testsAndMisc/linux_configuration/scripts/single_use/features/lib
Krzysztof kuhy Rudnicki 92678c9506 Cover rpi_nc_ca.sh (98.63%) and bind the two paths its suite needed
A 26-assertion suite for rpi_nc_ca.sh, third in the hardest-first order. All
five OS branches are exercised by seeding the marker file each one tests for
inside the jailed /etc, plus a uname stub for Darwin; both NSS stores and all
three Firefox outcomes are covered.

SHARED-FILE BUG: the Debian branch does `mkdir -p
/usr/local/share/ca-certificates` and jail_args bound only /usr/local/bin, so
the suite aborted there under set -e. /usr/local/share and /etc/pki are now
bound. jail_args is shared by every suite in the directory, so all five libs
were re-measured: dot_resolver_install.sh still 39/39 = 100.00%, and
rpi_nc_install.sh, dwm_config.sh and aw_autostart.sh are unchanged. An
over-aggressive mount looks exactly like unreachable code, so this check is
not optional.

That bind also unblocked the runner for the whole directory: with the old
args the run exited 1 before nc_php.sh could be measured at all.

Measured 72/73 = 98.63% through run_all.sh, which is the exact subject
is_covered() builds -- the gate's own view -- so the lib STAYS on the
allowlist. The single test file alone reports 73/73 = 100.00%, both figures
reproduced twice. The one-line delta is line 141, the first line of
show_help's heredoc BODY: not a statement, so the denominator is wrong rather
than a test missing. Excluding heredoc bodies from the denominator is the
next piece of work; it is what stands between this suite and the bar.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016sxxsDHWgdRhmdmzNMA6XM
2026-08-22 12:59:51 +02:00
..
tests Cover rpi_nc_ca.sh (98.63%) and bind the two paths its suite needed 2026-08-22 12:59:51 +02:00
aw_autostart.sh Split three more scripts; make the verifier catch heredoc cuts 2026-08-16 20:16:08 +02:00
aw_install.sh Split three more scripts; make the verifier catch heredoc cuts 2026-08-16 20:16:08 +02:00
aw_service.sh Split three more scripts; make the verifier catch heredoc cuts 2026-08-16 20:16:08 +02:00
dns_dhcp.sh Split setup_dns_blocker.sh, a live systemd unit target 2026-08-16 21:31:03 +02:00
dns_firewall.sh Split setup_dns_blocker.sh, a live systemd unit target 2026-08-16 21:31:03 +02:00
dns_units.sh Split setup_dns_blocker.sh, a live systemd unit target 2026-08-16 21:31:03 +02:00
dot_resolver_install.sh Split seven more linux_configuration scripts 2026-08-16 18:56:05 +02:00
dwm_config.sh Cover dwm_config.sh and fix its unreachable upstream-drift warning 2026-08-22 12:44:12 +02:00
gitea_network.sh Split three near-miss linux_configuration scripts 2026-08-16 18:38:43 +02:00
kcd2_autorebuild.sh Split three large linux_configuration scripts, defer a fourth 2026-08-16 19:06:16 +02:00
kcd2_expose.sh Split three large linux_configuration scripts, defer a fourth 2026-08-16 19:06:16 +02:00
kcd2_serve.sh Split three large linux_configuration scripts, defer a fourth 2026-08-16 19:06:16 +02:00
local_llm_model.sh Split five more linux_configuration single_use scripts 2026-08-16 18:51:28 +02:00
mobile_service.sh Split two more linux_configuration scripts; revert a third 2026-08-16 18:44:18 +02:00
nc_discover.sh Split setup_nextcloud_raspberry.sh 1383 -> 231 2026-08-16 19:37:07 +02:00
nc_flash.sh Split setup_nextcloud_raspberry.sh 1383 -> 231 2026-08-16 19:37:07 +02:00
nc_image.sh Split setup_nextcloud_raspberry.sh 1383 -> 231 2026-08-16 19:37:07 +02:00
nc_packages.sh Split setup_nextcloud_raspberry.sh 1383 -> 231 2026-08-16 19:37:07 +02:00
nc_php.sh Split setup_nextcloud_raspberry.sh 1383 -> 231 2026-08-16 19:37:07 +02:00
nc_remote_flash.sh Split setup_nextcloud_raspberry.sh 1383 -> 231 2026-08-16 19:37:07 +02:00
nc_remote.sh Split setup_nextcloud_raspberry.sh 1383 -> 231 2026-08-16 19:37:07 +02:00
nc_services.sh Split setup_nextcloud_raspberry.sh 1383 -> 231 2026-08-16 19:37:07 +02:00
pi_flash_exec.sh Split the Pi flasher and the boot-repair test harness 2026-08-16 20:21:44 +02:00
pi_flash_image.sh Split the Pi flasher and the boot-repair test harness 2026-08-16 20:21:44 +02:00
pi_flash_remote.sh Split the Pi flasher and the boot-repair test harness 2026-08-16 20:21:44 +02:00
rpi_nc_ca.sh Split three more linux_configuration giants 2026-08-16 19:43:55 +02:00
rpi_nc_deps.sh Split three more linux_configuration giants 2026-08-16 19:43:55 +02:00
rpi_nc_fixes.sh Split three more linux_configuration giants 2026-08-16 19:43:55 +02:00
rpi_nc_install.sh Split three more linux_configuration giants 2026-08-16 19:43:55 +02:00
rpi_nc_ssl_remote.sh Split three more linux_configuration giants 2026-08-16 19:43:55 +02:00
rpi_nc_ssl.sh Split three more linux_configuration giants 2026-08-16 19:43:55 +02:00
rpi_nc_system.sh Split three more linux_configuration giants 2026-08-16 19:43:55 +02:00
searxng_expose.sh Split setup_searxng.sh 912 -> 184 2026-08-16 19:11:40 +02:00
searxng_limiter.sh Split setup_searxng.sh 912 -> 184 2026-08-16 19:11:40 +02:00
searxng_settings.sh Split setup_searxng.sh 912 -> 184 2026-08-16 19:11:40 +02:00
searxng_stack.sh Split setup_searxng.sh 912 -> 184 2026-08-16 19:11:40 +02:00
searxng_start.sh Split setup_searxng.sh 912 -> 184 2026-08-16 19:11:40 +02:00
searxng_status.sh Split setup_searxng.sh 912 -> 184 2026-08-16 19:11:40 +02:00
syncyomi_expose.sh Split three more linux_configuration feature and fix scripts 2026-08-16 18:48:01 +02:00
syncyomi_stack.sh Split three more linux_configuration feature and fix scripts 2026-08-16 18:48:01 +02:00
unreal_mcp_repo.sh Split five more linux_configuration single_use scripts 2026-08-16 18:51:28 +02:00
website_build.sh Split three more linux_configuration feature and fix scripts 2026-08-16 18:48:01 +02:00
wg_firewall.sh Split three more scripts; make the verifier catch heredoc cuts 2026-08-16 20:16:08 +02:00
wg_keys.sh Split three more scripts; make the verifier catch heredoc cuts 2026-08-16 20:16:08 +02:00
wg_sshd.sh Split three more scripts; make the verifier catch heredoc cuts 2026-08-16 20:16:08 +02:00