeze
|
||
|
||
def without_license
|
||
ENV.delete "CHEF_LICENSE"
|
||
|
||
FileUtils.rm_f ROOT_LICENSE_PATH
|
||
|
||
yield
|
||
|
||
FileUtils.rm_f ROOT_LICENSE_PATH
|
||
ensure
|
||
ENV["CHEF_LICENSE"] = "accept-no-persist"
|
||
end
|
||
|
||
def assert_exit_code(exp, cmd)
|
||
exp = 1 if windows? && (exp != 0)
|
||
assert_equal exp, cmd.exit_status
|
||
end
|
||
|
||
def convert_windows_output(text)
|
||
text = text.force_encoding("UTF-8")
|
||
text.gsub!("[PASS]", "✔")
|
||
text.gsub!("\033[0;1;32m", "\033[38;5;41m")
|
||
text.gsub!("[SKIP]", "↺")
|
||
text.gsub!("\033[0;37m", "\033[38;5;247m")
|
||
text.gsub!("[FAIL]", "×")
|
||
text.gsub!("\033[0;1;31m", "\033[38;5;9m")
|
||
end
|
||
|
||
def self.is_windows?
|
||
RbConfig::CONFIG["host_os"] =~ /mswin|mingw|cygwin/
|
||
end
|
||
|
||
def is_windows?
|
||
FunctionalHelper.is_windows?
|
||
end
|
||
|
||
def stderr_ignore_deprecations(result)
|
||
stderr = result.stderr
|
||
suffix = stderr.end_with?("\n") ? "\n" : ""
|
||
stderr.split("\n").reject { |l| l.include? " DEPRECATION: " }.join("\n") + suffix
|
||
end
|
||
|
||
def assert_json_controls_passing(_result = nil) # dummy arg
|
||
# Strategy: assemble an array of tests that failed or skipped, and insist it is empty
|
||
# @json['profiles'][0]['controls'][0]['results'][0]['status']
|
||
failed_tests = []
|
||
@json["profiles"].each do |profile_struct|
|
||
profile_name = profile_struct["name"]
|
||
profile_struct["controls"].each do |control_struct|
|
||
control_name = control_struct["id"]
|
||
control_struct["results"].compact.each do |test_struct|
|
||
test_desc = test_struct["code_desc"]
|
||
if test_struct["status"] != "passed"
|
||
failed_tests << "#{profile_name}/#{control_name}/#{test_desc}"
|
||
end
|
||
end
|
||
end
|
||
end
|
||
|
||
_(failed_tests).must_be_empty
|
||
end
|
||
|
||
@inspec_mutex ||= Mutex.new
|
||
|
||
def self.inspec_mutex
|
||
@inspec_mutex
|
||
end
|
||
|
||
def self.inspec_cache
|
||
@inspec_cache ||= {}
|
||
end
|
||
|
||
def inspec_cache
|
||
FunctionalHelper.inspec_cache
|
||
end
|
||
|
||
def inspec_mutex
|
||
FunctionalHelper.inspec_mutex
|
||
end
|
||
|
||
def run_cmd(commandline, prefix = nil)
|
||
inspec_mutex.synchronize { # rubocop:disable Style/BlockDelimiters
|
||
inspec_cache[[commandline, prefix]] ||=
|
||
if is_windows?
|
||
invocation = "/windows/system32/cmd /C \"#{prefix} #{commandline}\""
|
||
# puts
|
||
# puts "CMD = #{invocation}"
|
||
result = CMD.run_command(invocation)
|
||
result.stdout.encode!(universal_newline: true)
|
||
result.stderr.encode!(universal_newline: true)
|
||
convert_windows_output(result.stdout)
|
||
# remove the CLIXML header trash in windows
|
||
result.stderr.gsub!("#< CLIXML\n", "")
|
||
result
|
||
else
|
||
invocation = "#{prefix} #{commandline}"
|
||
CMD.run_command(invocation)
|
||
end
|
||
}
|
||
end
|
||
|
||
def inspec(commandline, prefix = nil)
|
||
run_cmd "#{exec_inspec} #{commandline}", prefix
|
||
end
|
||
|
||
def inspec_with_env(commandline, env = {})
|
||
inspec(commandline, assemble_env_prefix(env))
|
||
end
|
||
|
||
def inspec_os_uuid
|
||
CMD.os.uuid
|
||
end
|
||
|
||
# This version allows additional options.
|
||
# @param String command_line Invocation, without the word 'inspec'
|
||
# @param Hash opts Additonal options, see below
|
||
# :env Hash A hash of environment vars to expose to the invocation.
|
||
# :prefix String A string to prefix to the invocation. Prefix + env + invocation is the order.
|
||
# :cwd String A directory to change to. Implemented as 'cd CWD && ' + prefix
|
||
# :lock Boolean Default false. If false, add `--no-create-lockfile`.
|
||
# :json Boolean Default false. If true, add `--reporter json` and parse the output, which is stored in @json.
|
||
# :tmpdir Boolean default true. If true, wrap execution in a Dir.tmpdir block. Use pre_run and post_run to trigger actions.
|
||
# :pre_run: Proc(tmp_dir_path) - optional setup block.
|
||
# tmp_dir will exist and be empty.
|
||
# :post_run: Proc(FuncTestRunResult, tmp_dir_path) - optional result capture block.
|
||
# tmp_dir will still exist (for a moment!)
|
||
# @return Train::Extrans::CommandResult
|
||
def run_inspec_process(command_line, opts = {})
|
||
raise "Do not use tmpdir and cwd in the same invocation" if opts[:cwd] && opts[:tmpdir]
|
||
|
||
prefix = opts[:cwd] ? "cd " + opts[:cwd] + " && " : ""
|
||
prefix += opts[:prefix] || ""
|
||
prefix += assemble_env_prefix(opts[:env])
|
||
command_line += " --reporter json " if opts[:json] && command_line =~ /\bexec\b/
|
||
command_line += " --no-create-lockfile " if (!opts[:lock]) && command_line =~ /\bexec\b/
|
||
|
||
run_result = nil
|
||
if opts[:tmpdir]
|
||
Dir.mktmpdir do |tmp_dir|
|
||
opts[:pre_run].call(tmp_dir) if opts[:pre_run]
|
||
# Do NOT Dir.chdir here - chdir / pwd is per-process, and we are in the
|
||
# test harness process, which will be multithreaded because we parallelize the tests.
|
||
# Instead, make the spawned process change dirs using a cd prefix.
|
||
prefix = "cd " + tmp_dir + " && " + prefix
|
||
run_result = inspec(command_line, prefix)
|
||
opts[:post_run].call(run_result, tmp_dir) if opts[:post_run]
|
||
end
|
||
else
|
||
run_result = inspec(command_line, prefix)
|
||
end
|
||
|
||
if opts[:ignore_rspec_deprecations]
|
||
# RSpec keeps issuing a deprecation count to stdout when .should is called explicitly
|
||
# See https://github.com/inspec/inspec/pull/3560
|
||
run_result.stdout.sub!("\n1 deprecation warning total\n", "")
|
||
end
|
||
|
||
if opts[:json] && !run_result.stdout.empty?
|
||
begin
|
||
out = run_result.stdout.split("\n")
|
||
if out.count > 1
|
||
@deprication_msg = out[1].include?("The --target-id option is deprecated in InSpec 5") ? out[0] : nil
|
||
out = out[1]
|
||
else
|
||
out = out[0]
|
||
end
|
||
@json = JSON.parse(out)
|
||
rescue JSON::ParserError => e
|
||
warn "JSON PARSE ERROR: %s" % [e.message]
|
||
warn "OUT: <<%s>>" % [run_result.stdout]
|
||
warn "ERR: <<%s>>" % [run_result.stderr]
|
||
warn "XIT: %p" % [run_result.exit_status]
|
||
@json = {}
|
||
@json_error = e
|
||
end
|
||
end
|
||
|
||
run_result
|
||
end
|
||
|
||
# Copy all examples to a temporary directory for functional tests.
|
||
# You can provide an optional directory which will be handed to your
|
||
# test block with its absolute path. If nothing is provided you will
|
||
# get the path of the examples directory in the tmp environment.
|
||
#
|
||
# @param dir = nil [String] optional directory you want to test
|
||
# @param &block [Type] actual test block
|
||
def prepare_examples(dir = nil, &block)
|
||
Dir.mktmpdir do |tmpdir|
|
||
FileUtils.cp_r(examples_path, tmpdir)
|
||
bn = File.basename(examples_path)
|
||
yield(File.join(tmpdir, bn, dir.to_s))
|
||
end
|
||
end
|
||
|
||
def prepare_profiles(dir = nil, &block)
|
||
Dir.mktmpdir do |tmpdir|
|
||
FileUtils.cp_r(profile_path, tmpdir)
|
||
bn = File.basename(profile_path)
|
||
yield(File.join(tmpdir, bn, dir.to_s))
|
||
end
|
||
end
|
||
|
||
private
|
||
|
||
def assemble_env_prefix(env = {})
|
||
if is_windows?
|
||
env_prefix = env.to_a.map { |assignment| "set #{assignment[0]}=#{assignment[1]}" }.join("&& ")
|
||
env_prefix += "&& " unless env_prefix.empty?
|
||
else
|
||
env_prefix = env.to_a.map { |assignment| "#{assignment[0]}=#{assignment[1]}" }.join(" ")
|
||
env_prefix += " "
|
||
end
|
||
env_prefix
|
||
end
|
||
end
|
||
|
||
#=========================================================================================#
|
||
# Plugin Support
|
||
#=========================================================================================#
|
||
module PluginFunctionalHelper
|
||
include FunctionalHelper
|
||
|
||
def run_inspec_with_plugin(command, opts)
|
||
pre = Proc.new do |tmp_dir|
|
||
content = JSON.generate(__make_plugin_file_data_structure_with_path(opts[:plugin_path]))
|
||
File.write(File.join(tmp_dir, "plugins.json"), content)
|
||
end
|
||
|
||
opts = {
|
||
pre_run: pre,
|
||
tmpdir: true,
|
||
json: true,
|
||
env: {
|
||
"INSPEC_CONFIG_DIR" => ".", # We're in tmpdir
|
||
},
|
||
}.merge(opts)
|
||
run_inspec_process(command, opts)
|
||
end
|
||
|
||
def __make_plugin_file_data_structure_with_path(path)
|
||
# TODO: dry this up, refs #3350
|
||
plugin_name = File.basename(path, ".rb")
|
||
data = __make_empty_plugin_file_data_structure
|
||
data["plugins"] << {
|
||
"name" => plugin_name,
|
||
"installation_type" => "path",
|
||
"installation_path" => path,
|
||
}
|
||
data
|
||
end
|
||
|
||
def __make_empty_plugin_file_data_structure
|
||
# TODO: dry this up, refs #3350
|
||
{
|
||
"plugins_config_version" => "1.0.0",
|
||
"plugins" => [],
|
||
}
|
||
end
|
||
end
|