inspec 2.3.10 → 2.3.23

data/examples/kitchen-ansible/files/nginx.repo

@@ -1,6 +0,0 @@
-[nginx]
-name=Nginx Repo
-baseurl=http://nginx.org/packages/centos/7/x86_64
-enabled=1
-gpgcheck=1
-gpgkey=http://nginx.org/keys/nginx_signing.key

data/examples/kitchen-ansible/tasks/main.yml

@@ -1,16 +0,0 @@
----
-- name: create nginx yum repo if OS family is RedHat
-  copy: src=nginx.repo dest=/etc/yum.repos.d/
-        owner=root group=root mode=0644
-  when: (ansible_os_family == "RedHat" and ansible_distribution_major_version == "7")
-
-- name: ensure nginx is at the latest version if OS family is RedHat
-  yum: name=nginx state=latest
-  when: ansible_os_family == "RedHat"
-
-- name: ensure nginx is at the latest version if OS family is Debian
-  apt: name=nginx state=latest
-  when: ansible_os_family == "Debian"
-
-- name: ensure nginx is running (and enable it at boot)
-  service: name=nginx state=started enabled=yes

data/examples/kitchen-ansible/test/integration/default/default.yml

@@ -1,5 +0,0 @@
----
-- name: wrapper playbook for kitchen testing
-  hosts: webservers
-  roles:
-    - kitchen-ansible

data/examples/kitchen-ansible/test/integration/default/web_spec.rb

@@ -1,28 +0,0 @@
-# encoding: utf-8
-# author: Christoph Hartmann
-# author: Dominik Richter
-
-# use basic tests
-describe package('nginx') do
-  it { should be_installed }
-end
-
-# extend tests with metadata
-control '01' do
-  impact 0.7
-  title 'Verify nginx service'
-  desc 'Ensures nginx service is up and running'
-  describe service('nginx') do
-    it { should be_enabled }
-    it { should be_installed }
-    it { should be_running }
-  end
-end
-
-# implement os dependent tests
-web_user = 'www-data'
-web_user = 'nginx' if os[:family] == 'centos'
-
-describe user(web_user) do
-  it { should exist }
-end

data/examples/kitchen-chef/.kitchen.yml

@@ -1,20 +0,0 @@
----
-driver:
-  name: vagrant
-
-provisioner:
-  name: chef_zero
-
-verifier:
-  name: inspec
-
-platforms:
-  - name: centos-7.1
-  - name: ubuntu-12.04
-  - name: ubuntu-14.04
-
-suites:
-  - name: default
-    run_list:
-      - recipe[prepare]
-    attributes:

data/examples/kitchen-chef/Berksfile

@@ -1,3 +0,0 @@
-source 'https://supermarket.chef.io'
-
-metadata

data/examples/kitchen-chef/Gemfile

@@ -1,19 +0,0 @@
-# encoding: utf-8
-source 'https://rubygems.org'
-
-gem 'inspec', path: '../../.'
-
-group :test do
-  gem 'bundler', '~> 1.5'
-  gem 'minitest', '~> 5.5'
-  gem 'rake', '~> 10'
-  gem 'simplecov', '~> 0.10'
-end
-
-group :integration do
-  gem 'berkshelf', '~> 4.0'
-  gem 'test-kitchen', '~> 1.4'
-  gem 'kitchen-vagrant'
-  gem 'kitchen-inspec'
-  gem 'concurrent-ruby', '~> 0.9'
-end

data/examples/kitchen-chef/README.md

@@ -1,27 +0,0 @@
-# Test-Kitchen - InSpec with Chef Example
-
-This example demonstrates a complete roundtrip via [Test-Kitchen](http://kitchen.ci/).
-
-```bash
-# install all dependencies
-$ bundle install
-# show all available tests
-$ bundle exec kitchen list
-Instance             Driver   Provisioner  Verifier  Transport  Last Action
-default-centos-71    Vagrant  ChefSolo     InSpec    Ssh        <Not Created>
-default-ubuntu-1204  Vagrant  ChefSolo     InSpec    Ssh        <Not Created>
-default-ubuntu-1404  Vagrant  ChefSolo     InSpec    Ssh        <Not Created>
-
-# Now we are ready to run a complete test
-$ bundle exec kitchen test default-ubuntu-1404
------> Starting Kitchen (v1.4.2)
------> Verifying <default-ubuntu-1404>...
-
-...
-
-Finished in 0.03241 seconds (files took 0.22475 seconds to load)
-5 examples, 0 failures
-
-       Finished verifying <default-ubuntu-1404> (0m0.16s).
------> Kitchen is finished. (0m0.82s)
-```

data/examples/kitchen-chef/metadata.rb

@@ -1,7 +0,0 @@
-name 'prepare'
-maintainer 'Chef Software, Inc.'
-maintainer_email 'support@chef.io'
-description 'This cookbook prepares the test operating systems'
-version '1.0.0'
-depends 'apt'
-depends 'yum'

data/examples/kitchen-chef/recipes/default.rb

@@ -1,6 +0,0 @@
-# encoding: utf-8
-# author: Christoph Hartmann
-# author: Dominik Richter
-
-# install nginx
-include_recipe('prepare::nginx')

data/examples/kitchen-chef/recipes/nginx.rb

@@ -1,30 +0,0 @@
-# encoding: utf-8
-# author: Christoph Hartmann
-# author: Dominik Richter
-
-# install repositories for nginx
-case node['platform']
-when 'ubuntu'
-  include_recipe('apt')
-  # if ubuntu, install
-  apt_repository 'nginx-php' do
-    uri 'ppa:nginx/stable'
-    distribution node['lsb']['codename']
-  end
-when 'centos'
-  # add repo for Centos 7
-  yum_repository 'nginx' do
-    description 'Nginx Repo'
-    baseurl 'http://nginx.org/packages/centos/7/x86_64'
-    gpgkey 'http://nginx.org/keys/nginx_signing.key'
-    action :create
-  end
-end
-
-# install nginx package
-package 'nginx'
-
-# start the service
-service 'nginx' do
-  action :start
-end

data/examples/kitchen-chef/test/integration/default/web_spec.rb

@@ -1,28 +0,0 @@
-# encoding: utf-8
-# author: Christoph Hartmann
-# author: Dominik Richter
-
-# use basic tests
-describe package('nginx') do
-  it { should be_installed }
-end
-
-# extend tests with metadata
-control '01' do
-  impact 0.7
-  title 'Verify nginx service'
-  desc 'Ensures nginx service is up and running'
-  describe service('nginx') do
-    it { should be_enabled }
-    it { should be_installed }
-    it { should be_running }
-  end
-end
-
-# implement os dependent tests
-web_user = 'www-data'
-web_user = 'nginx' if os[:family] == 'centos'
-
-describe user(web_user) do
-  it { should exist }
-end

data/examples/kitchen-puppet/.kitchen.yml

@@ -1,23 +0,0 @@
----
-driver:
-  name: vagrant
-
-provisioner:
-  name: puppet_apply
-  # Not installing chef since inspec is used for testing
-  require_chef_for_busser: false
-  manifests_path: manifests
-  modules_path: modules
-
-verifier:
-  name: inspec
-
-platforms:
-  - name: centos-7.1
-  - name: ubuntu-12.04
-  - name: ubuntu-14.04
-
-suites:
-  - name: default
-    provisioner:
-      manifest: site.pp

data/examples/kitchen-puppet/Gemfile

@@ -1,20 +0,0 @@
-# encoding: utf-8
-source 'https://rubygems.org'
-
-gem 'inspec', path: '../../.'
-
-group :test do
-  gem 'bundler', '~> 1.5'
-  gem 'minitest', '~> 5.5'
-  gem 'rake', '~> 10'
-  gem 'simplecov', '~> 0.10'
-end
-
-group :integration do
-  gem 'test-kitchen', '~> 1.4'
-  gem 'kitchen-vagrant'
-  gem 'kitchen-puppet'
-  gem 'librarian-puppet'
-  gem 'kitchen-inspec'
-  gem 'concurrent-ruby', '~> 0.9'
-end

data/examples/kitchen-puppet/Puppetfile

@@ -1,25 +0,0 @@
-#!/usr/bin/env ruby
-#^syntax detection
-
-forge "https://forgeapi.puppetlabs.com"
-
-# use dependencies defined in metadata.json
-metadata
-
-# use dependencies defined in Modulefile
-# modulefile
-
-# A module from the Puppet Forge
-# mod 'puppetlabs-stdlib'
-
-# A module from git
-# mod 'puppetlabs-ntp',
-#   :git => 'git://github.com/puppetlabs/puppetlabs-ntp.git'
-
-# A module from a git branch/tag
-# mod 'puppetlabs-apt',
-#   :git => 'https://github.com/puppetlabs/puppetlabs-apt.git',
-#   :ref => '1.4.x'
-
-# A module from Github pre-packaged tarball
-# mod 'puppetlabs-apache', '0.6.0', :github_tarball => 'puppetlabs/puppetlabs-apache'

data/examples/kitchen-puppet/README.md

@@ -1,53 +0,0 @@
-# Test-Kitchen - InSpec with Puppet Example
-
-This example demonstrates a complete roundtrip via [Test-Kitchen](http://kitchen.ci/).
-
-```bash
-# install all dependencies
-$ bundle install
-# show all available tests
-$ bundle exec kitchen list
-Instance             Driver   Provisioner  Verifier  Transport  Last Action
-default-centos-71    Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
-default-ubuntu-1204  Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
-default-ubuntu-1404  Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
-
-# Now we are ready to run a complete test
-$ bundle exec kitchen test default-ubuntu-1404
------> Starting Kitchen (v1.4.2)
------> Cleaning up any prior instances of <default-ubuntu-1404>
------> Destroying <default-ubuntu-1404>...
-       Finished destroying <default-ubuntu-1404> (0m0.00s).
------> Testing <default-ubuntu-1404>
------> Creating <default-ubuntu-1404>...
-       Bringing machine 'default' up with 'virtualbox' provider...
-       ==> default: Importing base box 'opscode-ubuntu-14.04'...
-
-...
-
-       Vagrant instance <default-ubuntu-1404> created.
-       Finished creating <default-ubuntu-1404> (0m33.62s).
------> Converging <default-ubuntu-1404>...
-       Preparing files for transfer
-
-...
-
-       Finished converging <default-ubuntu-1404> (0m48.95s).
------> Setting up <default-ubuntu-1404>...
-       Finished setting up <default-ubuntu-1404> (0m0.00s).
------> Verifying <default-ubuntu-1404>...
-.....
-
-Finished in 0.08278 seconds (files took 1 minute 22.81 seconds to load)
-5 examples, 0 failures
-
-       Finished verifying <default-ubuntu-1404> (0m0.22s).
------> Destroying <default-ubuntu-1404>...
-       ==> default: Forcing shutdown of VM...
-       ==> default: Destroying VM and associated drives...
-       Vagrant instance <default-ubuntu-1404> destroyed.
-       Finished destroying <default-ubuntu-1404> (0m3.97s).
-       Finished testing <default-ubuntu-1404> (1m26.79s).
------> Kitchen is finished. (1m27.34s)
-
-```

data/examples/kitchen-puppet/manifests/site.pp

@@ -1,33 +0,0 @@
-# == Class prepare::site
-#
-
-# Install nginx from package repos
-case $osfamily {
-  'RedHat': {
-    yumrepo { 'nginx':
-      descr => 'Nginx Repo',
-      baseurl => 'http://nginx.org/packages/centos/7/x86_64',
-      gpgkey => 'http://nginx.org/keys/nginx_signing.key',
-      enabled => 1
-    }
-
-    package { 'nginx':
-      require => [Yumrepo[nginx]],
-      ensure => 'latest'
-    }
-  }
-  'Debian': {
-    package { 'nginx':
-      ensure => 'latest'
-    }
-  }
-  default: {
-    fail("Unsupported platform: ${osfamily}/${operatingsystem}")
-  }
-}
-
-# Start the service
-service { 'nginx':
-  enable => 'true',
-  ensure => 'running'
-}

data/examples/kitchen-puppet/metadata.json

@@ -1,11 +0,0 @@
-{
-  "name": "prepare",
-  "version": "0.1.0",
-  "author": "support@chef.io",
-  "summary": "This module prepares the test operating systems",
-  "license": "Apache-2.0",
-  "source": "https://github.com/chef/inspec/examples/kitchen-puppet",
-  "project_page": "https://github.com/chef/inspec/examples/kitchen-puppet",
-  "issues_url": "https://github.com/chef/inspec/issues",
-  "dependencies": []
-}

data/examples/kitchen-puppet/test/integration/default/web_spec.rb

@@ -1,28 +0,0 @@
-# encoding: utf-8
-# author: Christoph Hartmann
-# author: Dominik Richter
-
-# use basic tests
-describe package('nginx') do
-  it { should be_installed }
-end
-
-# extend tests with metadata
-control '01' do
-  impact 0.7
-  title 'Verify nginx service'
-  desc 'Ensures nginx service is up and running'
-  describe service('nginx') do
-    it { should be_enabled }
-    it { should be_installed }
-    it { should be_running }
-  end
-end
-
-# implement os dependent tests
-web_user = 'www-data'
-web_user = 'nginx' if os[:family] == 'centos'
-
-describe user(web_user) do
-  it { should exist }
-end

data/examples/meta-profile/README.md

@@ -1,37 +0,0 @@
-# meta-profile
-
-The inspec.yml file in this profile shows how one can use dependencies
-from non-local sources such as Git or an HTTP url. This feature can
-be used to build up a environment-wide profile that is based on more
-specific profiles managed by others.
-
-InSpec supports multiple profile locations:
-
-```
-depends:
-  # defaults to supermarket
-  - name: hardening/ssh-hardening  
-  # remote tar or zip file
-  - name: os-hardening
-    url: https://github.com/dev-sec/tests-os-hardening/archive/master.zip
-  # git
-  - git: https://github.com/dev-sec/ssl-baseline.git
-  - name: windows-patch-benchmark
-    git: https://github.com/chris-rock/windows-patch-benchmark.git
-  # Chef Compliance
-  - name: linux
-    compliance: base/linux
-```
-
-You could use those dependencies in your `example.rb`:
-
-```
-
-include_controls 'hardening/ssh-hardening'
-include_controls 'os-hardening'
-include_controls 'ssl-baseline'
-include_controls 'linux'
-include_controls 'windows-patch-benchmark'
-```
-
-Further details are described in our [InSpec Docs](https://www.inspec.io/docs/reference/profiles/)