inspec-core 2.1.67

data/examples/kitchen-ansible/test/integration/default/default.yml

@@ -0,0 +1,5 @@
+---
+- name: wrapper playbook for kitchen testing
+  hosts: webservers
+  roles:
+    - kitchen-ansible

data/examples/kitchen-ansible/test/integration/default/web_spec.rb

@@ -0,0 +1,28 @@
+# encoding: utf-8
+# author: Christoph Hartmann
+# author: Dominik Richter
+
+# use basic tests
+describe package('nginx') do
+  it { should be_installed }
+end
+
+# extend tests with metadata
+control '01' do
+  impact 0.7
+  title 'Verify nginx service'
+  desc 'Ensures nginx service is up and running'
+  describe service('nginx') do
+    it { should be_enabled }
+    it { should be_installed }
+    it { should be_running }
+  end
+end
+
+# implement os dependent tests
+web_user = 'www-data'
+web_user = 'nginx' if os[:family] == 'centos'
+
+describe user(web_user) do
+  it { should exist }
+end

data/examples/kitchen-chef/.kitchen.yml

@@ -0,0 +1,20 @@
+---
+driver:
+  name: vagrant
+
+provisioner:
+  name: chef_zero
+
+verifier:
+  name: inspec
+
+platforms:
+  - name: centos-7.1
+  - name: ubuntu-12.04
+  - name: ubuntu-14.04
+
+suites:
+  - name: default
+    run_list:
+      - recipe[prepare]
+    attributes:

data/examples/kitchen-chef/Berksfile

@@ -0,0 +1,3 @@
+source 'https://supermarket.chef.io'
+
+metadata

data/examples/kitchen-chef/Gemfile

@@ -0,0 +1,19 @@
+# encoding: utf-8
+source 'https://rubygems.org'
+
+gem 'inspec', path: '../../.'
+
+group :test do
+  gem 'bundler', '~> 1.5'
+  gem 'minitest', '~> 5.5'
+  gem 'rake', '~> 10'
+  gem 'simplecov', '~> 0.10'
+end
+
+group :integration do
+  gem 'berkshelf', '~> 4.0'
+  gem 'test-kitchen', '~> 1.4'
+  gem 'kitchen-vagrant'
+  gem 'kitchen-inspec'
+  gem 'concurrent-ruby', '~> 0.9'
+end

data/examples/kitchen-chef/README.md

@@ -0,0 +1,27 @@
+# Test-Kitchen - InSpec with Chef Example
+
+This example demonstrates a complete roundtrip via [Test-Kitchen](http://kitchen.ci/).
+
+```bash
+# install all dependencies
+$ bundle install
+# show all available tests
+$ bundle exec kitchen list
+Instance             Driver   Provisioner  Verifier  Transport  Last Action
+default-centos-71    Vagrant  ChefSolo     InSpec    Ssh        <Not Created>
+default-ubuntu-1204  Vagrant  ChefSolo     InSpec    Ssh        <Not Created>
+default-ubuntu-1404  Vagrant  ChefSolo     InSpec    Ssh        <Not Created>
+
+# Now we are ready to run a complete test
+$ bundle exec kitchen test default-ubuntu-1404
+-----> Starting Kitchen (v1.4.2)
+-----> Verifying <default-ubuntu-1404>...
+
+...
+
+Finished in 0.03241 seconds (files took 0.22475 seconds to load)
+5 examples, 0 failures
+
+       Finished verifying <default-ubuntu-1404> (0m0.16s).
+-----> Kitchen is finished. (0m0.82s)
+```

data/examples/kitchen-chef/metadata.rb

@@ -0,0 +1,7 @@
+name 'prepare'
+maintainer 'Chef Software, Inc.'
+maintainer_email 'support@chef.io'
+description 'This cookbook prepares the test operating systems'
+version '1.0.0'
+depends 'apt'
+depends 'yum'

data/examples/kitchen-chef/recipes/default.rb

@@ -0,0 +1,6 @@
+# encoding: utf-8
+# author: Christoph Hartmann
+# author: Dominik Richter
+
+# install nginx
+include_recipe('prepare::nginx')

data/examples/kitchen-chef/recipes/nginx.rb

@@ -0,0 +1,30 @@
+# encoding: utf-8
+# author: Christoph Hartmann
+# author: Dominik Richter
+
+# install repositories for nginx
+case node['platform']
+when 'ubuntu'
+  include_recipe('apt')
+  # if ubuntu, install
+  apt_repository 'nginx-php' do
+    uri 'ppa:nginx/stable'
+    distribution node['lsb']['codename']
+  end
+when 'centos'
+  # add repo for Centos 7
+  yum_repository 'nginx' do
+    description 'Nginx Repo'
+    baseurl 'http://nginx.org/packages/centos/7/x86_64'
+    gpgkey 'http://nginx.org/keys/nginx_signing.key'
+    action :create
+  end
+end
+
+# install nginx package
+package 'nginx'
+
+# start the service
+service 'nginx' do
+  action :start
+end

data/examples/kitchen-chef/test/integration/default/web_spec.rb

@@ -0,0 +1,28 @@
+# encoding: utf-8
+# author: Christoph Hartmann
+# author: Dominik Richter
+
+# use basic tests
+describe package('nginx') do
+  it { should be_installed }
+end
+
+# extend tests with metadata
+control '01' do
+  impact 0.7
+  title 'Verify nginx service'
+  desc 'Ensures nginx service is up and running'
+  describe service('nginx') do
+    it { should be_enabled }
+    it { should be_installed }
+    it { should be_running }
+  end
+end
+
+# implement os dependent tests
+web_user = 'www-data'
+web_user = 'nginx' if os[:family] == 'centos'
+
+describe user(web_user) do
+  it { should exist }
+end

data/examples/kitchen-puppet/.kitchen.yml

@@ -0,0 +1,23 @@
+---
+driver:
+  name: vagrant
+
+provisioner:
+  name: puppet_apply
+  # Not installing chef since inspec is used for testing
+  require_chef_for_busser: false
+  manifests_path: manifests
+  modules_path: modules
+
+verifier:
+  name: inspec
+
+platforms:
+  - name: centos-7.1
+  - name: ubuntu-12.04
+  - name: ubuntu-14.04
+
+suites:
+  - name: default
+    provisioner:
+      manifest: site.pp

data/examples/kitchen-puppet/Gemfile

@@ -0,0 +1,20 @@
+# encoding: utf-8
+source 'https://rubygems.org'
+
+gem 'inspec', path: '../../.'
+
+group :test do
+  gem 'bundler', '~> 1.5'
+  gem 'minitest', '~> 5.5'
+  gem 'rake', '~> 10'
+  gem 'simplecov', '~> 0.10'
+end
+
+group :integration do
+  gem 'test-kitchen', '~> 1.4'
+  gem 'kitchen-vagrant'
+  gem 'kitchen-puppet'
+  gem 'librarian-puppet'
+  gem 'kitchen-inspec'
+  gem 'concurrent-ruby', '~> 0.9'
+end

data/examples/kitchen-puppet/Puppetfile

@@ -0,0 +1,25 @@
+#!/usr/bin/env ruby
+#^syntax detection
+
+forge "https://forgeapi.puppetlabs.com"
+
+# use dependencies defined in metadata.json
+metadata
+
+# use dependencies defined in Modulefile
+# modulefile
+
+# A module from the Puppet Forge
+# mod 'puppetlabs-stdlib'
+
+# A module from git
+# mod 'puppetlabs-ntp',
+#   :git => 'git://github.com/puppetlabs/puppetlabs-ntp.git'
+
+# A module from a git branch/tag
+# mod 'puppetlabs-apt',
+#   :git => 'https://github.com/puppetlabs/puppetlabs-apt.git',
+#   :ref => '1.4.x'
+
+# A module from Github pre-packaged tarball
+# mod 'puppetlabs-apache', '0.6.0', :github_tarball => 'puppetlabs/puppetlabs-apache'

data/examples/kitchen-puppet/README.md

@@ -0,0 +1,53 @@
+# Test-Kitchen - InSpec with Puppet Example
+
+This example demonstrates a complete roundtrip via [Test-Kitchen](http://kitchen.ci/).
+
+```bash
+# install all dependencies
+$ bundle install
+# show all available tests
+$ bundle exec kitchen list
+Instance             Driver   Provisioner  Verifier  Transport  Last Action
+default-centos-71    Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
+default-ubuntu-1204  Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
+default-ubuntu-1404  Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
+
+# Now we are ready to run a complete test
+$ bundle exec kitchen test default-ubuntu-1404
+-----> Starting Kitchen (v1.4.2)
+-----> Cleaning up any prior instances of <default-ubuntu-1404>
+-----> Destroying <default-ubuntu-1404>...
+       Finished destroying <default-ubuntu-1404> (0m0.00s).
+-----> Testing <default-ubuntu-1404>
+-----> Creating <default-ubuntu-1404>...
+       Bringing machine 'default' up with 'virtualbox' provider...
+       ==> default: Importing base box 'opscode-ubuntu-14.04'...
+
+...
+
+       Vagrant instance <default-ubuntu-1404> created.
+       Finished creating <default-ubuntu-1404> (0m33.62s).
+-----> Converging <default-ubuntu-1404>...
+       Preparing files for transfer
+
+...
+
+       Finished converging <default-ubuntu-1404> (0m48.95s).
+-----> Setting up <default-ubuntu-1404>...
+       Finished setting up <default-ubuntu-1404> (0m0.00s).
+-----> Verifying <default-ubuntu-1404>...
+.....
+
+Finished in 0.08278 seconds (files took 1 minute 22.81 seconds to load)
+5 examples, 0 failures
+
+       Finished verifying <default-ubuntu-1404> (0m0.22s).
+-----> Destroying <default-ubuntu-1404>...
+       ==> default: Forcing shutdown of VM...
+       ==> default: Destroying VM and associated drives...
+       Vagrant instance <default-ubuntu-1404> destroyed.
+       Finished destroying <default-ubuntu-1404> (0m3.97s).
+       Finished testing <default-ubuntu-1404> (1m26.79s).
+-----> Kitchen is finished. (1m27.34s)
+
+```

data/examples/kitchen-puppet/manifests/site.pp

@@ -0,0 +1,33 @@
+# == Class prepare::site
+#
+
+# Install nginx from package repos
+case $osfamily {
+  'RedHat': {
+    yumrepo { 'nginx':
+      descr => 'Nginx Repo',
+      baseurl => 'http://nginx.org/packages/centos/7/x86_64',
+      gpgkey => 'http://nginx.org/keys/nginx_signing.key',
+      enabled => 1
+    }
+
+    package { 'nginx':
+      require => [Yumrepo[nginx]],
+      ensure => 'latest'
+    }
+  }
+  'Debian': {
+    package { 'nginx':
+      ensure => 'latest'
+    }
+  }
+  default: {
+    fail("Unsupported platform: ${osfamily}/${operatingsystem}")
+  }
+}
+
+# Start the service
+service { 'nginx':
+  enable => 'true',
+  ensure => 'running'
+}

data/examples/kitchen-puppet/metadata.json

@@ -0,0 +1,11 @@
+{
+  "name": "prepare",
+  "version": "0.1.0",
+  "author": "support@chef.io",
+  "summary": "This module prepares the test operating systems",
+  "license": "Apache-2.0",
+  "source": "https://github.com/chef/inspec/examples/kitchen-puppet",
+  "project_page": "https://github.com/chef/inspec/examples/kitchen-puppet",
+  "issues_url": "https://github.com/chef/inspec/issues",
+  "dependencies": []
+}

data/examples/kitchen-puppet/test/integration/default/web_spec.rb

@@ -0,0 +1,28 @@
+# encoding: utf-8
+# author: Christoph Hartmann
+# author: Dominik Richter
+
+# use basic tests
+describe package('nginx') do
+  it { should be_installed }
+end
+
+# extend tests with metadata
+control '01' do
+  impact 0.7
+  title 'Verify nginx service'
+  desc 'Ensures nginx service is up and running'
+  describe service('nginx') do
+    it { should be_enabled }
+    it { should be_installed }
+    it { should be_running }
+  end
+end
+
+# implement os dependent tests
+web_user = 'www-data'
+web_user = 'nginx' if os[:family] == 'centos'
+
+describe user(web_user) do
+  it { should exist }
+end

data/examples/meta-profile/README.md

@@ -0,0 +1,37 @@
+# meta-profile
+
+The inspec.yml file in this profile shows how one can use dependencies
+from non-local sources such as Git or an HTTP url. This feature can
+be used to build up a environment-wide profile that is based on more
+specific profiles managed by others.
+
+InSpec supports multiple profile locations:
+
+```
+depends:
+  # defaults to supermarket
+  - name: hardening/ssh-hardening  
+  # remote tar or zip file
+  - name: os-hardening
+    url: https://github.com/dev-sec/tests-os-hardening/archive/master.zip
+  # git
+  - git: https://github.com/dev-sec/ssl-baseline.git
+  - name: windows-patch-benchmark
+    git: https://github.com/chris-rock/windows-patch-benchmark.git
+  # Chef Compliance
+  - name: linux
+    compliance: base/linux
+```
+
+You could use those dependencies in your `example.rb`:
+
+```
+
+include_controls 'hardening/ssh-hardening'
+include_controls 'os-hardening'
+include_controls 'ssl-baseline'
+include_controls 'linux'
+include_controls 'windows-patch-benchmark'
+```
+
+Further details are described in our [InSpec Docs](https://www.inspec.io/docs/reference/profiles/)

data/examples/meta-profile/controls/example.rb

@@ -0,0 +1,13 @@
+# encoding: utf-8
+# copyright: 2015, The Authors
+
+# import full profile
+include_controls 'dev-sec/ssh-baseline'
+
+# select only individual controls
+include_controls 'ssl-baseline' do
+  control "tls1.2"
+end
+
+# inspec knows that it cannot run Windows tests on Linux
+include_controls 'windows-patch-benchmark'