1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
require 'spec_helper'
require 'puppet_spec/files'
require 'puppet_spec/compiler'
describe Puppet::Type.type(:user), '(integration)', :unless => Puppet.features.microsoft_windows? do
include PuppetSpec::Files
include PuppetSpec::Compiler
context "when set to purge ssh keys from a file" do
# different UTF-8 widths
# 1-byte A
# 2-byte ۿ - http://www.fileformat.info/info/unicode/char/06ff/index.htm - 0xDB 0xBF / 219 191
# 3-byte ᚠ - http://www.fileformat.info/info/unicode/char/16A0/index.htm - 0xE1 0x9A 0xA0 / 225 154 160
# 4-byte 𠜎 - http://www.fileformat.info/info/unicode/char/2070E/index.htm - 0xF0 0xA0 0x9C 0x8E / 240 160 156 142
let (:mixed_utf8) { "A\u06FF\u16A0\u{2070E}" } # Aۿᚠ𠜎
let(:tempfile) do
file_containing('user_spec', <<-EOF)
# comment #{mixed_utf8}
ssh-rsa KEY-DATA key-name
ssh-rsa KEY-DATA key name
EOF
end
# must use an existing user, or the generated key resource
# will fail on account of an invalid user for the key
# - root should be a safe default
let(:manifest) { "user { 'root': purge_ssh_keys => '#{tempfile}' }" }
it "should purge authorized ssh keys" do
apply_compiled_manifest(manifest)
expect(File.read(tempfile, :encoding => Encoding::UTF_8)).not_to match(/key-name/)
end
it "should purge keys with spaces in the comment string" do
apply_compiled_manifest(manifest)
expect(File.read(tempfile, :encoding => Encoding::UTF_8)).not_to match(/key name/)
end
context "with other prefetching resources evaluated first" do
let(:manifest) { "host { 'test': before => User[root] } user { 'root': purge_ssh_keys => '#{tempfile}' }" }
it "should purge authorized ssh keys" do
apply_compiled_manifest(manifest)
expect(File.read(tempfile, :encoding => Encoding::UTF_8)).not_to match(/key-name/)
end
end
context "with multiple unnamed keys" do
let(:tempfile) do
file_containing('user_spec', <<-EOF)
# comment #{mixed_utf8}
ssh-rsa KEY-DATA1
ssh-rsa KEY-DATA2
EOF
end
it "should purge authorized ssh keys" do
apply_compiled_manifest(manifest)
expect(File.read(tempfile, :encoding => Encoding::UTF_8)).not_to match(/KEY-DATA/)
end
end
end
end
|
