inspec 2.1.0 → 2.1.10

data/examples/README.md

@@ -1,8 +1,8 @@
-# InSpec examples
-
-This directory contains multiple examples that explain the usage of the InSpec:
-
- - `kitchen-chef` Test-Kitchen with [Chef and InSpec](kitchen-chef/README.md)
- - `kitchen-puppet` Test-Kitchen with [Puppet and InSpec](kitchen-puppet/README.md)
- - `kitchen-ansible` Test-Kitchen with [Ansible and InSpec](kitchen-ansible/README.md)
- - `profile` Example of an InSpec profile
+# InSpec examples
+
+This directory contains multiple examples that explain the usage of the InSpec:
+
+ - `kitchen-chef` Test-Kitchen with [Chef and InSpec](kitchen-chef/README.md)
+ - `kitchen-puppet` Test-Kitchen with [Puppet and InSpec](kitchen-puppet/README.md)
+ - `kitchen-ansible` Test-Kitchen with [Ansible and InSpec](kitchen-ansible/README.md)
+ - `profile` Example of an InSpec profile

data/examples/inheritance/README.md

@@ -1,65 +1,65 @@
-# Example InSpec Profile
-
-This example shows the use of InSpec [profile](../../docs/profiles.rst) inheritance.
-
-## Verify a profile
-
-InSpec ships with built-in features to verify a profile structure.
-
-```bash
-$ inspec check examples/inheritance
-```
-
-## Execute a profile
-
-To run a profile on a local machine use `inspec exec /path/to/profile`. All dependencies are automatically resolved.
-
-```bash
-$ inspec exec examples/inheritance
-```
-
-## Set attributes for dependent profiles
-
-Without setting attributes, an `inspec exec` would return the following:
-
-```
-$ inspec git:(master) ✗ b inspec exec examples/inheritance
-
-Profile: InSpec example inheritance (inheritance)
-Version: 1.0.0
-Target:  local://
-
-
-  ○  gordon-1.0: Verify the version number of Gordon (1 skipped)
-     ○  Can't find file "/tmp/gordon/config.yaml"
-     ✔  File  content should match nil
-  ✔  ssh-1: Allow only SSH Protocol 2
-     ✔  File /bin/sh should be owned by "root"
-
-  File /tmp
-     ✔  should be directory
-  alice should
-     ✖  eq "bob"
-
-     expected: "bob"
-          got: "alice"
-
-     (compared using ==)
-
-  should eq
-     ✖  "secret"
-
-     expected: "secret"
-          got: nil
-
-     (compared using ==)
-
-
-Test Summary: 3 successful, 2 failures, 1 skipped
-```
-
-To pass in attributes, just call:
-
-```
-$ inspec exec examples/inheritance --attrs examples/profile-attribute.yml
-```
+# Example InSpec Profile
+
+This example shows the use of InSpec [profile](../../docs/profiles.rst) inheritance.
+
+## Verify a profile
+
+InSpec ships with built-in features to verify a profile structure.
+
+```bash
+$ inspec check examples/inheritance
+```
+
+## Execute a profile
+
+To run a profile on a local machine use `inspec exec /path/to/profile`. All dependencies are automatically resolved.
+
+```bash
+$ inspec exec examples/inheritance
+```
+
+## Set attributes for dependent profiles
+
+Without setting attributes, an `inspec exec` would return the following:
+
+```
+$ inspec git:(master) ✗ b inspec exec examples/inheritance
+
+Profile: InSpec example inheritance (inheritance)
+Version: 1.0.0
+Target:  local://
+
+
+  ○  gordon-1.0: Verify the version number of Gordon (1 skipped)
+     ○  Can't find file "/tmp/gordon/config.yaml"
+     ✔  File  content should match nil
+  ✔  ssh-1: Allow only SSH Protocol 2
+     ✔  File /bin/sh should be owned by "root"
+
+  File /tmp
+     ✔  should be directory
+  alice should
+     ✖  eq "bob"
+
+     expected: "bob"
+          got: "alice"
+
+     (compared using ==)
+
+  should eq
+     ✖  "secret"
+
+     expected: "secret"
+          got: nil
+
+     (compared using ==)
+
+
+Test Summary: 3 successful, 2 failures, 1 skipped
+```
+
+To pass in attributes, just call:
+
+```
+$ inspec exec examples/inheritance --attrs examples/profile-attribute.yml
+```

data/examples/inheritance/controls/example.rb

@@ -1,14 +1,14 @@
-# encoding: utf-8
-# copyright: 2016, Chef Software, Inc.
-
-# manipulate controls of `profile`
-include_controls 'profile' do
-  skip_control 'tmp-1.0'
-
-  control 'gordon-1.0' do
-    impact 0.0
-  end
-end
-
-# load all controls of `profile-attribute`
-include_controls 'profile-attribute'
+# encoding: utf-8
+# copyright: 2016, Chef Software, Inc.
+
+# manipulate controls of `profile`
+include_controls 'profile' do
+  skip_control 'tmp-1.0'
+
+  control 'gordon-1.0' do
+    impact 0.0
+  end
+end
+
+# load all controls of `profile-attribute`
+include_controls 'profile-attribute'

data/examples/inheritance/inspec.yml

@@ -1,15 +1,15 @@
-name: inheritance
-title: InSpec example inheritance
-maintainer: Chef Software, Inc.
-copyright: Chef Software, Inc.
-copyright_email: support@chef.io
-license: Apache-2.0
-summary: Demonstrates the use of InSpec profile inheritance
-version: 1.0.0
-supports:
-  - os-family: unix
-depends:
-  - name: profile
-    path: ../profile
-  - name: profile-attribute
-    path: ../profile-attribute
+name: inheritance
+title: InSpec example inheritance
+maintainer: Chef Software, Inc.
+copyright: Chef Software, Inc.
+copyright_email: support@chef.io
+license: Apache-2.0
+summary: Demonstrates the use of InSpec profile inheritance
+version: 1.0.0
+supports:
+  - os-family: unix
+depends:
+  - name: profile
+    path: ../profile
+  - name: profile-attribute
+    path: ../profile-attribute

data/examples/kitchen-ansible/.kitchen.yml

@@ -1,25 +1,25 @@
----
-driver:
-  name: vagrant
-
-provisioner:
-  hosts: webservers
-  name: ansible_playbook
-  # Use el7 epel repo instead of the default el6
-  ansible_yum_repo: "https://download.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm"
-  require_chef_for_busser: false
-  require_ruby_for_busser: false
-  ansible_verbosity: 2
-  ansible_verbose: true
-  # starting playbook is at: test/integration/default/default.yml
-
-verifier:
-  name: inspec
-
-platforms:
-  - name: centos-7.1
-  - name: ubuntu-12.04
-  - name: ubuntu-14.04
-
-suites:
-  - name: default
+---
+driver:
+  name: vagrant
+
+provisioner:
+  hosts: webservers
+  name: ansible_playbook
+  # Use el7 epel repo instead of the default el6
+  ansible_yum_repo: "https://download.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm"
+  require_chef_for_busser: false
+  require_ruby_for_busser: false
+  ansible_verbosity: 2
+  ansible_verbose: true
+  # starting playbook is at: test/integration/default/default.yml
+
+verifier:
+  name: inspec
+
+platforms:
+  - name: centos-7.1
+  - name: ubuntu-12.04
+  - name: ubuntu-14.04
+
+suites:
+  - name: default

data/examples/kitchen-ansible/Gemfile

@@ -1,19 +1,19 @@
-# encoding: utf-8
-source 'https://rubygems.org'
-
-gem 'inspec', path: '../../.'
-
-group :test do
-  gem 'bundler', '~> 1.5'
-  gem 'minitest', '~> 5.5'
-  gem 'rake', '~> 10'
-  gem 'simplecov', '~> 0.10'
-end
-
-group :integration do
-  gem 'test-kitchen', '~> 1.4'
-  gem 'kitchen-ansible'
-  gem 'kitchen-vagrant'
-  gem 'kitchen-inspec'
-  gem 'concurrent-ruby', '~> 0.9'
-end
+# encoding: utf-8
+source 'https://rubygems.org'
+
+gem 'inspec', path: '../../.'
+
+group :test do
+  gem 'bundler', '~> 1.5'
+  gem 'minitest', '~> 5.5'
+  gem 'rake', '~> 10'
+  gem 'simplecov', '~> 0.10'
+end
+
+group :integration do
+  gem 'test-kitchen', '~> 1.4'
+  gem 'kitchen-ansible'
+  gem 'kitchen-vagrant'
+  gem 'kitchen-inspec'
+  gem 'concurrent-ruby', '~> 0.9'
+end

data/examples/kitchen-ansible/README.md

@@ -1,53 +1,53 @@
-# Test-Kitchen - InSpec with Ansible Example
-
-This example demonstrates a complete roundtrip via [Test-Kitchen](http://kitchen.ci/).
-
-```bash
-# install all dependencies
-$ bundle install
-# show all available tests
-$ bundle exec kitchen list
-Instance             Driver   Provisioner      Verifier  Transport  Last Action
-default-centos-71    Vagrant  AnsiblePlaybook  Inspec    Ssh        <Not Created>
-default-ubuntu-1204  Vagrant  AnsiblePlaybook  Inspec    Ssh        <Not Created>
-default-ubuntu-1404  Vagrant  AnsiblePlaybook  Inspec    Ssh        <Not Created>
-
-# Now we are ready to run a complete test
-$ bundle exec kitchen test default-ubuntu-1404
------> Starting Kitchen (v1.4.2)
------> Cleaning up any prior instances of <default-ubuntu-1404>
------> Destroying <default-ubuntu-1404>...
-       Finished destroying <default-ubuntu-1404> (0m0.00s).
------> Testing <default-ubuntu-1404>
------> Creating <default-ubuntu-1404>...
-       Bringing machine 'default' up with 'virtualbox' provider...
-       ==> default: Importing base box 'opscode-ubuntu-14.04'...
-
-...
-
-       Vagrant instance <default-ubuntu-1404> created.
-       Finished creating <default-ubuntu-1404> (0m37.51s).
------> Converging <default-ubuntu-1404>...
-       Preparing files for transfer
-       Preparing playbook
-
-...
-
-       Finished converging <default-ubuntu-1404> (1m14.53s).
------> Setting up <default-ubuntu-1404>...
-       Finished setting up <default-ubuntu-1404> (0m0.00s).
------> Verifying <default-ubuntu-1404>...
-.....
-
-Finished in 0.08796 seconds (files took 1 minute 52.3 seconds to load)
-5 examples, 0 failures
-
-       Finished verifying <default-ubuntu-1404> (0m0.27s).
------> Destroying <default-ubuntu-1404>...
-       ==> default: Forcing shutdown of VM...
-       ==> default: Destroying VM and associated drives...
-       Vagrant instance <default-ubuntu-1404> destroyed.
-       Finished destroying <default-ubuntu-1404> (0m4.41s).
-       Finished testing <default-ubuntu-1404> (1m56.73s).
------> Kitchen is finished. (1m57.06s)
-```
+# Test-Kitchen - InSpec with Ansible Example
+
+This example demonstrates a complete roundtrip via [Test-Kitchen](http://kitchen.ci/).
+
+```bash
+# install all dependencies
+$ bundle install
+# show all available tests
+$ bundle exec kitchen list
+Instance             Driver   Provisioner      Verifier  Transport  Last Action
+default-centos-71    Vagrant  AnsiblePlaybook  Inspec    Ssh        <Not Created>
+default-ubuntu-1204  Vagrant  AnsiblePlaybook  Inspec    Ssh        <Not Created>
+default-ubuntu-1404  Vagrant  AnsiblePlaybook  Inspec    Ssh        <Not Created>
+
+# Now we are ready to run a complete test
+$ bundle exec kitchen test default-ubuntu-1404
+-----> Starting Kitchen (v1.4.2)
+-----> Cleaning up any prior instances of <default-ubuntu-1404>
+-----> Destroying <default-ubuntu-1404>...
+       Finished destroying <default-ubuntu-1404> (0m0.00s).
+-----> Testing <default-ubuntu-1404>
+-----> Creating <default-ubuntu-1404>...
+       Bringing machine 'default' up with 'virtualbox' provider...
+       ==> default: Importing base box 'opscode-ubuntu-14.04'...
+
+...
+
+       Vagrant instance <default-ubuntu-1404> created.
+       Finished creating <default-ubuntu-1404> (0m37.51s).
+-----> Converging <default-ubuntu-1404>...
+       Preparing files for transfer
+       Preparing playbook
+
+...
+
+       Finished converging <default-ubuntu-1404> (1m14.53s).
+-----> Setting up <default-ubuntu-1404>...
+       Finished setting up <default-ubuntu-1404> (0m0.00s).
+-----> Verifying <default-ubuntu-1404>...
+.....
+
+Finished in 0.08796 seconds (files took 1 minute 52.3 seconds to load)
+5 examples, 0 failures
+
+       Finished verifying <default-ubuntu-1404> (0m0.27s).
+-----> Destroying <default-ubuntu-1404>...
+       ==> default: Forcing shutdown of VM...
+       ==> default: Destroying VM and associated drives...
+       Vagrant instance <default-ubuntu-1404> destroyed.
+       Finished destroying <default-ubuntu-1404> (0m4.41s).
+       Finished testing <default-ubuntu-1404> (1m56.73s).
+-----> Kitchen is finished. (1m57.06s)
+```

data/examples/kitchen-ansible/files/nginx.repo

@@ -1,6 +1,6 @@
-[nginx]
-name=Nginx Repo
-baseurl=http://nginx.org/packages/centos/7/x86_64
-enabled=1
-gpgcheck=1
-gpgkey=http://nginx.org/keys/nginx_signing.key
+[nginx]
+name=Nginx Repo
+baseurl=http://nginx.org/packages/centos/7/x86_64
+enabled=1
+gpgcheck=1
+gpgkey=http://nginx.org/keys/nginx_signing.key

data/examples/kitchen-ansible/tasks/main.yml

@@ -1,16 +1,16 @@
----
-- name: create nginx yum repo if OS family is RedHat
-  copy: src=nginx.repo dest=/etc/yum.repos.d/
-        owner=root group=root mode=0644
-  when: (ansible_os_family == "RedHat" and ansible_distribution_major_version == "7")
-
-- name: ensure nginx is at the latest version if OS family is RedHat
-  yum: name=nginx state=latest
-  when: ansible_os_family == "RedHat"
-
-- name: ensure nginx is at the latest version if OS family is Debian
-  apt: name=nginx state=latest
-  when: ansible_os_family == "Debian"
-
-- name: ensure nginx is running (and enable it at boot)
-  service: name=nginx state=started enabled=yes
+---
+- name: create nginx yum repo if OS family is RedHat
+  copy: src=nginx.repo dest=/etc/yum.repos.d/
+        owner=root group=root mode=0644
+  when: (ansible_os_family == "RedHat" and ansible_distribution_major_version == "7")
+
+- name: ensure nginx is at the latest version if OS family is RedHat
+  yum: name=nginx state=latest
+  when: ansible_os_family == "RedHat"
+
+- name: ensure nginx is at the latest version if OS family is Debian
+  apt: name=nginx state=latest
+  when: ansible_os_family == "Debian"
+
+- name: ensure nginx is running (and enable it at boot)
+  service: name=nginx state=started enabled=yes