inspec 0.9.0

data/tasks/maintainers.rb

@@ -0,0 +1,213 @@
+# encoding: utf-8
+# Copyright:: Copyright (c) 2015 Chef Software, Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require 'rake'
+
+SOURCE = File.join(File.dirname(__FILE__), '..', 'MAINTAINERS.toml')
+TARGET = File.join(File.dirname(__FILE__), '..', 'MAINTAINERS.md')
+
+# The list of repositories that teams should own
+REPOSITORIES = ['chef/inspec']
+
+begin
+  require 'tomlrb'
+  require 'octokit'
+  require 'pp'
+  task default: :generate
+
+  namespace :maintainers do
+    desc 'Generate MarkDown version of MAINTAINERS file'
+    task :generate do
+      maintainers = Tomlrb.load_file SOURCE
+      out = "<!-- This is a generated file. Please do not edit directly -->\n\n"
+      out << "<!-- Modify MAINTAINERS.toml and run `rake maintainers:generate` to regenerate. -->\n\n"
+      out << '# ' + maintainers['Preamble']['title'] + "\n\n"
+      out << maintainers['Preamble']['text'] + "\n"
+      out << components(maintainers['people'], maintainers['Org']['Components'])
+      File.open(TARGET, 'w') { |fn|
+        fn.write out
+      }
+    end
+
+    desc 'Synchronize GitHub teams'
+    task :synchronize do
+      Octokit.auto_paginate = true
+      github_teams
+      prepare_teams(source['Org']['Components'].dup)
+      sync_teams!
+    end
+  end
+
+  def github
+    @github ||= Octokit::Client.new(netrc: true)
+  end
+
+  def source
+    @source ||= Tomlrb.load_file SOURCE
+  end
+
+  def teams
+    @teams ||= { 'inspec-maintainers' => { 'title' => 'Maintainers of the InSpec toolset' } }
+  end
+
+  def add_members(team, name)
+    teams['inspec-maintainers']['members'] ||= []
+    teams['inspec-maintainers']['members'] << name
+    teams[team] ||= {}
+    teams[team]['members'] ||= []
+    teams[team]['members'] << name
+  end
+
+  def set_team_title(team, title)
+    teams[team] ||= {}
+    teams[team]['title'] = title
+  end
+
+  def gh_teams
+    @gh_teams ||= {}
+  end
+
+  # we have to resolve team names to ids. While we're at it, we can get the privacy
+  # setting, so we know whether we need to update it
+  def github_teams
+    github.org_teams('chef').each do |team|
+      gh_teams[team[:slug]] = { 'id' => team[:id], 'privacy' => team[:privacy] }
+    end
+  end
+
+  def get_github_team(team)
+    github.team_members(gh_teams[team]['id']).map do |member|
+      member[:login]
+    end.sort.uniq.map(&:downcase)
+  rescue
+    []
+  end
+
+  def create_team(team)
+    puts "creating new github team: #{team} with title: #{teams[team]['title']} "
+    t = github.create_team('chef', name: team, description: teams[team]['title'],
+                       privacy: 'closed', repo_names: REPOSITORIES,
+                       accept: 'application/vnd.github.ironman-preview+json')
+    gh_teams[team] = { 'id' => t[:id], 'privacy' => t[:privacy] }
+  end
+
+  def compare_teams(current, desired)
+    # additions are the subtraction of the current state from the desired state
+    # deletions are the subtraction of the desired state from the current state
+    [desired - current, current - desired]
+  end
+
+  def prepare_teams(cmp)
+    %w{text paths}.each { |k| cmp.delete(k) }
+    if cmp.key?('team')
+      team = cmp.delete('team')
+      add_members(team, cmp.delete('lieutenant')) if cmp.key?('lieutenant')
+      add_members(team, cmp.delete('maintainers')) if cmp.key?('maintainers')
+      set_team_title(team, cmp.delete('title'))
+    else
+      %w{maintainers lieutenant title}.each { |k| cmp.delete(k) }
+    end
+    cmp.each { |_k, v| prepare_teams(v) }
+  end
+
+  def update_team(team, additions, deletions)
+    create_team(team) unless gh_teams.key?(team)
+    update_team_privacy(team)
+    add_team_members(team, additions)
+    remove_team_members(team, deletions)
+  rescue
+    puts "failed for #{team}"
+  end
+
+  def update_team_privacy(_team)
+    # return
+    # return if gh_teams[team]['privacy'] == 'closed'
+    # puts "Setting #{team} privacy to closed from #{gh_teams[team]['privacy']}"
+    # github.update_team(gh_teams[team]['id'], privacy: 'closed',
+    #                    accept: 'application/vnd.github.ironman-preview+json')
+  end
+
+  def add_team_members(team, additions)
+    additions.each do |member|
+      puts "Adding #{member} to #{team}"
+      github.add_team_membership(gh_teams[team]['id'], member, role: 'member',
+                                 accept: 'application/vnd.github.ironman-preview+json')
+    end
+  end
+
+  def remove_team_members(team, deletions)
+    deletions.each do |member|
+      puts "Removing #{member} from #{team}"
+      github.remove_team_membership(gh_teams[team]['id'], member,
+                                    accept: 'application/vnd.github.ironman-preview+json')
+    end
+  end
+
+  def sync_teams!
+    teams.each do |name, details|
+      current = get_github_team(name)
+      desired = details['members'].flatten.sort.uniq.map(&:downcase)
+      additions, deletions = compare_teams(current, desired)
+      update_team(name, additions, deletions)
+    end
+  end
+
+  def get_person(person)
+    source['people'][person]
+  end
+
+  def components(list, cmp)
+    out = '## ' + cmp.delete('title') + "\n\n"
+    out << cmp.delete('text') + "\n" if cmp.key?('text')
+    out << "To mention the team, use @chef/#{cmp.delete('team')}\n\n" if cmp.key?('team')
+    if cmp.key?('lieutenant')
+      out << "### Lieutenant\n\n"
+      out << person(list, cmp.delete('lieutenant')) + "\n\n"
+    end
+    out << maintainers(list, cmp.delete('maintainers')) + "\n" if cmp.key?('maintainers')
+    cmp.delete('paths')
+    cmp.each { |_k, v| out << components(list, v) }
+    out
+  end
+
+  def maintainers(list, people)
+    o = "### Maintainers\n\n"
+    people.each do |p|
+      o << person(list, p) + "\n"
+    end
+    o
+  end
+
+  # rubocop:disable Metrics/AbcSize
+  def person(list, person)
+    if list[person].key?('GitHub')
+      out = "* [#{list[person]['Name']}](https://github.com/#{list[person]['GitHub']})"
+    else
+      out = "* #{list[person]['Name']}"
+    end
+    out << "\n  * IRC - #{list[person]['IRC']}" if list[person].key?('IRC')
+    out << "\n  * [@#{list[person]['Twitter']}](https://twitter.com/#{list[person]['Twitter']})" if list[person].key?('Twitter')
+    out << "\n  * [#{list[person]['email']}](mailto:#{list[person]['email']})" if list[person].key?('email')
+    out << "\n  * #{list[person]['phone']}" if list[person].key?('phone')
+    out << "\n  * [ServerFault](#{list[person]['ServerFault']})" if list[person].key?('ServerFault')
+    out
+  end
+  # rubocop:enable all
+
+rescue LoadError
+  STDERR.puts "\n*** TomlRb not available.\n\n"
+end

data/test/docker_run.rb

@@ -0,0 +1,156 @@
+# encoding: utf-8
+# author: Dominik Richter
+
+require 'docker'
+require 'yaml'
+require 'concurrent'
+
+class DockerRunner
+  def initialize(conf_path = nil)
+    @conf_path = conf_path ||
+                 ENV['config']
+
+    if @conf_path.nil?
+      fail "You must provide a configuration file with docker boxes"
+    end
+
+    unless File.file?(@conf_path)
+      fail "Can't find configuration in #{@conf_path}"
+    end
+
+    @conf = YAML.load_file(@conf_path)
+    if @conf.nil? or @conf.empty?
+      fail "Can't read coniguration in #{@conf_path}"
+    end
+    if @conf['images'].nil?
+      fail "You must configure test images in your #{@conf_path}"
+    end
+
+    @images = docker_images_by_tag
+    @image_pull_tickets = Concurrent::Semaphore.new(2)
+    @docker_run_tickets = Concurrent::Semaphore.new(5)
+  end
+
+  def run_all(&block)
+    fail 'You must provide a block for run_all' unless block_given?
+
+    promises = @conf['images'].map do |id|
+      run_on_target(id, &block)
+    end
+
+    # wait for all tests to be finished
+    sleep(0.1) until promises.all?(&:fulfilled?)
+
+    # return resulting values
+    promises.map(&:value)
+  end
+
+  def run_on_target(name, &block)
+    pr = Concurrent::Promise.new {
+      begin
+        container = start_container(name)
+        res = block.call(name, container)
+      # special rescue block to handle not implemented error
+      rescue NotImplementedError => err
+        raise err.message
+      end
+      # always stop the container
+      stop_container(container)
+      res
+    }.execute
+
+    # failure handling
+    pr.rescue do |err|
+      msg = "\033[31;1m#{err.message}\033[0m"
+      puts msg
+      msg + "\n" + err.backtrace.join("\n")
+    end
+  end
+
+  def provision_image(image, prov, files)
+    return image if prov['script'].nil?
+    path = File.join(File.dirname(@conf_path), prov['script'])
+    unless File.file?(path)
+      puts "Can't find script file #{path}"
+      return image
+    end
+    puts "    script #{path}"
+    dst = "/bootstrap#{files.length}.sh"
+    files.push(dst)
+    image.insert_local('localPath' => path, 'outputPath' => dst)
+  end
+
+  def bootstrap_image(name, image)
+    files = []
+    provisions = Array(@conf['provision'])
+    puts "--> provision docker #{name}" unless provisions.empty?
+    provisions.each do |prov|
+      image = provision_image(image, prov, files)
+    end
+    [image, files]
+  end
+
+  def start_container(name, version = nil)
+    unless name.include?(':')
+      version ||= 'latest'
+      name = "#{name}:#{version}"
+    end
+    puts "--> schedule docker #{name}"
+
+    image = @images[name]
+    if image.nil?
+      puts "\033[35;1m--> pull docker images #{name} "\
+           "(this may take a while)\033[0m"
+
+      @image_pull_tickets.acquire(1)
+      puts "... start pull image #{name}"
+      image = Docker::Image.create('fromImage' => name)
+      @image_pull_tickets.release(1)
+
+      unless image.nil?
+        puts "\033[35;1m--> pull docker images finished for #{name}\033[0m"
+      end
+    end
+
+    fail "Can't find nor pull docker image #{name}" if image.nil?
+
+    image, scripts = bootstrap_image(name, image)
+
+    @docker_run_tickets.acquire(1)
+
+    puts "--> start docker #{name}"
+    container = Docker::Container.create(
+      'Cmd' => %w{sleep 3600},
+      'Image' => image.id,
+      'OpenStdin' => true,
+    )
+    container.start
+
+    scripts.each do |script|
+      container.exec(%w{chmod +x}.push(script))
+      container.exec(%w{sh -c}.push(script))
+    end
+
+    container
+  end
+
+  def stop_container(container)
+    @docker_run_tickets.release(1)
+    puts "--> killrm docker #{container.id}"
+    container.kill
+    container.delete(force: true)
+  end
+
+  private
+
+  # get all docker image tags
+  def docker_images_by_tag
+    images = {}
+    Docker::Image.all.map do |img|
+      Array(img.info['RepoTags']).each do |tag|
+        images[tag] = img
+      end
+    end
+    images
+  end
+end

data/test/docker_test.rb

@@ -0,0 +1,51 @@
+# encoding: utf-8
+# author: Dominik Richter
+
+require_relative 'docker_run'
+require_relative '../lib/inspec'
+
+tests = ARGV
+if tests.empty?
+  puts 'Nothing to do.'
+  exit 0
+end
+
+class DockerTester
+  def initialize(tests)
+    @tests = tests
+    @docker = DockerRunner.new
+  end
+
+  def run
+    puts ['Running tests:', @tests].flatten.join("\n- ")
+    puts ''
+
+    conf = RSpec.configuration
+    reporter = conf.reporter
+    results = nil
+
+    # start reporting loop
+    reporter.report(0) do |report|
+      results = @docker.run_all do |name, container|
+        status = test_container(container, report)
+        status.all? ? nil : "Failed to run tests on #{name}"
+      end
+    end
+
+    # check if we were successful
+    failures = results.compact
+    failures.each { |f| puts "\033[31;1m#{f}\033[0m\n\n" }
+    failures.empty? or fail 'Test failures'
+  end
+
+  def test_container(container, report)
+    puts "--> run test on docker #{container.id}"
+    opts = { 'target' => "docker://#{container.id}" }
+    runner = Inspec::Runner.new(opts)
+    runner.add_tests(@tests)
+    tests = runner.tests.ordered_example_groups
+    tests.map { |g| g.run(report) }
+  end
+end
+
+DockerTester.new(tests).run

data/test/helper.rb

@@ -0,0 +1,200 @@
+# encoding: utf-8
+# author: Dominik Richter
+# author: Christoph Hartmann
+
+require 'minitest/autorun'
+require 'minitest/spec'
+
+require 'simplecov'
+SimpleCov.start do
+  add_filter '/test/'
+  add_group 'Resources', 'lib/resources'
+  add_group 'Matchers', 'lib/matchers'
+  add_group 'Backends', 'lib/inspec/backend'
+end
+
+require 'inspec/resource'
+require 'inspec/backend'
+require 'inspec/profile'
+
+class MockLoader
+  # pass the os identifier to emulate a specific operating system
+  def initialize(os = nil)
+    # collects emulation operating systems
+    @operating_systems = {
+      arch:       { family: 'arch', release: nil, arch: nil },
+      centos5:    { family: 'redhat', release: '5.11', arch: 'x86_64' },
+      centos6:    { family: 'redhat', release: '6.6', arch: 'x86_64' },
+      centos7:    { family: 'redhat', release: '7.1.1503', arch: 'x86_64' },
+      debian6:    { family: 'debian', release: '6', arch: 'x86_64' },
+      debian7:    { family: 'debian', release: '7', arch: 'x86_64' },
+      debian8:    { family: 'debian', release: '8', arch: 'x86_64' },
+      freebsd9:   { family: 'freebsd', release: '9', arch: 'amd64' },
+      freebsd10:  { family: 'freebsd', release: '10', arch: 'amd64' },
+      osx104:     { family: 'darwin', release: '10.10.4', arch: nil, name: 'mac_os_x' },
+      ubuntu1204: { family: 'ubuntu', release: '12.04', arch: 'x86_64' },
+      ubuntu1404: { family: 'ubuntu', release: '14.04', arch: 'x86_64' },
+      ubuntu1504: { family: 'ubuntu', release: '15.04', arch: 'x86_64' },
+      windows:    { family: 'windows', release: nil, arch: nil },
+      undefined:  { family: nil, release: nil, arch: nil },
+    }
+
+    # selects operating system
+    @os = @operating_systems[os || :ubuntu1404]
+  end
+
+  def backend
+    return @backend if defined?(@backend)
+    scriptpath = ::File.realpath(::File.dirname(__FILE__))
+
+    # create mock backend
+    @backend = Inspec::Backend.create({ backend: :mock })
+    mock = @backend.backend
+
+    # set os emulation
+    mock.mock_os(@os)
+
+    # create all mock files
+    local = Train.create('local').connection
+    mockfile = lambda { |x|
+      path = ::File.join(scriptpath, '/unit/mock/files', x)
+      local.file(path)
+    }
+    mockdir = lambda { |x|
+      md = Object.new
+
+      class << md
+        attr_accessor :isdir
+      end
+      md.isdir = x
+
+      def md.directory?
+        isdir
+      end
+      md
+    }
+
+    mock.files = {
+      '/proc/net/bonding/bond0' => mockfile.call('bond0'),
+      '/etc/ssh/ssh_config' => mockfile.call('ssh_config'),
+      '/etc/ssh/sshd_config' => mockfile.call('sshd_config'),
+      '/etc/passwd' => mockfile.call('passwd'),
+      '/etc/ntp.conf' => mockfile.call('ntp.conf'),
+      '/etc/login.defs' => mockfile.call('login.defs'),
+      '/etc/security/limits.conf' => mockfile.call('limits.conf'),
+      '/etc/inetd.conf' => mockfile.call('inetd.conf'),
+      '/etc/group' => mockfile.call('etcgroup'),
+      '/etc/audit/auditd.conf' => mockfile.call('auditd.conf'),
+      '/etc/mysql/my.cnf' => mockfile.call('mysql.conf'),
+      '/etc/mysql/mysql2.conf' => mockfile.call('mysql2.conf'),
+      'kitchen.yml' => mockfile.call('kitchen.yml'),
+      'example.csv' => mockfile.call('example.csv'),
+      'policyfile.lock.json' => mockfile.call('policyfile.lock.json'),
+      '/sys/class/net/br0/bridge' => mockdir.call(true),
+    }
+
+    # create all mock commands
+    cmd = lambda {|x|
+      stdout = ::File.read(::File.join(scriptpath, '/unit/mock/cmd/'+x))
+      mock.mock_command('', stdout, '', 0)
+    }
+
+    empty = lambda {
+      mock.mock_command('', '', '', 0)
+    }
+
+    mock.commands = {
+      'ps aux' => cmd.call('ps-aux'),
+      'type win_secpol.cfg' => cmd.call('secedit-export'),
+      'secedit /export /cfg win_secpol.cfg' => cmd.call('success'),
+      'del win_secpol.cfg' => cmd.call('success'),
+      'su - root -c \'echo $PATH\'' => cmd.call('PATH'),
+      '(Get-Item \'Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Schedule\').GetValue(\'Start\')' => cmd.call('reg_schedule'),
+      'Auditpol /get /subcategory:\'User Account Management\' /r' => cmd.call('auditpol'),
+      '/sbin/auditctl -l' => cmd.call('auditctl'),
+      'yum -v repolist all'  => cmd.call('yum-repolist-all'),
+      'dpkg -s curl' => cmd.call('dpkg-s-curl'),
+      'rpm -qia curl' => cmd.call('rpm-qia-curl'),
+      'pacman -Qi curl' => cmd.call('pacman-qi-curl'),
+      'gem list --local -a -q ^rubocop$' => cmd.call('gem-list-local-a-q-rubocop'),
+      'npm ls -g --json bower' => cmd.call('npm-ls-g--json-bower'),
+      'pip show jinja2' => cmd.call('pip-show-jinja2'),
+      "Get-Package -Name 'Mozilla Firefox' | ConvertTo-Json" => cmd.call('get-package-firefox'),
+      "Get-Package -Name 'Ruby 2.1.6-p336-x64' | ConvertTo-Json" => cmd.call('get-package-ruby'),
+      "New-Object -Type PSObject | Add-Member -MemberType NoteProperty -Name Service -Value (Get-Service -Name dhcp| Select-Object -Property Name, DisplayName, Status) -PassThru | Add-Member -MemberType NoteProperty -Name WMI -Value (Get-WmiObject -Class Win32_Service | Where-Object {$_.Name -eq 'dhcp' -or $_.DisplayName -eq 'dhcp'} | Select-Object -Property StartMode) -PassThru | ConvertTo-Json" => cmd.call('get-service-dhcp'),
+      "Get-WindowsFeature | Where-Object {$_.Name -eq 'dhcp' -or $_.DisplayName -eq 'dhcp'} | Select-Object -Property Name,DisplayName,Description,Installed,InstallState | ConvertTo-Json" => cmd.call('get-windows-feature'),
+      'lsmod' => cmd.call('lsmod'),
+      '/sbin/sysctl -q -n net.ipv4.conf.all.forwarding' => cmd.call('sbin_sysctl'),
+      # ports on windows
+      'Get-NetTCPConnection | Select-Object -Property State, Caption, Description, LocalAddress, LocalPort, RemoteAddress, RemotePort, DisplayName, Status | ConvertTo-Json' => cmd.call('get-net-tcpconnection'),
+      # ports on mac
+      'lsof -nP -iTCP -iUDP -sTCP:LISTEN' => cmd.call('lsof-np-itcp'),
+      # ports on linux
+      'netstat -tulpen' => cmd.call('netstat-tulpen'),
+      # ports on freebsd
+      'sockstat -46l' => cmd.call('sockstat'),
+      # packages on windows
+      "Get-WmiObject -Class Win32_Product | Where-Object {$_.Name -eq 'Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161'} | Select-Object -Property Name,Version,Vendor,PackageCode,Caption,Description | ConvertTo-Json" => cmd.call('win32_product'),
+      # service status upstart on ubuntu
+      'initctl status ssh' => cmd.call('initctl-status-ssh'),
+      # service config for upstart on ubuntu
+      'initctl show-config ssh' => cmd.call('initctl-show-config-ssh'),
+      # show ssh service Centos 7
+      'systemctl show --all sshd' => cmd.call('systemctl-show-all-sshd'),
+      # services on macos
+      'launchctl list' => cmd.call('launchctl-list'),
+      # services on freebsd 10
+      'service -e' => cmd.call('service-e'),
+      'service sendmail onestatus' => cmd.call('service-sendmail-onestatus'),
+      # services for system 5 e.g. centos6, debian 6
+      'service sshd status' => cmd.call('service-sshd-status'),
+      'find /etc/rc*.d -name S*' => cmd.call('find-etc-rc-d-name-S'),
+      'ls -1 /etc/init.d/' => cmd.call('ls-1-etc-init.d'),
+      # user information for linux
+      'id root' => cmd.call('id-root'),
+      'getent passwd root' => cmd.call('getent-passwd-root'),
+      'chage -l root' => cmd.call('chage-l-root'),
+      # user info for mac
+      'id chartmann' => cmd.call('id-chartmann'),
+      'dscl -q . -read /Users/chartmann NFSHomeDirectory PrimaryGroupID RecordName UniqueID UserShell' => cmd.call('dscl'),
+      # user info for freebsd
+      'pw usershow root -7' => cmd.call('pw-usershow-root-7'),
+      # user info for windows
+      '650b6b72a66316418b25421a54afe21a230704558082914c54711904bb10e370' => cmd.call('GetUserAccount'),
+      # group info for windows
+      'Get-WmiObject Win32_Group | Select-Object -Property Caption, Domain, Name, SID, LocalAccount | ConvertTo-Json' => cmd.call('GetWin32Group'),
+      # network interface
+      '9e80f048a1af5a0f6ab8a465e46ea5ed5ba6587e9b5e54a7a0c0a1a02bb6f663' => cmd.call('find-net-interface'),
+      'c33821dece09c8b334e03a5bb9daefdf622007f73af4932605e758506584ec3f' => empty.call,
+      'Get-NetAdapter | Select-Object -Property Name, InterfaceDescription, Status, State, MacAddress, LinkSpeed, ReceiveLinkSpeed, TransmitLinkSpeed, Virtual | ConvertTo-Json' => cmd.call('Get-NetAdapter'),
+      # bridge on linux
+      'ls -1 /sys/class/net/br0/brif/' => cmd.call('ls-sys-class-net-br'),
+      # bridge on Windows
+      'Get-NetAdapterBinding -ComponentID ms_bridge | Get-NetAdapter | Select-Object -Property Name, InterfaceDescription | ConvertTo-Json' => cmd.call('get-netadapter-binding-bridge'),
+      # host for Windows
+      'Resolve-DnsName –Type A microsoft.com | ConvertTo-Json' => cmd.call('Resolve-DnsName'),
+      'Test-NetConnection -ComputerName microsoft.com | Select-Object -Property ComputerName, PingSucceeded | ConvertTo-Json' => cmd.call('Test-NetConnection'),
+      # host for Linux
+      'getent hosts example.com' => cmd.call('getent-hosts-example.com'),
+      'ping -w 1 -c 1 example.com' => cmd.call('ping-example.com'),
+      # apt
+      "find /etc/apt/ -name *.list -exec sh -c 'cat {} || echo -n' \\;" => cmd.call('etc-apt'),
+      # iptables
+      'iptables  -S' => cmd.call('iptables-s'),
+    }
+
+    @backend
+  end
+
+  # loads a resource class and instantiates the class with the given arguments
+  def load_resource(resource, *args)
+    # initialize resource with backend and parameters
+    @resource_class = Inspec::Resource.registry[resource]
+    @resource = @resource_class.new(backend, resource, *args)
+  end
+end
+
+def load_resource(*args)
+  m = MockLoader.new(:ubuntu1404)
+  m.send('load_resource', *args)
+end