serverspec-clc 2.1.0

data/spec/type/linux/selinux_spec.rb

@@ -0,0 +1,15 @@
+require 'spec_helper'
+
+set :os, :family => 'linux'
+
+describe selinux do
+  it { should be_enforcing }
+end
+
+describe selinux do
+  it { should be_permissive }
+end
+
+describe selinux do
+  it { should be_disabled }
+end

data/spec/type/linux/zfs_spec.rb

@@ -0,0 +1,15 @@
+require 'spec_helper'
+
+set :os, :family => 'linux'
+
+describe zfs('rpool') do
+  it { should exist }
+end
+
+describe zfs('rpool') do
+  it { should have_property 'mountpoint' => '/rpool'  }
+end
+
+describe zfs('rpool') do
+  it { should have_property 'mountpoint' => '/rpool', 'compression' => 'off' }
+end

data/spec/type/nixos/package_spec.rb

@@ -0,0 +1,15 @@
+require 'spec_helper'
+
+set :os, :family => 'nixos'
+
+describe package('httpd') do
+  it { should be_installed }
+end
+
+describe package('httpd') do
+  it { should be_installed.with_version('2.2.15-28.el6') }
+end
+
+describe package('httpd') do
+  it { should be_installed.by('nix').with_version('2.2.15-28.el6') }
+end

data/spec/type/nixos/service_spec.rb

@@ -0,0 +1,9 @@
+require 'spec_helper'
+
+set :os, :family => 'nixos'
+
+describe service('sshd') do
+  it { should be_enabled }
+  it { should be_running }
+end
+

data/spec/type/openbsd/file_spec.rb

@@ -0,0 +1,134 @@
+require 'spec_helper'
+
+set :os, {:family => 'openbsd'}
+
+describe file('/etc/passwd') do
+  it { should be_mode 644 }
+end
+
+describe file('/etc/passwd') do
+  it { should be_owned_by 'root' }
+end
+
+describe file('/etc/passwd') do
+  it { should be_grouped_into 'root' }
+end
+
+describe file('/etc/pam.d/system-auth') do
+  it { should be_linked_to '/etc/pam.d/system-auth-ac' }
+end
+
+describe file('/') do
+  it { should be_mounted }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should be_mounted.with( :type => 'ext4' ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should be_mounted.with( :type => 'ext4', :options => { :rw => true } ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should be_mounted.with( :type => 'ext4', :options => { :mode => 620 } ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should be_mounted.with( :type => 'ext4', :device => '/dev/mapper/VolGroup-lv_root' ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should_not be_mounted.with( :type => 'xfs' ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should_not be_mounted.with( :type => 'ext4', :options => { :rw => false } ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should_not be_mounted.with( :type => 'ext4', :options => { :mode => 600 } ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should_not be_mounted.with( :type => 'xfs', :device => '/dev/mapper/VolGroup-lv_root' ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it { should_not be_mounted.with( :type => 'ext4', :device => '/dev/mapper/VolGroup-lv_r00t' ) }
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it do
+    should be_mounted.only_with(
+      :device  => '/dev/mapper/VolGroup-lv_root',
+      :type    => 'ext4',
+      :options => {
+        :rw   => true,
+        :mode => 620,
+      }
+    )
+  end
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it do
+    should_not be_mounted.only_with(
+      :device  => '/dev/mapper/VolGroup-lv_root',
+      :type    => 'ext4',
+      :options => {
+        :rw   => true,
+        :mode => 620,
+        :bind => true,
+      }
+    )
+  end
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it do
+    should_not be_mounted.only_with(
+      :device  => '/dev/mapper/VolGroup-lv_root',
+      :type    => 'ext4',
+      :options => {
+        :rw   => true,
+      }
+    )
+  end
+end
+
+describe file('/') do
+  let(:stdout) { "/dev/mapper/VolGroup-lv_root on / type ext4 (rw,mode=620)\r\n" }
+  it do
+    should_not be_mounted.only_with(
+      :device  => '/dev/mapper/VolGroup-lv_roooooooooot',
+      :type    => 'ext4',
+      :options => {
+        :rw   => true,
+        :mode => 620,
+      }
+    )
+  end
+end
+
+describe file('/etc/services') do
+  let(:stdout) { "35435ea447c19f0ea5ef971837ab9ced\n" }
+  its(:md5sum) { should eq '35435ea447c19f0ea5ef971837ab9ced' }
+end
+
+describe file('/etc/services') do
+  let(:stdout)  {"0c3feee1353a8459f8c7d84885e6bc602ef853751ffdbce3e3b6dfa1d345fc7a" }
+  its(:sha256sum) { should eq '0c3feee1353a8459f8c7d84885e6bc602ef853751ffdbce3e3b6dfa1d345fc7a' }
+end

data/spec/type/openbsd/interface_spec.rb

@@ -0,0 +1,21 @@
+require 'spec_helper'
+
+set :os, :family => 'openbsd'
+
+describe interface('eth0') do
+  let(:stdout) { '1000' }
+  its(:speed) { should eq 1000 }
+end
+
+describe interface('eth0') do
+  it { should have_ipv4_address("192.168.10.10") }
+end
+
+describe interface('eth0') do
+  it { should have_ipv4_address("192.168.10.10/24") }
+end
+
+describe interface('invalid-interface') do
+  let(:stdout) { '1000' }
+  its(:speed) { should_not eq 100 }
+end

data/spec/type/openbsd/mail_alias_spec.rb

@@ -0,0 +1,7 @@
+require 'spec_helper'
+
+set :os, :family => 'openbsd'
+
+describe mail_alias('daemon') do
+  it { should be_aliased_to "root" }
+end

data/spec/type/openbsd/package_spec.rb

@@ -0,0 +1,11 @@
+require 'spec_helper'
+
+set :os, :family => 'openbsd'
+
+describe package('httpd') do
+  it { should be_installed }
+end
+
+describe package('httpd') do
+  it { should be_installed.with_version('2.2.15-28.el6') }
+end

data/spec/type/openbsd/port_spec.rb

@@ -0,0 +1,7 @@
+require 'spec_helper'
+
+set :os, :family => 'openbsd'
+
+describe port(80) do
+  it { should be_listening }
+end

data/spec/type/openbsd/service_spec.rb

@@ -0,0 +1,13 @@
+require 'spec_helper'
+
+set :os, :family => 'openbsd'
+
+describe service('sshd') do
+  it { should be_enabled }
+end
+
+describe service('sshd') do
+  it { should be_running }
+end
+
+

data/spec/type/openbsd/user_spec.rb

@@ -0,0 +1,12 @@
+require 'spec_helper'
+
+set :os, :family => 'openbsd'
+
+describe user('root') do
+  it { should have_login_shell '/bin/bash' }
+end
+
+describe user('root') do
+  it { should have_home_directory '/root' }
+end
+

data/spec/type/opensuse/service_spec.rb

@@ -0,0 +1,16 @@
+require 'spec_helper'
+
+set :os, :family => 'opensuse'
+
+describe service('sshd') do
+  it { should be_enabled }
+end
+
+describe service('sshd') do
+  it { should be_enabled.with_level(4) }
+end
+
+describe service('sshd') do
+  it { should be_running }
+end
+

data/spec/type/plamo/package_spec.rb

@@ -0,0 +1,8 @@
+require 'spec_helper'
+
+set :os, :family => 'plamo'
+
+describe package('httpd') do
+  it { should be_installed }
+end
+

data/spec/type/plamo/service_spec.rb

@@ -0,0 +1,8 @@
+require 'spec_helper'
+
+set :os, :family => 'plamo'
+
+describe service('sshd') do
+  it { should be_enabled }
+end
+

data/spec/type/redhat/file_spec.rb

@@ -0,0 +1,19 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat'
+
+describe file('/tmp') do
+  it { should be_readable.by_user('mail') }
+end
+
+describe file('/tmp') do
+  it { should be_writable.by_user('mail') }
+end
+
+describe file('/tmp') do
+  it { should be_executable.by_user('mail') }
+end
+
+describe file('/tmp') do
+  it { should be_immutable }
+end

data/spec/type/redhat/package_spec.rb

@@ -0,0 +1,23 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat'
+
+describe package('httpd') do
+  it { should be_installed }
+end
+
+describe package('httpd') do
+  it { should be_installed.with_version('2.2.15-28.el6') }
+end
+
+describe package('httpd') do
+  it { should be_installed.by('rpm').with_version('2.2.15-28.el6') }
+end
+
+describe package('httpd') do
+  let(:stdout) { "2.2.15\n" }
+  its(:version) { should eq '2.2.15' }
+  its(:version) { should > '2.2.14' }
+  its(:version) { should < '2.2.16' }
+  its(:version) { should > '2.2.9' }
+end

data/spec/type/redhat/service_spec.rb

@@ -0,0 +1,11 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat'
+
+describe service('sshd') do
+  it { should be_enabled }
+end
+
+describe service('sshd') do
+  it { should be_enabled.with_level(4) }
+end

data/spec/type/redhat/yumrepo_spec.rb

@@ -0,0 +1,11 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat'
+
+describe yumrepo('epel') do
+  it { should exist }
+end
+
+describe yumrepo('epel') do
+  it { should be_enabled }
+end

data/spec/type/redhat5/iptables_spec.rb

@@ -0,0 +1,11 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat', :release => 5
+
+describe iptables do
+  it { should have_rule '-P INPUT ACCEPT' }
+end
+
+describe iptables do
+  it { should have_rule('-P INPUT ACCEPT').with_table('mangle').with_chain('INPUT') }
+end

data/spec/type/redhat7/service_spec.rb

@@ -0,0 +1,9 @@
+require 'spec_helper'
+
+set :os, :family => 'redhat', :release => 7
+
+describe service('sshd') do
+  it { should be_enabled }
+  it { should be_running }
+end
+

data/spec/type/smartos/package_spec.rb

@@ -0,0 +1,19 @@
+require 'spec_helper'
+
+set :os, :family => 'smartos'
+
+describe package('httpd') do
+  it { should be_installed }
+end
+
+describe package('httpd') do
+  it { should be_installed.with_version('2.2.15-28.el6') }
+end
+
+describe package('httpd') do
+  let(:stdout) { "2.2.15\n" }
+  its(:version) { should eq '2.2.15' }
+  its(:version) { should > '2.2.14' }
+  its(:version) { should < '2.2.16' }
+  its(:version) { should > '2.2.9' }
+end

data/spec/type/smartos/service_spec.rb

@@ -0,0 +1,16 @@
+require 'spec_helper'
+
+set :os, :family => 'smartos'
+
+describe service('sshd') do
+  it { should be_enabled }
+end
+
+describe service('sshd') do
+  it { should be_running }
+end
+
+describe service('sshd') do
+  it { should have_property :foo => 'bar' }
+end
+