mirror of
https://github.com/kuhyx/testsAndMisc.git
synced 2026-11-11 17:34:04 +01:00
Krzysztof kuhy Rudnicki
896d7b1d15
Adds an arch-tests job on archlinux:base-devel so the pacman wrapper, makepkg wrapper and hosts-guard tests finally run somewhere. They need an Arch userland and root, which a disposable container provides. Four more tests still referenced pre-reorganisation paths and could never find their targets; repairing them took the container set from two passing to five. All five were verified with --network=none, so the job installs nothing beyond git (base-devel ships no git, and actions/checkout needs it). Also removes the silent-failure mode behind the earlier music_parallelism confusion. The test now derives its temp-worktree path from the script's real position instead of hardcoding the depth, checks up front that ../../lib/common.sh resolves to the stub, and has the stub write a marker asserted after every run. Previously a reorganisation made the script source the real /usr/local/lib/common.sh, so the test measured the live system and failed as though the daemon were broken. Three tests stay out, each for a different reason, documented in the workflow: test_i3blocks_efficiency.sh needs strace and could not be verified locally (containers here have no DNS); test_hosts_guard_pacman_integration.sh fails a real assertion worth investigating; test_security_hardening.sh asserts live host state and can never pass in a fresh container.
94 lines
2.9 KiB
Bash
Executable File
94 lines
2.9 KiB
Bash
Executable File
#!/bin/bash
|
|
# Regression tests for pacman wrapper and hosts-guard hook integration.
|
|
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
REPO_DIR="$(dirname "$SCRIPT_DIR")"
|
|
WRAPPER_FILE="$REPO_DIR/scripts/periodic_background/digital_wellbeing/pacman/pacman_wrapper.sh"
|
|
PRE_HOOK_FILE="$REPO_DIR/scripts/periodic_background/hosts/guard/pacman-hooks/pacman-pre-unlock-hosts.sh"
|
|
POST_HOOK_FILE="$REPO_DIR/scripts/periodic_background/hosts/guard/pacman-hooks/pacman-post-relock-hosts.sh"
|
|
COMMON_FILE="$REPO_DIR/scripts/periodic_background/hosts/guard/pacman-hooks/hosts-guard-common.sh"
|
|
INSTALLER_FILE="$REPO_DIR/scripts/periodic_background/hosts/guard/install_pacman_hooks.sh"
|
|
|
|
assert_contains() {
|
|
local file_path="$1"
|
|
local pattern="$2"
|
|
local message="$3"
|
|
|
|
if grep -Fq "$pattern" "$file_path"; then
|
|
echo "PASS: $message"
|
|
else
|
|
echo "FAIL: $message"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
assert_not_regex() {
|
|
local file_path="$1"
|
|
local pattern="$2"
|
|
local message="$3"
|
|
|
|
if grep -Eq "$pattern" "$file_path"; then
|
|
echo "FAIL: $message"
|
|
exit 1
|
|
fi
|
|
|
|
echo "PASS: $message"
|
|
}
|
|
|
|
first_line_number() {
|
|
local file_path="$1"
|
|
local pattern="$2"
|
|
|
|
grep -n -F -m 1 "$pattern" "$file_path" | cut -d: -f1
|
|
}
|
|
|
|
assert_order() {
|
|
local file_path="$1"
|
|
local first_pattern="$2"
|
|
local second_pattern="$3"
|
|
local message="$4"
|
|
local first_line
|
|
local second_line
|
|
|
|
first_line="$(first_line_number "$file_path" "$first_pattern")"
|
|
second_line="$(first_line_number "$file_path" "$second_pattern")"
|
|
|
|
if [[ -z "$first_line" || -z "$second_line" ]]; then
|
|
echo "FAIL: $message"
|
|
exit 1
|
|
fi
|
|
|
|
if (( first_line < second_line )); then
|
|
echo "PASS: $message"
|
|
else
|
|
echo "FAIL: $message"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
echo "=== Hosts guard pacman integration regression tests ==="
|
|
|
|
for file_path in "$WRAPPER_FILE" "$PRE_HOOK_FILE" "$POST_HOOK_FILE" "$COMMON_FILE" "$INSTALLER_FILE"; do
|
|
bash -n "$file_path"
|
|
done
|
|
echo "PASS: shell syntax is valid"
|
|
|
|
assert_not_regex "$PRE_HOOK_FILE" '(^|[[:space:]])(sudo[[:space:]]+)?rm[[:space:]]+/etc/hosts([[:space:]]|$)' \
|
|
"pre-transaction hook must not delete /etc/hosts"
|
|
|
|
assert_contains "$WRAPPER_FILE" 'pacman_hooks_manage_hosts_guard()' \
|
|
"wrapper detects when pacman hooks already manage hosts guard"
|
|
assert_contains "$WRAPPER_FILE" 'should_use_wrapper_hosts_guard_fallback()' \
|
|
"wrapper exposes a dedicated fallback path for hosts guard"
|
|
assert_order "$WRAPPER_FILE" 'if ! check_and_handle_db_lock "$@"; then' 'if should_use_wrapper_hosts_guard_fallback "$@"; then' \
|
|
"wrapper checks pacman db lock before any manual hosts unlock fallback"
|
|
assert_contains "$WRAPPER_FILE" 'manual_hosts_guard=1' \
|
|
"wrapper tracks whether manual hosts guard fallback was used"
|
|
|
|
assert_contains "$INSTALLER_FILE" 'install -m 755 "$SCRIPT_DIR/pacman-hooks/hosts-guard-common.sh" /usr/local/share/hosts-guard/' \
|
|
"installer deploys shared hosts guard hook helpers"
|
|
|
|
echo "All hosts guard pacman integration regression tests passed."
|