1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
require 'spec_helper_acceptance'
RSpec.context 'sshkeys: Create' do
let(:keyname) { "pl#{rand(999_999).to_i}" }
# FIXME: This is bletcherous
let(:ssh_known_hosts) { '/etc/ssh/ssh_known_hosts' }
before(:each) do
posix_agents.agents.each do |agent|
# The 'cp' might fail because the source file doesn't exist
on(
agent,
"cp -fv #{ssh_known_hosts} /tmp/ssh_known_hosts",
acceptable_exit_codes: [0, 1],
)
end
end
after(:each) do
posix_agents.each do |agent|
# Is it present?
rc = on(
agent,
'[ -e /tmp/ssh_known_hosts ]',
accept_all_exit_codes: true,
)
if rc.exit_code == 0
# It's present, so restore the original
on(
agent,
"mv -fv /tmp/ssh_known_hosts #{ssh_known_hosts}",
accept_all_exit_codes: true,
)
else
# It's missing, which means there wasn't one to backup; just
# delete the one we laid down
on(
agent,
"rm -fv #{ssh_known_hosts}",
accept_all_exit_codes: true,
)
end
end
end
posix_agents.each do |agent|
it "#{agent} should add an SSH key to the correct ssh_known_hosts file (OS X/macOS - PUP-5508)" do
# Is it even there?
rc = on(
agent,
"[ ! -e #{ssh_known_hosts} ]",
acceptable_exit_codes: [0, 1],
)
if rc.exit_code == 1
# If it's there, it should be empty
on(agent, "cat #{ssh_known_hosts}") do |_res|
expect(stdout).to be_empty
end
end
args = [
'ensure=present',
'key=how_about_the_key_of_c',
'type=ssh-rsa',
]
on(agent, puppet_resource('sshkey', keyname.to_s, args))
on(agent, "cat #{ssh_known_hosts}") do |_rc|
expect(stdout).to include(keyname.to_s)
end
end
end
posix_agents.each do |agent|
it "#{agent} should allow to add two different type keys for the same host" do
# Is it even there?
rc = on(
agent,
"[ ! -e #{ssh_known_hosts} ]",
acceptable_exit_codes: [0, 1],
)
if rc.exit_code == 1
# If it's there, it should be empty
on(agent, "cat #{ssh_known_hosts}") do |_res|
expect(stdout).to be_empty
end
end
on agent, puppet('apply'), stdin: <<MANIFEST
sshkey { '#{keyname}@ssh-rsa':
ensure => 'present',
key => 'how_about_the_rsa_key_of_c',
}
sshkey { '#{keyname}@ssh-dss':
ensure => 'present',
key => 'how_about_the_dss_key_of_c',
}
MANIFEST
on(agent, "cat #{ssh_known_hosts}") do |_rc|
expect(stdout).to include("#{keyname} ssh-rsa")
expect(stdout).to include("#{keyname} ssh-dss")
end
end
end
end
|
