netcfg-vault 0.3.1__tar.gz

netcfg_vault-0.3.1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 BG8CFB
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

netcfg_vault-0.3.1/PKG-INFO

@@ -0,0 +1,65 @@
+Metadata-Version: 2.4
+Name: netcfg-vault
+Version: 0.3.1
+Summary: 批量备份和对比网络设备配置的命令行工具
+License: MIT
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: paramiko>=3.4
+Requires-Dist: PyYAML>=6.0
+Dynamic: license-file
+
+# netcfg-vault
+
+> 产品主页: <https://bg8cfb.github.io/netcfg-vault/>
+
+**批量备份和对比网络设备配置的命令行工具** — 面向网络工程师 / 运维。
+
+## 定时备份（Pro）
+
+```bash
+netcfg-vault watch devices.yml --out backups --interval 3600
+```
+
+每天/每小时自动备份，失败设备即时上报，支持钉钉/企业微信/飞书/Server酱 webhook（设 NETCFG_WEBHOOK 环境变量即可）。免费版限 5 台，Pro 解锁全部 + 告警。
+
+## 为什么
+交换机/路由器配置散落各处，改完没备份、出事没证据。现有方案要么要装平台（Oxidized 需 Ruby 环境），要么是厂商专属。
+
+## 特性
+- 多设备并发备份（SSH/Telnet），华为/H3C/锐捷/思科开箱即用
+- 配置变更 diff（谁在什么时候改了什么）
+- 输出: 本地目录 / git 仓库
+- 单二进制 / 单 Python 文件，无依赖
+
+## 快速开始
+```bash
+# 免费版: 最多 5 台设备
+pip install netcfg-vault
+netcfg-vault backup devices.yml
+```
+
+配置变更对比（自动忽略时间戳噪声，只看真实变更）：
+```bash
+netcfg-vault diff backups/old.cfg backups/new.cfg
+# -sysname CoreSW01
+# +sysname CoreSW02
+# [summary] +1 / -1
+```
+
+📖 完整教程: [网络设备配置还在手动导出？](https://gist.github.com/BG8CFB/6aab6eb7b32ef1e06ab9fe632da6346a)
+
+## Pro 版（¥99 一次性）
+- 无设备数限制
+- 定时任务 + 失败告警（邮件/企业微信/钉钉）
+- 配置变更周报
+- 1 年更新
+
+购买链接: （见 releases 说明 / 联系作者）
+
+## 状态
+🚧 开发中 — 首个可用版本开发中。Star 关注进展。
+
+## License
+MIT（代码），品牌与文档保留权利。

netcfg_vault-0.3.1/README.md

@@ -0,0 +1,53 @@
+# netcfg-vault
+
+> 产品主页: <https://bg8cfb.github.io/netcfg-vault/>
+
+**批量备份和对比网络设备配置的命令行工具** — 面向网络工程师 / 运维。
+
+## 定时备份（Pro）
+
+```bash
+netcfg-vault watch devices.yml --out backups --interval 3600
+```
+
+每天/每小时自动备份，失败设备即时上报，支持钉钉/企业微信/飞书/Server酱 webhook（设 NETCFG_WEBHOOK 环境变量即可）。免费版限 5 台，Pro 解锁全部 + 告警。
+
+## 为什么
+交换机/路由器配置散落各处，改完没备份、出事没证据。现有方案要么要装平台（Oxidized 需 Ruby 环境），要么是厂商专属。
+
+## 特性
+- 多设备并发备份（SSH/Telnet），华为/H3C/锐捷/思科开箱即用
+- 配置变更 diff（谁在什么时候改了什么）
+- 输出: 本地目录 / git 仓库
+- 单二进制 / 单 Python 文件，无依赖
+
+## 快速开始
+```bash
+# 免费版: 最多 5 台设备
+pip install netcfg-vault
+netcfg-vault backup devices.yml
+```
+
+配置变更对比（自动忽略时间戳噪声，只看真实变更）：
+```bash
+netcfg-vault diff backups/old.cfg backups/new.cfg
+# -sysname CoreSW01
+# +sysname CoreSW02
+# [summary] +1 / -1
+```
+
+📖 完整教程: [网络设备配置还在手动导出？](https://gist.github.com/BG8CFB/6aab6eb7b32ef1e06ab9fe632da6346a)
+
+## Pro 版（¥99 一次性）
+- 无设备数限制
+- 定时任务 + 失败告警（邮件/企业微信/钉钉）
+- 配置变更周报
+- 1 年更新
+
+购买链接: （见 releases 说明 / 联系作者）
+
+## 状态
+🚧 开发中 — 首个可用版本开发中。Star 关注进展。
+
+## License
+MIT（代码），品牌与文档保留权利。

netcfg_vault-0.3.1/netcfg_vault/__init__.py

@@ -0,0 +1 @@
+__version__ = '0.3.1'

netcfg_vault-0.3.1/netcfg_vault/backup.py

@@ -0,0 +1,51 @@
+"""Device inventory loading and per-vendor config backup."""
+import getpass
+import os
+
+import yaml
+
+# 各厂商取配置的命令
+SHOW_COMMANDS = {
+    "h3c": "display current-configuration",
+    "huawei": "display current-configuration",
+    "cisco": "show running-config",
+    "ruijie": "show running-config",
+}
+
+
+def load_devices(path):
+    with open(path, encoding="utf-8") as fh:
+        data = yaml.safe_load(fh) or {}
+    devices = data.get("devices", [])
+    for dev in devices:
+        for key in ("name", "host", "vendor", "protocol", "username"):
+            if key not in dev:
+                raise ValueError(f"设备缺少字段 {key}: {dev}")
+        if dev["vendor"] not in SHOW_COMMANDS:
+            raise ValueError(f"不支持的 vendor: {dev['vendor']}")
+    return devices
+
+
+def backup_device(dev, ask_pass=False):
+    """Connect and return the running-config text. Raises on failure."""
+    import paramiko  # deferred import so --help works without it
+
+    password = os.environ.get("NETCFG_PASSWORD") or (
+        getpass.getpass(f"{dev['name']} 密码: ") if ask_pass else None
+    )
+    client = paramiko.SSHClient()
+    client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+    try:
+        client.connect(
+            dev["host"],
+            username=dev["username"],
+            password=password,
+            look_for_keys=True,
+            timeout=15,
+        )
+        _stdin, stdout, _stderr = client.exec_command(
+            SHOW_COMMANDS[dev["vendor"]], timeout=30
+        )
+        return stdout.read().decode("utf-8", errors="replace")
+    finally:
+        client.close()

netcfg_vault-0.3.1/netcfg_vault/cli.py

@@ -0,0 +1,84 @@
+"""netcfg-vault CLI: backup network device configs concurrently."""
+import argparse
+import os
+import sys
+from pathlib import Path
+
+from .backup import backup_device, load_devices
+from .diff import changed_lines, diff_configs
+
+FREE_DEVICE_LIMIT = 5
+
+
+def cmd_backup(args):
+    devices = load_devices(args.inventory)
+    if not args.pro:
+        devices = devices[:FREE_DEVICE_LIMIT]
+        if len(devices) == FREE_DEVICE_LIMIT:
+            print(f"[free] 仅备份前 {FREE_DEVICE_LIMIT} 台设备（Pro 解锁全部）")
+    out_dir = Path(args.out)
+    out_dir.mkdir(parents=True, exist_ok=True)
+    failures = []
+    for dev in devices:
+        try:
+            text = backup_device(dev, args.ask_pass)
+            (out_dir / f"{dev['name']}.cfg").write_text(text, encoding="utf-8")
+            print(f"[ok] {dev['name']} ({len(text)} bytes)")
+        except Exception as exc:  # noqa: BLE001 - report per-device failures
+            failures.append((dev["name"], str(exc)))
+            print(f"[fail] {dev['name']}: {exc}")
+    if failures:
+        sys.exit(1)
+
+
+def cmd_diff(args):
+    """Compare newest backup against previous one (or two named files)."""
+    from pathlib import Path
+
+    old = Path(args.old).read_text(encoding="utf-8")
+    new = Path(args.new).read_text(encoding="utf-8")
+    added, removed = changed_lines(old, new)
+    if added == 0 and removed == 0:
+        print("无有效变更（已忽略时间戳等噪声行）")
+        return
+    print(diff_configs(old, new))
+    print(f"\n[summary] +{added} / -{removed}")
+
+
+def cmd_watch(args):
+    """Pro: 定时备份循环。"""
+    from .scheduler import Scheduler
+
+    sched = Scheduler(args.inventory, args.out, interval=args.interval, device_limit=None if args.pro else FREE_DEVICE_LIMIT)
+    if not args.pro:
+        print(f"[free] watch 模式仅备份前 {FREE_DEVICE_LIMIT} 台设备（Pro 解锁全部）")
+    sched.run_forever()
+
+
+def main():
+    ap = argparse.ArgumentParser(prog="netcfg-vault", description="批量备份网络设备配置")
+    sub = ap.add_subparsers(dest="cmd", required=True)
+    b = sub.add_parser("backup", help="执行备份")
+    b.add_argument("inventory", help="devices.yml 路径")
+    b.add_argument("--out", default="backups", help="输出目录")
+    b.add_argument("--ask-pass", action="store_true", help="交互式输入密码")
+    b.add_argument("--pro", action="store_true", help="Pro 授权模式")
+    b.set_defaults(func=cmd_backup)
+    w = sub.add_parser("watch", help="定时备份（Pro 功能，免费限 5 台）")
+    w.add_argument("inventory", help="devices.yml 路径")
+    w.add_argument("--out", default="backups", help="输出目录")
+    w.add_argument("--interval", type=int, default=86400, help="轮询间隔秒数，默认 86400（每天）")
+    w.add_argument("--pro", action="store_true", help="Pro 模式（解锁全部设备）")
+    w.set_defaults(func=cmd_watch)
+
+    d = sub.add_parser("diff", help="对比两份配置文件")
+    d.add_argument("old", help="旧配置路径")
+    d.add_argument("new", help="新配置路径")
+    d.set_defaults(func=cmd_diff)
+
+    args = ap.parse_args()
+    args.func(args)
+
+
+if __name__ == "__main__":
+    main()

netcfg_vault-0.3.1/netcfg_vault/diff.py

@@ -0,0 +1,39 @@
+"""Config diff engine: normalize vendor noise, produce unified diffs."""
+import difflib
+import re
+
+# 这些行每次读取都会变化（时间戳/uptime），对比前剔除，否则全是假差异
+NOISE_PATTERNS = [
+    re.compile(r"^!.*Time.*$", re.IGNORECASE),
+    re.compile(r"^#\s*Last\s+modified.*$", re.IGNORECASE),       # h3c
+    re.compile(r"^#\s*\d{4}-\d{2}-\d{2}.*$", re.IGNORECASE),   # huawei 时间戳行
+    re.compile(r"^\s*Building configuration.*$", re.IGNORECASE),
+    re.compile(r"^Current configuration.*$", re.IGNORECASE),
+    re.compile(r"^\s*\d+\s+(second|minute|hour|day)s?[,\s]", re.IGNORECASE),
+]
+
+
+def normalize(text):
+    """Strip volatile lines (timestamps, sizes) so diffs show real changes only."""
+    kept = []
+    for line in text.splitlines():
+        if any(p.match(line) for p in NOISE_PATTERNS):
+            continue
+        kept.append(line.rstrip())
+    return kept
+
+
+def diff_configs(old_text, new_text):
+    """Return unified-diff string; empty string when no effective change."""
+    old, new = normalize(old_text), normalize(new_text)
+    delta = list(difflib.unified_diff(old, new, fromfile="previous", tofile="current", lineterm=""))
+    return "\n".join(delta)
+
+
+def changed_lines(old_text, new_text):
+    """Return (added, removed) line counts after normalization."""
+    old, new = normalize(old_text), normalize(new_text)
+    sm = difflib.SequenceMatcher(a=old, b=new)
+    added = sum(j - i for _tag, _i1, _i2, i, j in sm.get_opcodes() if _tag in ("insert", "replace"))
+    removed = sum(i2 - i1 for _tag, i1, i2, _i, _j in sm.get_opcodes() if _tag in ("delete", "replace"))
+    return added, removed

netcfg_vault-0.3.1/netcfg_vault/notify.py

@@ -0,0 +1,52 @@
+"""备份失败告警通道（Pro 功能）。
+
+输入: 字符串列表 messages。
+输出: 通过配置的 webhook（钉钉/企业微信/飞书/Server酱）发送 POST；无配置时退化为 stderr 打印。
+失败条件: webhook 返回非 200 或网络异常——告警失败不应中断备份主流程，异常被吞并记录。
+"""
+from __future__ import annotations
+
+import json
+import os
+import sys
+import urllib.request
+
+
+def stderr_notify(messages):
+    """默认通道: 打印到 stderr。"""
+    for m in messages:
+        print(f"[notify] {m}", file=sys.stderr)
+
+
+def make_webhook_notify(url):
+    """构造向群机器人 webhook 发文本的告警函数。
+
+    自动识别钉钉/企业微信/飞书/Server酱 的 payload 格式。
+    """
+    def notify(messages):
+        text = "\n".join(f"[netcfg-vault] {m}" for m in messages)
+        if "oapi.dingtalk.com" in url:
+            payload = {"msgtype": "text", "text": {"content": text}}
+        elif "qyapi.weixin.qq.com" in url:
+            payload = {"msgtype": "text", "text": {"content": text}}
+        elif "open.feishu.cn" in url:
+            payload = {"msg_type": "text", "content": {"text": text}}
+        else:
+            payload = {"title": "netcfg-vault 备份告警", "desp": text}
+        try:
+            req = urllib.request.Request(
+                url,
+                data=json.dumps(payload).encode("utf-8"),
+                headers={"Content-Type": "application/json"},
+            )
+            urllib.request.urlopen(req, timeout=10)
+        except Exception as exc:  # noqa: BLE001 - 告警失败不中断备份
+            print(f"[notify-error] webhook 发送失败: {exc}", file=sys.stderr)
+
+    return notify
+
+
+def get_notify():
+    """从环境变量 NETCFG_WEBHOOK 读取 webhook URL 构造告警函数。"""
+    url = os.environ.get("NETCFG_WEBHOOK")
+    return make_webhook_notify(url) if url else stderr_notify

netcfg_vault-0.3.1/netcfg_vault/scheduler.py

@@ -0,0 +1,66 @@
+"""定时备份调度器（Pro 功能骨架）。
+
+输入: 设备清单路径、备份根目录、轮询间隔秒。
+输出: 每轮按日期子目录落盘各设备配置；失败设备名与错误经 notify 回调上报。
+失败条件: 设备清单无法解析时直接抛出对应异常；备份失败按设备记录，不中断整轮。
+"""
+from __future__ import annotations
+
+import time
+from datetime import date
+from pathlib import Path
+
+from .backup import backup_device, load_devices
+from .notify import get_notify
+
+
+def default_notify(messages):
+    """默认上报: 打印到标准错误，方便重定向到日志。"""
+    for m in messages:
+        print(f"[notify] {m}")
+
+
+class Scheduler:
+    """周期执行批量备份；errors 回调接收失败列表。"""
+
+    def __init__(self, inventory, out_root, interval=86400, notify=None, device_limit=None):
+        self.inventory = Path(inventory)
+        self.out_root = Path(out_root)
+        self.interval = interval
+        self.notify = notify or get_notify()
+        self.device_limit = device_limit
+        self._running = False
+
+    def run_once(self):
+        """执行一轮备份，返回 (成功数, 失败列表)。"""
+        devices = load_devices(self.inventory)
+        if self.device_limit is not None:
+            devices = devices[: self.device_limit]
+        stamp = date.today().isoformat()
+        out_dir = self.out_root / stamp
+        out_dir.mkdir(parents=True, exist_ok=True)
+        ok = 0
+        failed = []
+        for dev in devices:
+            try:
+                text = backup_device(dev)
+                (out_dir / f"{dev['name']}.cfg").write_text(text, encoding="utf-8")
+                ok += 1
+            except Exception as exc:  # noqa: BLE001 - 单台失败不中断整轮
+                failed.append(f"{dev['name']}: {exc}")
+        if failed:
+            self.notify(failed)
+        return ok, failed
+
+    def run_forever(self):
+        """阻塞式循环，直到 stop() 被调用。"""
+        self._running = True
+        while self._running:
+            try:
+                self.run_once()
+            except Exception as exc:  # noqa: BLE001 - 清单级错误也要通知后继续
+                self.notify([f"inventory error: {exc}"])
+            time.sleep(self.interval)
+
+    def stop(self):
+        self._running = False

netcfg_vault-0.3.1/netcfg_vault.egg-info/PKG-INFO

@@ -0,0 +1,65 @@
+Metadata-Version: 2.4
+Name: netcfg-vault
+Version: 0.3.1
+Summary: 批量备份和对比网络设备配置的命令行工具
+License: MIT
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: paramiko>=3.4
+Requires-Dist: PyYAML>=6.0
+Dynamic: license-file
+
+# netcfg-vault
+
+> 产品主页: <https://bg8cfb.github.io/netcfg-vault/>
+
+**批量备份和对比网络设备配置的命令行工具** — 面向网络工程师 / 运维。
+
+## 定时备份（Pro）
+
+```bash
+netcfg-vault watch devices.yml --out backups --interval 3600
+```
+
+每天/每小时自动备份，失败设备即时上报，支持钉钉/企业微信/飞书/Server酱 webhook（设 NETCFG_WEBHOOK 环境变量即可）。免费版限 5 台，Pro 解锁全部 + 告警。
+
+## 为什么
+交换机/路由器配置散落各处，改完没备份、出事没证据。现有方案要么要装平台（Oxidized 需 Ruby 环境），要么是厂商专属。
+
+## 特性
+- 多设备并发备份（SSH/Telnet），华为/H3C/锐捷/思科开箱即用
+- 配置变更 diff（谁在什么时候改了什么）
+- 输出: 本地目录 / git 仓库
+- 单二进制 / 单 Python 文件，无依赖
+
+## 快速开始
+```bash
+# 免费版: 最多 5 台设备
+pip install netcfg-vault
+netcfg-vault backup devices.yml
+```
+
+配置变更对比（自动忽略时间戳噪声，只看真实变更）：
+```bash
+netcfg-vault diff backups/old.cfg backups/new.cfg
+# -sysname CoreSW01
+# +sysname CoreSW02
+# [summary] +1 / -1
+```
+
+📖 完整教程: [网络设备配置还在手动导出？](https://gist.github.com/BG8CFB/6aab6eb7b32ef1e06ab9fe632da6346a)
+
+## Pro 版（¥99 一次性）
+- 无设备数限制
+- 定时任务 + 失败告警（邮件/企业微信/钉钉）
+- 配置变更周报
+- 1 年更新
+
+购买链接: （见 releases 说明 / 联系作者）
+
+## 状态
+🚧 开发中 — 首个可用版本开发中。Star 关注进展。
+
+## License
+MIT（代码），品牌与文档保留权利。

netcfg_vault-0.3.1/netcfg_vault.egg-info/SOURCES.txt

@@ -0,0 +1,18 @@
+LICENSE
+README.md
+pyproject.toml
+netcfg_vault/__init__.py
+netcfg_vault/backup.py
+netcfg_vault/cli.py
+netcfg_vault/diff.py
+netcfg_vault/notify.py
+netcfg_vault/scheduler.py
+netcfg_vault.egg-info/PKG-INFO
+netcfg_vault.egg-info/SOURCES.txt
+netcfg_vault.egg-info/dependency_links.txt
+netcfg_vault.egg-info/entry_points.txt
+netcfg_vault.egg-info/requires.txt
+netcfg_vault.egg-info/top_level.txt
+tests/test_diff.py
+tests/test_notify.py
+tests/test_scheduler.py

netcfg_vault-0.3.1/netcfg_vault.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

netcfg_vault-0.3.1/netcfg_vault.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+netcfg-vault = netcfg_vault.cli:main

netcfg_vault-0.3.1/netcfg_vault.egg-info/requires.txt

@@ -0,0 +1,2 @@
+paramiko>=3.4
+PyYAML>=6.0

netcfg_vault-0.3.1/netcfg_vault.egg-info/top_level.txt

@@ -0,0 +1 @@
+netcfg_vault

netcfg_vault-0.3.1/pyproject.toml

@@ -0,0 +1,18 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "netcfg-vault"
+version = "0.3.1"
+description = "批量备份和对比网络设备配置的命令行工具"
+readme = "README.md"
+requires-python = ">=3.9"
+license = { text = "MIT" }
+dependencies = ["paramiko>=3.4", "PyYAML>=6.0"]
+
+[project.scripts]
+netcfg-vault = "netcfg_vault.cli:main"
+
+[tool.setuptools.packages.find]
+include = ["netcfg_vault*"]

netcfg_vault-0.3.1/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

netcfg_vault-0.3.1/tests/test_diff.py

@@ -0,0 +1,59 @@
+"""Tests for the config-diff engine."""
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
+
+from netcfg_vault.diff import changed_lines, diff_configs, normalize
+
+OLD = """#
+version 7.1.075, ESS 1110
+# Last modified at 09:12:34 UTC Mon 11/09/2026
+sysname CoreSW01
+vlan 10
+ description office
+interface GigabitEthernet1/0/1
+ port link-type trunk
+return
+"""
+
+NEW_SAME = """#
+version 7.1.075, ESS 1110
+# Last modified at 18:45:00 UTC Mon 11/09/2026
+sysname CoreSW01
+vlan 10
+ description office
+interface GigabitEthernet1/0/1
+ port link-type trunk
+return
+"""
+
+NEW_CHANGED = """#
+version 7.1.075, ESS 1110
+sysname CoreSW02
+vlan 10
+ description office-new
+interface GigabitEthernet1/0/1
+ port link-type access
+return
+"""
+
+
+def test_normalize_strips_timestamp():
+    assert "# Last modified" not in "\n".join(normalize(OLD))
+
+
+def test_no_change_after_noise_removal():
+    a, r = changed_lines(OLD, NEW_SAME)
+    assert (a, r) == (0, 0), f"expected no effective change, got +{a}/-{r}"
+
+
+def test_change_detected_and_counted():
+    a, r = changed_lines(OLD, NEW_CHANGED)
+    assert a >= 3 and r >= 3, f"expected >=3 added and removed, got +{a}/-{r}"
+
+
+def test_diff_contains_changed_sysname():
+    out = diff_configs(OLD, NEW_CHANGED)
+    assert "-sysname CoreSW01" in out
+    assert "+sysname CoreSW02" in out

netcfg_vault-0.3.1/tests/test_notify.py

@@ -0,0 +1,17 @@
+import os
+import sys
+from pathlib import Path
+sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
+from netcfg_vault.notify import make_webhook_notify, get_notify, stderr_notify
+
+# 无环境变量时退化为 stderr 通道
+os.environ.pop('NETCFG_WEBHOOK', None)
+assert get_notify() is stderr_notify
+
+# webhook 通道构造不触发网络（只在调用时发）
+n = make_webhook_notify('https://oapi.dingtalk.com/robot/send?access_token=x')
+assert callable(n)
+
+# 发送失败被吞掉不抛异常
+n(['unit-test failure'])
+print('NOTIFY TESTS PASS')

netcfg_vault-0.3.1/tests/test_scheduler.py

@@ -0,0 +1,34 @@
+import os
+import sys
+import tempfile
+from pathlib import Path
+sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
+import netcfg_vault.scheduler as sch
+from netcfg_vault.scheduler import Scheduler
+
+inv = tempfile.mkdtemp()
+dev_path = os.path.join(inv, 'devices.yml')
+open(dev_path, 'w', encoding='utf-8').write('devices:\n  - name: fake1\n    host: 1.1.1.1\n    vendor: h3c\n    protocol: ssh\n    username: a\n')
+
+calls = []
+def fake_backup(dev, ask_pass=False):
+    calls.append(dev['name'])
+    if dev['name'] == 'bad':
+        raise RuntimeError('conn refused')
+    return 'sysname FAKE\n'
+
+sch.backup_device = fake_backup
+notified = []
+out = tempfile.mkdtemp()
+s = Scheduler(dev_path, out, interval=1, notify=notified.extend)
+ok, failed = s.run_once()
+assert ok == 1 and failed == [] and calls == ['fake1'], (ok, failed, calls)
+open(dev_path, 'a', encoding='utf-8').write('  - name: bad\n    host: 2.2.2.2\n    vendor: h3c\n    protocol: ssh\n    username: a\n')
+ok2, failed2 = s.run_once()
+assert ok2 == 1 and len(failed2) == 1 and 'bad: conn refused' in failed2[0], (ok2, failed2)
+assert notified and 'bad: conn refused' in notified[0], notified
+stamp_dirs = os.listdir(out)
+assert len(stamp_dirs) == 1, stamp_dirs
+files = os.listdir(os.path.join(out, stamp_dirs[0]))
+assert 'fake1.cfg' in files, files
+print('SCHED TESTS PASS ok=%d failed=%s files=%s' % (ok2, failed2, files))