mirror of
https://github.com/kuhyx/testsAndMisc.git
synced 2026-11-12 23:30:52 +01:00
Krzysztof kuhy Rudnicki
c4bdaad038
test_pacman_wrapper_security.sh (287) and test_i3blocks_efficiency.sh (345). Both keep their filenames -- shell-tests.yml runs them by name -- and both were verified by diffing a full run against the pre-split code: byte-identical output, exit 0 either side. The i3blocks setup half stays in the entry on purpose. Its five fake $BIN_DIR binaries are written with heredocs, and a seam inside a heredoc yields a lib that will not parse -- the worst failure this effort has produced so far. Only the two heredoc-free regions moved. Both i3blocks lib functions end in an explicit `return 0`. Their last statement is a `|| fail ...`, which as a function tail under set -e becomes the return value and would abort a run in which every check passed. `fail` exits on its own, so reaching the end means success. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
71 lines
2.5 KiB
Bash
Executable File
71 lines
2.5 KiB
Bash
Executable File
#!/bin/bash
|
|
# Pacman wrapper security: makepkg capped runner, mkpkg helper and installer hardening (tests 13-19).
|
|
# Sourced by test_pacman_wrapper_security.sh; inherits its strict mode
|
|
# (set -e) and its SCRIPT_DIR / WRAPPER_DIR / VBOX_DIR paths.
|
|
|
|
pac_tests_makepkg_and_installer() {
|
|
# Test 13: Verify makepkg capped wrapper script syntax
|
|
echo "[TEST 13] Checking makepkg capped wrapper syntax..."
|
|
if bash -n "$WRAPPER_DIR/makepkg_capped.sh"; then
|
|
echo "✓ makepkg capped wrapper syntax is valid"
|
|
else
|
|
echo "✗ makepkg capped wrapper has syntax errors"
|
|
exit 1
|
|
fi
|
|
|
|
# Test 14: Verify pacman wrapper exposes makepkg capped command
|
|
echo "[TEST 14] Verifying pacman wrapper supports --makepkg-capped..."
|
|
if grep -q -- "--makepkg-capped" "$WRAPPER_DIR/pacman_wrapper.sh"; then
|
|
echo "✓ pacman wrapper makepkg capped command found"
|
|
else
|
|
echo "✗ pacman wrapper makepkg capped command missing"
|
|
exit 1
|
|
fi
|
|
|
|
# Test 15: Verify installer deploys makepkg capped wrapper
|
|
echo "[TEST 15] Verifying installer deploys makepkg capped wrapper..."
|
|
if grep -q "MAKEPKG_CAPPED" "$WRAPPER_DIR/install_pacman_wrapper.sh"; then
|
|
echo "✓ Installer includes makepkg capped deployment"
|
|
else
|
|
echo "✗ Installer does not include makepkg capped deployment"
|
|
exit 1
|
|
fi
|
|
|
|
# Test 16: Verify mkpkg helper script syntax
|
|
echo "[TEST 16] Checking mkpkg helper script syntax..."
|
|
if bash -n "$WRAPPER_DIR/mkpkg.sh"; then
|
|
echo "✓ mkpkg helper script syntax is valid"
|
|
else
|
|
echo "✗ mkpkg helper script has syntax errors"
|
|
exit 1
|
|
fi
|
|
|
|
# Test 17: Verify installer deploys mkpkg helper
|
|
echo "[TEST 17] Verifying installer deploys mkpkg helper..."
|
|
if grep -q "MKPKG" "$WRAPPER_DIR/install_pacman_wrapper.sh"; then
|
|
echo "✓ Installer includes mkpkg helper deployment"
|
|
else
|
|
echo "✗ Installer does not include mkpkg helper deployment"
|
|
exit 1
|
|
fi
|
|
|
|
# Test 18: Verify installer runs in strict mode
|
|
echo "[TEST 18] Verifying installer uses strict shell mode..."
|
|
if grep -q "set -euo pipefail" "$WRAPPER_DIR/install_pacman_wrapper.sh"; then
|
|
echo "✓ Installer strict mode enabled"
|
|
else
|
|
echo "✗ Installer strict mode not enabled"
|
|
exit 1
|
|
fi
|
|
|
|
# Test 19: Verify installer handles immutable files during updates
|
|
echo "[TEST 19] Verifying installer unlocks immutable files before copy/write..."
|
|
if grep -q "unlock_immutable_file_if_needed" "$WRAPPER_DIR/install_pacman_wrapper.sh"; then
|
|
echo "✓ Installer immutable-file handling found"
|
|
else
|
|
echo "✗ Installer immutable-file handling missing"
|
|
exit 1
|
|
fi
|
|
|
|
}
|