jochen
f015aba34a
Three modules' tools act through `sudo -n` and nothing declared that the account may; each machine said so in a hand-set line in /etc/sudoers. The module owns the package and /etc/sudoers.d/10-mesh-operator (0440), checked by visudo in its manifest test, and serves sudo_rules, sudo_check and sudo_drop_ins from a Go bundle. lab stops declaring the sudo package, which would collide with this module on the node that runs both (hq ADR 0207, to-be 42 Phase 1).
81 lines
2.0 KiB
Go
81 lines
2.0 KiB
Go
package main
|
|
|
|
import (
|
|
"encoding/json"
|
|
"os"
|
|
"testing"
|
|
)
|
|
|
|
type resource map[string]any
|
|
|
|
type manifestShape struct {
|
|
Module string `json:"module"`
|
|
Version string `json:"version"`
|
|
Capabilities []string `json:"capabilities"`
|
|
Claims []map[string]any `json:"claims"`
|
|
Tools []string `json:"tools"`
|
|
Resources []resource `json:"resources"`
|
|
Build struct {
|
|
Artifacts []map[string]any `json:"artifacts"`
|
|
} `json:"build"`
|
|
}
|
|
|
|
func manifest(t *testing.T) manifestShape {
|
|
t.Helper()
|
|
raw, err := os.ReadFile("../../module.json")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
var m manifestShape
|
|
if err := json.Unmarshal(raw, &m); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
return m
|
|
}
|
|
|
|
func (m manifestShape) resource(t *testing.T, id string) resource {
|
|
t.Helper()
|
|
for _, r := range m.Resources {
|
|
if r["id"] == id {
|
|
return r
|
|
}
|
|
}
|
|
t.Fatalf("no resource %s", id)
|
|
return nil
|
|
}
|
|
|
|
// TestToolsAreTheManifests holds the served tools and the manifest's list to one another, and the
|
|
// bundle to the shape the builder compiles and the runtime loads.
|
|
func TestToolsAreTheManifests(t *testing.T) {
|
|
m := manifest(t)
|
|
names := map[string]bool{}
|
|
for _, tool := range tools(machine(nil, 1000)) {
|
|
if names[tool.Name] {
|
|
t.Errorf("%s is served twice", tool.Name)
|
|
}
|
|
names[tool.Name] = true
|
|
}
|
|
for _, want := range m.Tools {
|
|
if !names[want] {
|
|
t.Errorf("the manifest lists %s and the bundle does not serve it", want)
|
|
}
|
|
delete(names, want)
|
|
}
|
|
if len(names) != 0 {
|
|
t.Errorf("served and not listed: %v", names)
|
|
}
|
|
var tools map[string]any
|
|
for _, a := range m.Build.Artifacts {
|
|
if a["name"] == "tools" {
|
|
tools = a
|
|
}
|
|
}
|
|
if tools == nil || tools["kind"] != "bundle" || tools["language"] != "go" || tools["system"] != "arch" ||
|
|
tools["from"] != "cmd/"+binaryName || tools["binary"] != binaryName {
|
|
t.Fatalf("the tools artifact: %v", tools)
|
|
}
|
|
if loads, _ := tools["loads"].([]any); len(loads) != 1 || loads[0] != binaryName {
|
|
t.Fatalf("loads: %v", tools["loads"])
|
|
}
|
|
}
|