serverspec-cem-acpt 2.42.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: b24229071011ded982d183c702a5b9f8cacffeb34205aa9bcbdf5f85b487a121
+  data.tar.gz: 999ea0fd5855dedb6621709b78508219dbaa11667ff1db4baa671513e6653b34
+SHA512:
+  metadata.gz: eb1ff001e25f1797ee58cade7108dc37fbfb285c9d47aa25133d7739051d15d06a12a911171ea51fe5ad07900fb5916edb6541b392cf66f14bea877aa3d2da51
+  data.tar.gz: d7ab9c8ca457f56aee8488a8c168fe42e38992f1e486ebdc94f4eaf27e00a9153be8d7d37facdd3f12c2189594232030b2c748f5fbcd519790dc57806c1c33e5

data/.github/stale.yml

@@ -0,0 +1,18 @@
+# Number of days of inactivity before an issue becomes stale
+daysUntilStale: 60
+# Number of days of inactivity before a stale issue is closed
+daysUntilClose: 7
+# Issues with these labels will never be considered stale
+exemptLabels:
+  - pinned
+  - security
+# Label to use when marking an issue as stale
+staleLabel: wontfix
+# Comment to post when marking an issue as stale. Set to `false` to disable
+markComment: >
+  This issue has been automatically marked as stale because it has not had
+  recent activity. It will be closed if no further activity occurs. Thank you
+  for your contributions.
+# Comment to post when closing a stale issue. Set to `false` to disable
+closeComment: false
+

data/.gitignore

@@ -0,0 +1,28 @@
+*.gem
+*.rbc
+*.swp
+.bundle
+.rvmrc
+.versions.conf
+.config
+.yardoc
+.rspec
+.idea/
+Gemfile.lock
+InstalledFiles
+_yardoc
+coverage
+doc/
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+test/tmp
+test/version_tmp
+tmp
+Vagrantfile
+vendor/
+.DS_Store
+Gemfile.local
+upstream.sh
+

data/.gitmodules

@@ -0,0 +1,3 @@
+[submodule "integration-test"]
+	path = integration-test
+	url = https://github.com/serverspec/serverspec-integration-test.git

data/.travis.yml

@@ -0,0 +1,25 @@
+language: ruby
+
+rvm:
+  - 1.9.3
+  - 2.0.0
+  - 2.1.1
+  - 2.2.4
+  - 2.3.6
+  - 2.4.3
+  - 2.5.0
+
+before_install:
+  - travis_retry gem update --system 2.7.8
+  - travis_retry gem install bundler -v 1.17.3
+  - travis_retry gem uninstall -i /home/travis/.rvm/gems/ruby-2.3.7@global bundler || echo
+
+script:
+  - bundle exec rake spec
+
+dist: trusty
+sudo: false
+cache: bundler
+notifications:
+  slack:
+    secure: X1umGErES0zd+LXX1EqZZxrPZv2YOzbCNxiLLiSGmJLlZAEtlSkMPyr+M00Lrs2DFhn4blwKPm+5YCBvU7f9F4K5GthSl0qZYNpNX/lGNn6EGeBnzJ8rFVgwXPUv1rvrJq0NjeSGni3yAK69K/uX6QohGojAI3iI28/EbJ+uYQM=

data/Gemfile

@@ -0,0 +1,9 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in serverspec.gemspec
+gemspec
+
+if Gem::Version.new(RUBY_VERSION.dup) < Gem::Version.new('2.0.0')
+  # net-ssh 3.x dropped Ruby 1.8 and 1.9 support.
+  gem 'net-ssh', '~> 2.7'
+end

data/Guardfile

@@ -0,0 +1,4 @@
+guard :rspec do
+  watch(%r{^spec/.+/.+_spec\.rb$})
+  watch('spec/spec_helper.rb')  { "spec" }
+end

data/LICENSE.txt

@@ -0,0 +1,22 @@
+Copyright (c) 2013 Gosuke Miyashita
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,36 @@
+# Serverspec [![Gem Version](https://badge.fury.io/rb/serverspec.svg)](http://badge.fury.io/rb/serverspec) [![BuildStatus](https://secure.travis-ci.org/mizzy/serverspec.svg)](http://travis-ci.org/mizzy/serverspec) [![wercker status](https://app.wercker.com/status/526d1ff4df6eadaa793dca1affcaed35/s/ "wercker status")](https://app.wercker.com/project/bykey/526d1ff4df6eadaa793dca1affcaed35)
+
+RSpec tests for your servers configured by Puppet, Chef or anything else
+
+You can see the details of serverspec on [serverspec.org](http://serverspec.org/).
+
+----
+
+## Running the gem's tests
+
+Use
+
+```bundle exec rake```
+
+(Using ```rspec``` alone will not work).
+
+
+
+## Maintenance policy of Serverspec/Specinfra
+
+* The person who found a bug should fix the bug by themself.
+* If you find a bug and cannot fix it by yourself, send a pull request and attach test code to reproduce the bug, please.
+* The person who want a new feature should implement it by themself.
+* For above reasons, I accept pull requests only and disable issues.
+* If you'd like to discuss about a new feature before implement it, make an empty commit and send [a WIP pull request](http://ben.straub.cc/2015/04/02/wip-pull-request/). But It is better that the WIP PR has some code than an empty commit.
+
+
+----
+
+## Contributing
+
+1. Fork it
+2. Create your feature branch (`git checkout -b my-new-feature`)
+3. Commit your changes (`git commit -am 'Add some feature'`)
+4. Push to the branch (`git push origin my-new-feature`)
+5. Create new Pull Request

data/Rakefile

@@ -0,0 +1,31 @@
+require "bundler/gem_tasks"
+begin
+  require "rspec/core/rake_task"
+  require "octorelease"
+rescue LoadError
+end
+
+if defined?(RSpec)
+  task :default => 'spec:all'
+  task :spec => 'spec:all'
+
+  namespace :spec do
+    task :all => [ 'spec:type:all', 'spec:helper' ]
+
+    namespace :type do
+      oses = Dir.glob('spec/type/*').map {|d| File.basename(d)}
+
+      task :all => oses.map {|os| "spec:type:#{os}" }
+
+      oses.each do |os|
+        RSpec::Core::RakeTask.new(os.to_sym) do |t|
+          t.pattern = "spec/type/#{os}/*_spec.rb"
+        end
+      end
+    end
+
+    RSpec::Core::RakeTask.new(:helper) do |t|
+        t.pattern = "spec/helper/*_spec.rb"
+    end
+  end
+end

data/WINDOWS_SUPPORT.md

@@ -0,0 +1,131 @@
+## Windows support
+
+Serverspec is now providing a limited support for Microsoft Windows.
+
+If you want to test Windows based machines you need to set the target host's OS explicitly in your `spec/spec_helper.rb`
+
+For local testing (equivalent to the Exec option in Linux/Unix systems) simply do:
+
+```ruby
+require 'serverspec'
+
+set :backend, :cmd
+set :os, :family => 'windows'
+```
+
+For remote testing you have to configure Windows Remote Management in order to communicate to the target host:
+
+```ruby
+require 'serverspec'
+require 'winrm'
+
+set :backend, :winrm
+set :os, :family => 'windows'
+
+user = <username>
+pass = <password>
+endpoint = "http://#{ENV['TARGET_HOST']}:5985/wsman"
+
+if Gem::Version.new(WinRM::VERSION) < Gem::Version.new('2')
+  winrm = ::WinRM::WinRMWebService.new(endpoint, :ssl, :user => user, :pass => pass, :basic_auth_only => true)
+  winrm.set_timeout 300 # 5 minutes max timeout for any operation
+else
+  opts = {
+    user: user,
+    password: pass,
+    endpoint: endpoint,
+    operation_timeout: 300,
+    no_ssl_peer_verification: false,
+  }
+
+  winrm = ::WinRM::Connection.new(opts)
+end
+
+Specinfra.configuration.winrm = winrm
+```
+
+For how to configure the guest to accept WinRM connections and the different authentication mechanisms check the Microsoft WinRM documentation and verify the ones that are supported by [WinRb/WinRM](https://github.com/WinRb/WinRM).
+
+
+###RSpec Examples for windows target hosts
+```ruby
+describe file('c:/windows') do
+  it { should be_directory }
+  it { should be_readable }
+  it { should_not be_writable.by('Everyone') }
+end
+
+describe file('c:/temp/test.txt') do
+  it { should be_file }
+  it { should contain "some text" }
+end
+
+describe package('Adobe AIR') do
+  it { should be_installed}
+end
+
+describe service('DNS Client') do
+  it { should be_installed }
+  it { should be_enabled }
+  it { should be_running }
+  it { should have_start_mode("Manual") }
+end
+
+describe port(139) do
+  it { should be_listening }
+end
+
+describe user('some.admin') do
+  it { should exist }
+  it { should belong_to_group('Administrators')}
+end
+
+describe group('Guests') do
+  it { should exist }
+end
+
+describe group('MYDOMAIN\Domain Users') do
+  it { should exist }
+end
+
+describe command('& "ipconfig"') do
+  its(:stdout) { should match /IPv4 Address(\.| )*: 192\.168\.1\.100/ }
+end
+
+describe windows_registry_key('HKEY_USERS\S-1-5-21-1319311448-2088773778-316617838-32407\Test MyKey') do
+  it { should exist }
+  it { should have_property('string value') }
+  it { should have_property('binary value', :type_binary) }
+  it { should have_property('dword value', :type_dword) }
+  it { should have_value('test default data') }
+  it { should have_property_value('multistring value', :type_multistring, "test\nmulti\nstring\ndata") }
+  it { should have_property_value('qword value', :type_qword, 'adff32') }
+  it { should have_property_value('binary value', :type_binary, 'dfa0f066') }
+end
+
+describe windows_feature('Minesweeper') do
+  it{ should be_installed }
+  it{ should be_installed.by("dism") }
+  it{ should be_installed.by("powershell") }
+end
+
+describe iis_website("Default Website") do
+  it { should exist }
+  it { should be_enabled }
+  it { should be_running }
+  it { should be_in_app_pool "DefaultAppPool" }
+  it { should have_physical_path "c:/inetpub/wwwroot" }
+end
+
+describe iis_app_pool("DefaultAppPool") do
+  it { should exist }
+  it { should have_dotnet_version "2.0" }
+end
+
+```
+
+###Notes:
+* Not all the matchers you are used to in Linux-like OS are supported in Windows, some because of differences between the operating systems (e.g. users and permissions model), some because they haven't been yet implemented.
+* All commands in the windows backend are run via powershell, so the output in case of stderr is a pretty ugly xml-like thing. Still it should contain some information to help troubleshooting.
+* The *command* type is executed again through powershell, so bear that in mind if you mean to run old CMD windows batch or programs. (i.e run the command using the **Invoke-Expression** Cmdlet, or the **&** Call Operator)
+* You may have to change Exectution Policy on the machine at both, machine and user level in order for tests to run: Get-ExecutionPolicy -list|%{set-executionpolicy bypass -scope $_.scope}

data/appveyor.yml

@@ -0,0 +1,70 @@
+version: "{build}"
+image: Previous Visual Studio 2015
+
+platform:
+  - x64
+
+environment:
+  bundle_gemfile: integration-test/Gemfile.winrm
+  bundler_url: https://rubygems.org/downloads/bundler-1.9.9.gem
+
+  matrix:
+    - ruby_version: "193"
+    - ruby_version: "200"
+    - ruby_version: "21"
+    - ruby_version: "22"
+    - ruby_version: "23"
+    - ruby_version: "24"
+    - ruby_version: "25"
+    - ruby_version: "26"
+
+matrix:
+  allow_failures:
+    - ruby_version: "193"
+
+clone_depth: 5
+
+cache:
+  - C:\Ruby193\lib\ruby\gems\1.9.1 -> appveyor.yml
+  - C:\Ruby193\bin                 -> appveyor.yml
+  - C:\Ruby200\lib\ruby\gems\2.0.0 -> appveyor.yml
+  - C:\Ruby200\bin                 -> appveyor.yml
+  - C:\Ruby21\lib\ruby\gems\2.1.0  -> appveyor.yml
+  - C:\Ruby21\bin                  -> appveyor.yml
+  - C:\Ruby22\lib\ruby\gems\2.2.0  -> appveyor.yml
+  - C:\Ruby22\bin                  -> appveyor.yml
+  - C:\Ruby23\lib\ruby\gems\2.2.0  -> appveyor.yml
+  - C:\Ruby23\bin                  -> appveyor.yml
+  - C:\Ruby24\lib\ruby\gems\2.4.0  -> appveyor.yml
+  - C:\Ruby24\bin                  -> appveyor.yml
+  - C:\Ruby25\lib\ruby\gems\2.5.0  -> appveyor.yml
+  - C:\Ruby25\bin                  -> appveyor.yml
+  - C:\Ruby26\lib\ruby\gems\2.6.0  -> appveyor.yml
+  - C:\Ruby26\bin
+
+install:
+  - git submodule update --init --recursive
+  - ps: Enable-PSRemoting -Force
+  - winrm quickconfig -q
+  - winrm set winrm/config/client @{TrustedHosts="*"}
+  - winrm set winrm/config/client/auth @{Basic="true"}
+  - winrm set winrm/config/service/auth @{Basic="true"}
+  - winrm set winrm/config/service @{AllowUnencrypted="true"}
+  - SET PATH=C:\Ruby%ruby_version%\bin;%PATH%
+  - echo %PATH%
+  - ruby --version
+  - gem --version
+  - appveyor DownloadFile -Url %bundler_url% -FileName bundler.gem
+  - gem install --local bundler.gem --no-document --force ## appveyor often stops `gem install bundler`..?
+  - ps: $PSVersionTable
+
+build_script:
+  - set SSL_CERT_FILE=C:/ruby24-x64/ssl/cert.pem
+  - ruby -rfileutils -e 'FileUtils.rm_r(File.join(Gem.dir, "cache", "bundler")) if Dir.exists?(File.join(Gem.dir, "cache", "bundler"))'
+  - bundle install --jobs 3 --retry 3
+  - net user
+  - net localgroup
+
+test_script:
+  - net user appveyor %WINDOWS_PASSWORD% # set by webui
+  - bundle exec rspec -fd --backtrace -r .\integration-test\winrm\spec_helper.rb .\integration-test\winrm

data/bin/serverspec-init

@@ -0,0 +1,7 @@
+#!/usr/bin/env ruby
+
+$LOAD_PATH.unshift File.join(File.dirname(__FILE__), *%w[.. lib])
+
+require 'serverspec'
+
+Serverspec::Setup.run

data/lib/serverspec/commands/base.rb

@@ -0,0 +1,7 @@
+module Serverspec
+  module Commands
+    class Base < Specinfra::Command::Base
+    end
+  end
+end
+

data/lib/serverspec/helper/type.rb

@@ -0,0 +1,25 @@
+module Serverspec
+  module Helper
+    module Type
+      types = %w(
+        base bridge bond cgroup command cron default_gateway file fstab
+        group host iis_website iis_app_pool interface ipfilter ipnat
+        iptables ip6tables json_file kernel_module kvm linux_kernel_parameter lxc
+        mail_alias mysql_config package php_config port ppa process
+        routing_table selinux selinux_module service user yumrepo
+        windows_feature windows_hot_fix windows_registry_key
+        windows_scheduled_task zfs docker_base docker_image
+        docker_container x509_certificate x509_private_key
+        linux_audit_system hadoop_config php_extension windows_firewall
+      )
+
+      types.each {|type| require "serverspec/type/#{type}" }
+
+      types.each do |type|
+        define_method type do |*args|
+          eval "Serverspec::Type::#{type.to_camel_case}.new(*args)"
+        end
+      end
+    end
+  end
+end

data/lib/serverspec/helper.rb

@@ -0,0 +1,8 @@
+# Subject type helper
+require 'serverspec/helper/type'
+extend Serverspec::Helper::Type
+class RSpec::Core::ExampleGroup
+  extend Serverspec::Helper::Type
+  include Serverspec::Helper::Type
+end
+

data/lib/serverspec/matcher/be_enabled.rb

@@ -0,0 +1,24 @@
+RSpec::Matchers.define :be_enabled do
+  match do |subject|
+    if subject.class.name == 'Serverspec::Type::Service'
+      subject.enabled?(@level, @under)
+    else
+      subject.enabled?
+    end
+  end
+
+  description do
+    message = 'be enabled'
+    message << " under #{@under}" if @under
+    message << " with level #{@level}" if @level
+    message
+  end
+
+  chain :with_level do |level|
+    @level = level
+  end
+
+  chain :under do |under|
+    @under = under
+  end
+end

data/lib/serverspec/matcher/be_enforcing.rb

@@ -0,0 +1,10 @@
+RSpec::Matchers.define :be_enforcing do
+  match do |selinux|
+    selinux.enforcing?(@with_policy)
+  end
+
+  chain :with_policy do |with_policy|
+    @with_policy = with_policy
+  end
+
+end

data/lib/serverspec/matcher/be_executable.rb

@@ -0,0 +1,13 @@
+RSpec::Matchers.define :be_executable do
+  match do |file|
+    file.executable?(@by_whom, @by_user)
+  end
+
+  chain :by do |by_whom|
+    @by_whom = by_whom
+  end
+
+  chain :by_user do |by_user|
+    @by_user = by_user
+  end
+end

data/lib/serverspec/matcher/be_installed.rb

@@ -0,0 +1,24 @@
+RSpec::Matchers.define :be_installed do
+  match do |subject|
+    if subject.class.name == 'Serverspec::Type::SelinuxModule'
+      subject.installed?(@version)
+    else
+      subject.installed?(@provider, @version)
+    end
+  end
+
+  description do
+    message = 'be installed'
+    message << %( by "#{@provider}") if @provider
+    message << %( with version "#{@version}") if @version
+    message
+  end
+
+  chain :by do |provider|
+    @provider = provider
+  end
+
+  chain :with_version do |version|
+    @version = version
+  end
+end

data/lib/serverspec/matcher/be_listening.rb

@@ -0,0 +1,20 @@
+RSpec::Matchers.define :be_listening do
+  match do |port|
+    port.listening? @with, @local_address
+  end
+
+  description do
+    message = 'be listening'
+    message << " on #{@local_address}" if @local_address
+    message << " with #{@with}" if @with
+    message
+  end
+
+  chain :with do |with|
+    @with = with
+  end
+
+  chain :on do |local_address|
+    @local_address = local_address
+  end
+end

data/lib/serverspec/matcher/be_monitored_by.rb

@@ -0,0 +1,17 @@
+RSpec::Matchers.define :be_monitored_by do |monitor|
+  match do |service|
+    service.monitored_by?(monitor, @monitor_name)
+  end
+  description do 
+    if @monitor_name
+      "be monitored by #{monitor} with name #{@monitor_name}"
+    else 
+      "be monitored by #{monitor}" 
+    end 
+  end 
+
+  chain :with_name do |name|
+    @monitor_name = (name ? name : nil)
+  end
+
+end

data/lib/serverspec/matcher/be_mounted.rb

@@ -0,0 +1,15 @@
+RSpec::Matchers.define :be_mounted do
+  match do |path|
+    path.mounted?(@attr, @only_with)
+  end
+
+  chain :with do |attr|
+    @attr      = attr
+    @only_with = false
+  end
+
+  chain :only_with do |attr|
+    @attr      = attr
+    @only_with = true
+  end
+end

data/lib/serverspec/matcher/be_permissive.rb

@@ -0,0 +1,10 @@
+RSpec::Matchers.define :be_permissive do
+  match do |selinux|
+    selinux.permissive?(@with_policy)
+  end
+
+  chain :with_policy do |with_policy|
+    @with_policy = with_policy
+  end
+
+end

data/lib/serverspec/matcher/be_reachable.rb

@@ -0,0 +1,17 @@
+RSpec::Matchers.define :be_reachable  do
+  match do |host|
+    proto   = 'tcp'
+    timeout = 5
+    if @attr
+      port    = @attr[:port]
+      proto   = @attr[:proto]   if @attr[:proto]
+      timeout = @attr[:timeout] if @attr[:timeout]
+    end
+
+    host.reachable?(port, proto, timeout)
+  end
+
+  chain :with do |attr|
+    @attr = attr
+  end
+end

data/lib/serverspec/matcher/be_readable.rb

@@ -0,0 +1,13 @@
+RSpec::Matchers.define :be_readable do
+  match do |file|
+    file.readable?(@by_whom, @by_user)
+  end
+
+  chain :by do |by_whom|
+    @by_whom = by_whom
+  end
+
+  chain :by_user do |by_user|
+    @by_user = by_user
+  end
+end

data/lib/serverspec/matcher/be_resolvable.rb

@@ -0,0 +1,9 @@
+RSpec::Matchers.define :be_resolvable do
+  match do |name|
+    name.resolvable?(@type)
+  end
+
+  chain :by do |type|
+    @type = type
+  end
+end

data/lib/serverspec/matcher/be_running.rb

@@ -0,0 +1,19 @@
+RSpec::Matchers.define :be_running do
+  match do |subject|
+    if subject.class.name == 'Serverspec::Type::Service'
+      subject.running?(@under)
+    else
+      subject.running?
+    end
+  end
+
+  description do
+    message = 'be running'
+    message << " under #{@under}" if @under
+    message
+  end
+
+  chain :under do |under|
+    @under = under
+  end
+end

data/lib/serverspec/matcher/be_writable.rb

@@ -0,0 +1,13 @@
+RSpec::Matchers.define :be_writable do
+  match do |file|
+    file.writable?(@by_whom, @by_user)
+  end
+
+  chain :by do |by_whom|
+    @by_whom = by_whom
+  end
+
+  chain :by_user do |by_user|
+    @by_user = by_user
+  end
+end