inspec 0.9.9 → 0.9.10

data/test/integration/.kitchen/new-ubuntu-1404.yml

@@ -0,0 +1 @@
+--- {}

data/test/integration/Berksfile

@@ -2,3 +2,4 @@ source 'https://supermarket.chef.io'
 
 cookbook 'apt'
 cookbook 'os_prepare', path: './cookbooks/os_prepare'
+cookbook 'runit', github: 'hw-cookbooks/runit'

data/test/integration/Berksfile.lock

@@ -0,0 +1,27 @@
+DEPENDENCIES
+  apt
+  os_prepare
+    path: cookbooks/os_prepare
+  runit
+    git: git://github.com/hw-cookbooks/runit.git
+    revision: 994febbc29e2bb0d9d1c54662f19b65da76505a3
+
+GRAPH
+  apt (2.8.2)
+  build-essential (2.2.4)
+  chef-sugar (3.3.0)
+  openssl (4.4.0)
+    chef-sugar (>= 3.1.1)
+  os_prepare (1.0.0)
+    apt (>= 0.0.0)
+    postgresql (>= 0.0.0)
+    runit (>= 0.0.0)
+    yum (>= 0.0.0)
+  packagecloud (0.1.1)
+  postgresql (4.0.0)
+    apt (>= 1.9.0)
+    build-essential (>= 0.0.0)
+    openssl (~> 4.0)
+  runit (1.7.6)
+    packagecloud (>= 0.0.0)
+  yum (3.8.1)

data/test/integration/TODO.md

@@ -0,0 +1,15 @@
+# linux
+directory
+group
+host
+os_env
+port
+service
+user
+
+
+# windows
+registry_key
+windows_feature
+audit_policy
+security_policy

data/test/integration/cookbooks/os_prepare/metadata.rb

@@ -6,3 +6,5 @@ description 'This cookbook prepares the test operating systems'
 version '1.0.0'
 depends 'apt'
 depends 'yum'
+depends 'runit'
+depends 'postgresql'

data/test/integration/cookbooks/os_prepare/recipes/_runit_service_centos.rb

@@ -0,0 +1,34 @@
+# encoding: utf-8
+# author: Stephan Renatus
+
+include_recipe 'runit::default'
+
+# put ctl in alt location
+directory '/opt/chef/embedded/sbin' do
+  recursive true
+  action :create
+end
+
+link '/opt/chef/embedded/sbin/sv' do
+  to '/sbin/sv' # default location
+end
+
+runit_service 'running-runit-service' do
+  default_logger true
+  run_template_name 'default-svlog'
+end
+
+runit_service 'not-enabled-runit-service' do
+  default_logger true
+  run_template_name 'default-svlog'
+  start_down true
+  action :enable
+end
+
+runit_service 'not-running-runit-service' do
+  default_logger true
+  run_template_name 'default-svlog'
+  action :create
+end
+
+execute 'sv down not-running-runit-service'

data/test/integration/cookbooks/os_prepare/recipes/default.rb

@@ -11,3 +11,4 @@ include_recipe('os_prepare::json_yaml_csv_ini')
 include_recipe('os_prepare::package')
 include_recipe('os_prepare::registry_key')
 include_recipe('os_prepare::service')
+include_recipe('os_prepare::postgres')

data/test/integration/cookbooks/os_prepare/recipes/mount.rb

@@ -4,9 +4,9 @@
 #
 # file mount tests
 
-# download alpine linux for file mount tests
-remote_file '/root/alpine-3.3.0-x86_64.iso' do
-  source 'http://wiki.alpinelinux.org/cgi-bin/dl.cgi/v3.3/releases/x86_64/alpine-3.3.0-x86_64.iso'
+# copy iso file for mount tests
+# NB created using `mkdir empty; mkisofs -o empty.iso empty/`
+cookbook_file '/root/empty.iso' do
   owner 'root'
   group 'root'
   mode '0755'
@@ -21,9 +21,9 @@ directory '/mnt/iso-disk' do
   action :create
 end
 
-# mount -o loop /root/alpine-3.3.0-x86_64.iso /mnt/iso-disk
+# mount -o loop /root/empty.iso /mnt/iso-disk
 mount '/mnt/iso-disk' do
-  device '/root/alpine-3.3.0-x86_64.iso'
+  device '/root/empty.iso'
   options 'loop'
   action [:mount, :enable]
 end

data/test/integration/cookbooks/os_prepare/recipes/postgres.rb

@@ -0,0 +1,12 @@
+# encoding: utf-8
+# author: Stephan Renatus
+#
+# installs everyting for the postgres tests
+
+# hw-cookbooks/postgresql is tested on these platforms
+case node['platform']
+when 'ubuntu', 'centos'
+  node.default['postgresql']['config']['listen_addresses'] = 'localhost'
+  node.default['postgresql']['password']['postgres'] = 'md506be11be01439cb4abd537e454df34ea' # "inspec"
+  include_recipe 'postgresql::server'
+end

data/test/integration/cookbooks/os_prepare/recipes/service.rb

@@ -4,9 +4,13 @@
 #
 # prepares services
 
-# install ntp as a service on ubuntu
 case node['platform']
 when 'ubuntu'
-  include_recipe('apt')
+  # install ntp as a service
+  include_recipe 'apt::default'
   package 'ntp'
+
+when 'centos'
+  # install runit for alternative service mgmt
+  include_recipe 'os_prepare::_runit_service_centos'
 end

data/test/integration/cookbooks/os_prepare/templates/default/sv-default-svlog-run.erb

@@ -0,0 +1,3 @@
+#!/bin/sh
+exec > /dev/null
+exec yes 

data/test/integration/test/integration/default/certificate_spec.rb

@@ -0,0 +1,7 @@
+
+# certificate "mail" do
+#   cert_path "/etc/postfix/ssl"
+#   owner "postfix"
+#   group "postfix"
+# end
+# /etc/ssl/certs

data/test/integration/test/integration/default/file_spec.rb

@@ -124,7 +124,7 @@ if os.unix?
     it { should be_mounted }
     it { should be_mounted.with( :type => 'iso9660' ) }
     it { should be_mounted.with( :type => 'iso9660', :options => { :ro => true } ) }
-    it { should be_mounted.with( :type => 'iso9660', :device => '/root/alpine-3.3.0-x86_64.iso' ) }
+    it { should be_mounted.with( :type => 'iso9660', :device => '/root/empty.iso' ) }
     it { should_not be_mounted.with( :type => 'ext4' ) }
     it { should_not be_mounted.with( :type => 'xfs' ) }
   end
@@ -133,7 +133,7 @@ if os.unix?
   # also see mount_spec.rb
   describe file('/mnt/iso-disk') do
     it { should be_mounted.only_with( {
-      :device=>"/root/alpine-3.3.0-x86_64.iso",
+      :device=>"/root/empty.iso",
       :type=>"iso9660",
       :options=>{
         :ro=>true}

data/test/integration/test/integration/default/mount_spec.rb

@@ -4,7 +4,7 @@
 describe mount '/mnt/iso-disk' do
   it { should be_mounted }
   its('count') { should eq  1 }
-  its('device') { should eq '/root/alpine-3.3.0-x86_64.iso' }
+  its('device') { should eq '/root/empty.iso' }
   its('type') { should eq  'iso9660' }
   its('options') { should eq  ['ro'] }
 end

data/test/integration/test/integration/default/postgres_session_spec.rb

@@ -0,0 +1,9 @@
+# encoding: utf-8
+
+# postgres-server is installed on these platforms
+if ['ubuntu', 'centos'].include? os['family']
+  postgres = postgres_session('postgres', 'inspec')
+  describe postgres.query('show ssl;') do
+    its('output') { should eq 'on' }
+  end
+end

data/test/integration/test/integration/default/service_spec.rb

@@ -42,3 +42,37 @@ if os[:family] == 'ubuntu'
     it { should be_running }
   end
 end
+
+# extra tests for alt. runit on centos with runit_service
+if os[:family] == 'centos'
+  describe runit_service('running-runit-service') do
+    it { should be_enabled }
+    it { should be_installed }
+    it { should be_running }
+  end
+
+  describe runit_service('not-running-runit-service') do
+    it { should be_enabled }
+    it { should be_installed }
+    it { should_not be_running }
+  end
+
+  describe runit_service('not-enabled-runit-service') do
+    it { should_not be_enabled }
+    it { should be_installed }
+    it { should_not be_running }
+  end
+
+  # alt. ctl location
+  describe runit_service('running-runit-service', '/opt/chef/embedded/sbin/sv') do
+    it { should be_enabled }
+    it { should be_installed }
+    it { should be_running }
+  end
+
+  describe runit_service('unknown') do
+    it { should_not be_enabled }
+    it { should_not be_installed }
+    it { should_not be_running }
+  end
+end

data/test/mac/service_spec.rb

@@ -0,0 +1,5 @@
+describe service('com.apple.quicklook') do
+  it { should be_enabled }
+  it { should be_installed }
+  it { should be_running }
+end

data/test/serverspec/.kitchen.yml

@@ -0,0 +1,18 @@
+---
+driver:
+  name: vagrant
+
+provisioner:
+  name: chef_zero
+
+verifier:
+  name: inspec
+  sudo: true
+
+platforms:
+  - name: ubuntu-14.04
+
+suites:
+  - name: default
+    run_list:
+    attributes:

data/test/serverspec/.kitchen/default-ubuntu-1404.yml

@@ -0,0 +1,6 @@
+---
+hostname: 127.0.0.1
+port: '2205'
+username: vagrant
+ssh_key: "/Users/chartmann/Development/vulcano/vulcano-cli/test/serverspec/.kitchen/kitchen-vagrant/kitchen-serverspec-default-ubuntu-1404/.vagrant/machines/default/virtualbox/private_key"
+last_action: verify

data/test/serverspec/.kitchen/kitchen-vagrant/kitchen-serverspec-default-ubuntu-1404/.vagrant/machines/default/virtualbox/action_set_name

@@ -0,0 +1 @@
+1449613760

data/test/serverspec/.kitchen/kitchen-vagrant/kitchen-serverspec-default-ubuntu-1404/.vagrant/machines/default/virtualbox/creator_uid

@@ -0,0 +1 @@
+501

data/test/serverspec/.kitchen/kitchen-vagrant/kitchen-serverspec-default-ubuntu-1404/.vagrant/machines/default/virtualbox/id

@@ -0,0 +1 @@
+0f519e32-868a-4bbb-be75-3e784c785917

data/test/serverspec/.kitchen/kitchen-vagrant/kitchen-serverspec-default-ubuntu-1404/.vagrant/machines/default/virtualbox/index_uuid

@@ -0,0 +1 @@
+f66024948ae34585a7b1d6c7e08ba4a1

data/test/serverspec/.kitchen/kitchen-vagrant/kitchen-serverspec-default-ubuntu-1404/.vagrant/machines/default/virtualbox/private_key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEA1KWrGcypqQFzz4ZFYjHBqk/d4QV9c6JYO9xV7mNWmLknpivT
+ry976zBqeV923vUvZ2vndMtI+Z7tg5YpsaJCdbNuc078AyjzG+ahVPWrcMLa+hyk
+VuzLgqyrlWLRc5PcB4JSVVDIVzamarMz9Xo7MOv2KjQBeBSRPQCAWXlrC0zcop5g
+QGgokclPYF780JGBVTFt00y1AS6ZKUbin+YB9RzuQetixe8QIQfKCrljMJeQ9Ppt
+bW2Fiyukfg0YAc3SLZnNyrLWtqgLgCkk86jICKr0cZeqeIeZ8Qojo9ERDi5igItg
+0HP+W2P47k42NUXTZZ8tZ54HmJ/pWsnclJN5WwIDAQABAoIBADzEOujce384Uwfy
+rtEottcci6NKFld9BQnWJRhCevSZtKLf01Y0k4zaARM+HJIKLsm3JCVUEj6DFAyO
+VMvWOne4FtAMuieNBCvs9B17Nsq6ZCklFjFg6acmAMJnwsLsdewPacfHlfiWPWgw
+XaDAlTmdtHLK+cB+4CI2incHI3fOsbfus/EhT9rNrUhw3Zn5/dq0TaEO5amp8QEN
+/Tblo2LpqEjudqvPO3Yud5WZb1ByFjE1FvPglgrPAsXztInKSHYaURjQ8K6CFNhg
+ITmqBF5Da9Ha8u9pCTPP6a4/FQkK0JcOuiTgy3EIWTa+Ioqz3VWhX4/qXWgQdyAH
+74jWh4ECgYEA78k8s3ZtCKoVCgZWDVn6Y1cLiAJkl0bMS4sUMwDCHYaghDa5mXiz
+CbkIw/3MGPooXMQhwewJxex0LXEFJhHDyvjIP1G2CE0qEOiScOhSTKeEney/50Xe
+ZC/neay57IlQUNBRfJVokjMTUX40+xahpuS24FKWuv5IbtZcbgek8VkCgYEA4wam
+FAW574ORmqyfi0FXCZarMmaNQnay3IEDk+NWtg67P+gbz7j6UAmYsqqaVOdaAfOs
+DQlu/F/8uESaqlgpRdyH+LkKrIUDBJ6E90XoY21KgYhb6Dyq14iVaVyPt2GMP8+C
+0JtYn2uEPShC4KvzIKw6ywqdCvTqrnRBeiGuVdMCgYBhSnZtnoxo6pG0ypNZwXtd
+mTDdk5L66kf0Es80Tod0cW5plsbBpX6HYGNVGoIYVE/SK+ZCh6IDg4gz89qR8r1N
+epnNTzsbrSt3RtY8J5dU8NdXOHs4vFmarvEtpk6d0a0bzRpzATA3ua+J7jpS8oDO
+dZhZ9kigQJJlHmbMYh+jqQKBgAGEa9u6ZhG5uWFlQfO2ThScUyyVDuCg1nUuz41P
+eabh1lKJBJaQz+t1BPY8uadTnIBi1oWHyJwbMB8zJi15RV1YKfh5lB6vDOQdAxp7
+9x+i/Vp8RND6htHF8emwWq2JE1zh0CgAwcje+RVHjZrey1Muk34D5iTKmj7sO/vK
++dVNAoGBAIphTIYzt1D73qtagNdp5v4qAs87HviY6Us5PC3Hfewm1zqBofeY/DAw
+l/6zjmUNPnTvvV6eiFDPvSgoXeKlO7fCY0Jbpr88Izm/jfClSSdRXPHD59ZS8w6Q
+0xKjdXvfwmxo8xHKheB1tuiHSTPNlq/eSEFEDw7U51L8pcm2Mx7w
+-----END RSA PRIVATE KEY-----

data/test/serverspec/.kitchen/kitchen-vagrant/kitchen-serverspec-default-ubuntu-1404/.vagrant/machines/default/virtualbox/synced_folders

@@ -0,0 +1 @@
+{}

data/test/serverspec/.kitchen/kitchen-vagrant/kitchen-serverspec-default-ubuntu-1404/Vagrantfile

@@ -0,0 +1,9 @@
+Vagrant.configure("2") do |c|
+  c.berkshelf.enabled = false if Vagrant.has_plugin?("vagrant-berkshelf")
+  c.vm.box = "opscode-ubuntu-14.04"
+  c.vm.box_url = "https://opscode-vm-bento.s3.amazonaws.com/vagrant/virtualbox/opscode_ubuntu-14.04_chef-provisionerless.box"
+  c.vm.hostname = "default-ubuntu-1404"
+  c.vm.synced_folder ".", "/vagrant", disabled: true
+  c.vm.provider :virtualbox do |p|
+  end
+end

data/test/serverspec/.kitchen/logs/default-ubuntu-1404.log

@@ -0,0 +1,2 @@
+I, [2015-12-08T23:48:01.367628 #25801]  INFO -- default-ubuntu-1404: -----> Verifying <default-ubuntu-1404>...
+I, [2015-12-08T23:48:01.990146 #25801]  INFO -- default-ubuntu-1404: Finished verifying <default-ubuntu-1404> (0m0.62s).

data/test/serverspec/.kitchen/logs/kitchen.log

@@ -0,0 +1,3 @@
+I, [2015-12-08T23:48:00.475985 #25801]  INFO -- Kitchen: -----> Starting Kitchen (v1.4.2)
+I, [2015-12-08T23:48:01.367571 #25801]  INFO -- Kitchen: -----> Verifying <default-ubuntu-1404>...
+I, [2015-12-08T23:48:01.990267 #25801]  INFO -- Kitchen: -----> Kitchen is finished. (0m1.51s)

data/test/serverspec/Berksfile

@@ -0,0 +1,3 @@
+source 'https://supermarket.chef.io'
+
+cookbook 'apt'

data/test/serverspec/Berksfile.lock

@@ -0,0 +1,5 @@
+DEPENDENCIES
+  apt
+
+GRAPH
+  apt (2.9.2)

data/test/serverspec/TODO.md

@@ -0,0 +1,2 @@
+- nested describe
+- require 'serverspec'

data/test/serverspec/test/integration/default/serverspec/os_spec.rb

@@ -0,0 +1,25 @@
+# encoding: utf-8
+
+require 'spec_helper'
+
+describe command('find / -name \'.rhosts\' | wc -l ') do
+  its(:stdout) { should match(/^0/) }
+end
+
+describe command('find / -name \'hosts.equiv\' | wc -l ') do
+  its(:stdout) { should match(/^0/) }
+end
+
+describe file('/etc/shadow') do
+  it { should exist }
+  it { should be_file }
+  it { should be_owned_by 'root' }
+end
+
+describe command('echo $PATH | grep -ci \'\.\'') do
+  its(:stdout) { should match(/^0/) }
+end
+
+describe file('/etc/login.defs') do
+  its(:content) { should match(/^SU_NAME\s*su/) }
+end

data/test/serverspec/test/integration/default/serverspec/spec_helper.rb

@@ -0,0 +1,48 @@
+# encoding: utf-8
+
+if ENV['STANDALONE_SPEC']
+
+  # require 'serverspec'
+  require 'pathname'
+  require 'net/ssh'
+  require 'highline/import'
+
+  set :backend, :ssh
+
+  RSpec.configure do |c|
+
+    if ENV['ASK_SUDO_PASSWORD']
+      c.sudo_password = ask('Enter sudo password: ') { |q| q.echo = false }
+    else
+      c.sudo_password = ENV['SUDO_PASSWORD']
+    end
+
+    options = {}
+
+    if ENV['ASK_LOGIN_PASSWORD']
+      options[:password] = ask("\nEnter login password: ") { |q| q.echo = false }
+    else
+      options[:password] = ENV['LOGIN_PASSWORD']
+    end
+
+    if ENV['ASK_LOGIN_USERNAME']
+      options[:user] = ask("\nEnter login username: ") { |q| q.echo = false }
+    else
+      options[:user] = ENV['LOGIN_USERNAME'] || ENV['user'] || Etc.getlogin
+    end
+
+    if options[:user].nil?
+      puts 'specify login user env LOGIN_USERNAME= or user='
+      exit 1
+    end
+
+    c.host = ENV['TARGET_HOST']
+    c.ssh_options = options.merge(Net::SSH::Config.for(c.host))
+
+  end
+
+else
+#   require 'serverspec'
+#
+  set :backend, :exec
+end