Node / ReticulumProjects / MeshChatX.git / files / vendor / lxmfy / tests / test_realistic_external_cogs.py

Displaying Raw • Download

Tff7b72import T7ee787os

Tff7b72import T7ee787shutil

Tff7b72import T7ee787stat

Tff7b72import T7ee787subprocess

Tff7b72import T7ee787tempfile

Tff7b72from T7ee787pathlib Tff7b72import Te6edf3Path

Tff7b72from T7ee787unittestT7ee787.T7ee787mock Tff7b72import Te6edf3MagicMock

Tff7b72import T7ee787pytest

Tff7b72from T7ee787lxmfy Tff7b72import Te6edf3BotConfigTb4b4b4, Te6edf3LXMFBot

Tff7b72from T7ee787lxmfyT7ee787.T7ee787cogs_core Tff7b72import Te6edf3load_cogs_from_directory

Tff7b72def Td2a8ffis_bwrap_functionalTb4b4b4(Tb4b4b4)Tb4b4b4:

T8b949e"""Check if bwrap can actually run a simple command in this environment."""

Tff7b72tryTb4b4b4:

T8b949e# Construct a realistic minimal bwrap command

Te6edf3cmd Tff7b72= Tb4b4b4[Ta5d6ff"Ta5d6ffbwrapTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff--unshare-allTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff--ro-bindTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff/usrTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff/usrTa5d6ff"Tb4b4b4]

Tff7b72for Te6edf3p Tff7b72in Tb4b4b4[Ta5d6ff"Ta5d6ff/binTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff/libTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff/lib64Ta5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff/sbinTa5d6ff"Tb4b4b4]Tb4b4b4:

Tff7b72if Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffislinkTb4b4b4(Te6edf3pTb4b4b4)Tb4b4b4:

Te6edf3cmdTff7b72.Td2a8ffextendTb4b4b4(Tb4b4b4[Ta5d6ff"Ta5d6ff--symlinkTa5d6ff"Tb4b4b4, Te6edf3osTff7b72.Td2a8ffreadlinkTb4b4b4(Te6edf3pTb4b4b4)Tb4b4b4, Te6edf3pTb4b4b4]Tb4b4b4)

Tff7b72elif Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffexistsTb4b4b4(Te6edf3pTb4b4b4)Tb4b4b4:

Te6edf3cmdTff7b72.Td2a8ffextendTb4b4b4(Tb4b4b4[Ta5d6ff"Ta5d6ff--ro-bindTa5d6ff"Tb4b4b4, Te6edf3pTb4b4b4, Te6edf3pTb4b4b4]Tb4b4b4)

Te6edf3cmdTff7b72.Td2a8ffextendTb4b4b4(Tb4b4b4[Ta5d6ff"Ta5d6ff/usr/bin/trueTa5d6ff"Tb4b4b4]Tb4b4b4)

Te6edf3result Tff7b72= Te6edf3subprocessTff7b72.Td2a8ffrunTb4b4b4(Te6edf3cmdTb4b4b4, Te6edf3capture_outputTff7b72=Tff7b72TrueTb4b4b4, Te6edf3textTff7b72=Tff7b72TrueTb4b4b4)

Tff7b72return Te6edf3resultTff7b72.Td2a8ffreturncode Tff7b72== T79c0ff0

Tff7b72except Tf85149ExceptionTb4b4b4:

Tff7b72return Tff7b72False

Tf0883e@pytestTff7b72.Td2a8fffixture

Tff7b72def Td2a8ffrealistic_cogs_setupTb4b4b4(Tb4b4b4)Tb4b4b4:

T8b949e"""Set up a temporary directory with various language cogs."""

Tff7b72with Te6edf3tempfileTff7b72.Td2a8ffTemporaryDirectoryTb4b4b4(Tb4b4b4) Tff7b72as Te6edf3temp_dirTb4b4b4:

Te6edf3temp_path Tff7b72= Te6edf3PathTb4b4b4(Te6edf3temp_dirTb4b4b4)

Te6edf3cogs_dir Tff7b72= Te6edf3temp_path Tff7b72/ Ta5d6ff"Ta5d6ffcogsTa5d6ff"

Te6edf3cogs_dirTff7b72.Td2a8ffmkdirTb4b4b4(Tb4b4b4)

T8b949e# 1. Bash Cog

Te6edf3bash_path Tff7b72= Te6edf3cogs_dir Tff7b72/ Ta5d6ff"Ta5d6ffbash_helloTa5d6ff"

Te6edf3bash_pathTff7b72.Td2a8ffwrite_textTb4b4b4(Ta5d6ff'Ta5d6ff#!/bin/bashTffea00\nTa5d6ffecho Ta5d6ff"Ta5d6ffBash: Hello $1Ta5d6ff"Ta5d6ff'Tb4b4b4)

Te6edf3osTff7b72.Td2a8ffchmodTb4b4b4(Te6edf3bash_pathTb4b4b4, Te6edf3osTff7b72.Td2a8ffstatTb4b4b4(Te6edf3bash_pathTb4b4b4)Tff7b72.Td2a8ffst_mode Tff7b72| Te6edf3statTff7b72.Td2a8ffS_IEXECTb4b4b4)

T8b949e# 2. Perl Cog

Te6edf3perl_path Tff7b72= Te6edf3cogs_dir Tff7b72/ Ta5d6ff"Ta5d6ffperl_helloTa5d6ff"

Te6edf3perl_pathTff7b72.Td2a8ffwrite_textTb4b4b4(Ta5d6ff'Ta5d6ff#!/usr/bin/perlTffea00\nTa5d6ffprint Ta5d6ff"Ta5d6ffPerl: Hello $ARGV[0]Tffea00\\Ta5d6ffnTa5d6ff"Ta5d6ff;Ta5d6ff'Tb4b4b4)

Te6edf3osTff7b72.Td2a8ffchmodTb4b4b4(Te6edf3perl_pathTb4b4b4, Te6edf3osTff7b72.Td2a8ffstatTb4b4b4(Te6edf3perl_pathTb4b4b4)Tff7b72.Td2a8ffst_mode Tff7b72| Te6edf3statTff7b72.Td2a8ffS_IEXECTb4b4b4)

T8b949e# 3. C Cog

Te6edf3c_bin Tff7b72= Tff7b72None

Tff7b72if Te6edf3shutilTff7b72.Td2a8ffwhichTb4b4b4(Ta5d6ff"Ta5d6ffgccTa5d6ff"Tb4b4b4)Tb4b4b4:

Te6edf3c_src Tff7b72= Te6edf3temp_path Tff7b72/ Ta5d6ff"Ta5d6ffhello.cTa5d6ff"

Te6edf3c_srcTff7b72.Td2a8ffwrite_textTb4b4b4(Ta5d6ff"""

Ta5d6ff #include <stdio.h>

Ta5d6ff int main(int argc, char *argv[]) Ta5d6ff{

Ta5d6ff if (argc > 1) Ta5d6ff{

Ta5d6ff printf(Ta5d6ff"Ta5d6ffC: Hello Tffd700%sTffea00\\Ta5d6ffnTa5d6ff"Ta5d6ff, argv[1]);

Ta5d6ff }

Ta5d6ff return 0;

Ta5d6ff }

Ta5d6ff Ta5d6ff"""Tb4b4b4)

Te6edf3c_bin Tff7b72= Te6edf3cogs_dir Tff7b72/ Ta5d6ff"Ta5d6ffc_helloTa5d6ff"

Te6edf3subprocessTff7b72.Td2a8ffrunTb4b4b4(Tb4b4b4[Ta5d6ff"Ta5d6ffgccTa5d6ff"Tb4b4b4, Tffa657strTb4b4b4(Te6edf3c_srcTb4b4b4)Tb4b4b4, Ta5d6ff"Ta5d6ff-oTa5d6ff"Tb4b4b4, Tffa657strTb4b4b4(Te6edf3c_binTb4b4b4)Tb4b4b4]Tb4b4b4, Te6edf3checkTff7b72=Tff7b72TrueTb4b4b4)

T8b949e# os.chmod is usually set by gcc, but let's be sure

Te6edf3osTff7b72.Td2a8ffchmodTb4b4b4(Te6edf3c_binTb4b4b4, Te6edf3osTff7b72.Td2a8ffstatTb4b4b4(Te6edf3c_binTb4b4b4)Tff7b72.Td2a8ffst_mode Tff7b72| Te6edf3statTff7b72.Td2a8ffS_IEXECTb4b4b4)

T8b949e# 4. Go Cog

Te6edf3go_bin Tff7b72= Tff7b72None

Tff7b72if Te6edf3shutilTff7b72.Td2a8ffwhichTb4b4b4(Ta5d6ff"Ta5d6ffgoTa5d6ff"Tb4b4b4)Tb4b4b4:

Te6edf3go_src Tff7b72= Te6edf3temp_path Tff7b72/ Ta5d6ff"Ta5d6ffhello.goTa5d6ff"

Te6edf3go_srcTff7b72.Td2a8ffwrite_textTb4b4b4(Ta5d6ff"""

Ta5d6ff package main

Ta5d6ff import (

Ta5d6ff Ta5d6ff"Ta5d6fffmtTa5d6ff"

Ta5d6ff Ta5d6ff"Ta5d6ffosTa5d6ff"

Ta5d6ff )

Ta5d6ff func main() Ta5d6ff{

Ta5d6ff if len(os.Args) > 1 Ta5d6ff{

Ta5d6ff fmt.Printf(Ta5d6ff"Ta5d6ffGo: Hello Tffd700%sTffea00\\Ta5d6ffnTa5d6ff"Ta5d6ff, os.Args[1])

Ta5d6ff }

Ta5d6ff }

Ta5d6ff Ta5d6ff"""Tb4b4b4)

Te6edf3go_bin Tff7b72= Te6edf3cogs_dir Tff7b72/ Ta5d6ff"Ta5d6ffgo_helloTa5d6ff"

T8b949e# Compile with CGO_ENABLED=0 for a static binary (easier for sandbox)

Te6edf3env Tff7b72= Te6edf3osTff7b72.Td2a8ffenvironTff7b72.Td2a8ffcopyTb4b4b4(Tb4b4b4)

Te6edf3envTb4b4b4[Ta5d6ff"Ta5d6ffCGO_ENABLEDTa5d6ff"Tb4b4b4] Tff7b72= Ta5d6ff"Ta5d6ff0Ta5d6ff"

Te6edf3subprocessTff7b72.Td2a8ffrunTb4b4b4(

Tb4b4b4[Ta5d6ff"Ta5d6ffgoTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ffbuildTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff-oTa5d6ff"Tb4b4b4, Tffa657strTb4b4b4(Te6edf3go_binTb4b4b4)Tb4b4b4, Tffa657strTb4b4b4(Te6edf3go_srcTb4b4b4)Tb4b4b4]Tb4b4b4,

Te6edf3envTff7b72=Te6edf3envTb4b4b4,

Te6edf3checkTff7b72=Tff7b72TrueTb4b4b4,

Tb4b4b4)

Tff7b72yield Te6edf3temp_path

Tff7b72def Td2a8fftest_multilang_cogs_executionTb4b4b4(Te6edf3realistic_cogs_setupTb4b4b4)Tb4b4b4:

T8b949e"""Test that cogs in different languages execute correctly without sandbox."""

Te6edf3config Tff7b72= Te6edf3BotConfigTb4b4b4(

Te6edf3nameTff7b72=Ta5d6ff"Ta5d6ffTestBotTa5d6ff"Tb4b4b4,

Te6edf3test_modeTff7b72=Tff7b72TrueTb4b4b4,

Te6edf3external_cogs_enabledTff7b72=Tff7b72TrueTb4b4b4,

Te6edf3external_cogs_sandbox_enabledTff7b72=Tff7b72FalseTb4b4b4,

Te6edf3config_pathTff7b72=Tffa657strTb4b4b4(Te6edf3realistic_cogs_setupTb4b4b4)Tb4b4b4,

Te6edf3storage_pathTff7b72=Tffa657strTb4b4b4(Te6edf3realistic_cogs_setup Tff7b72/ Ta5d6ff"Ta5d6ffstorageTa5d6ff"Tb4b4b4)Tb4b4b4,

Tb4b4b4)

Te6edf3bot Tff7b72= Te6edf3LXMFBotTb4b4b4(Tff7b72*Tff7b72*Te6edf3configTff7b72.Td2a8ff__dict__Tb4b4b4)

Te6edf3botTff7b72.Td2a8ffconfig_path Tff7b72= Tffa657strTb4b4b4(Te6edf3realistic_cogs_setupTb4b4b4)

Te6edf3load_cogs_from_directoryTb4b4b4(Te6edf3botTb4b4b4)

Te6edf3languages Tff7b72= Tb4b4b4{

Ta5d6ff"Ta5d6ffbash_helloTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffBash: Hello test_senderTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffperl_helloTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffPerl: Hello test_senderTa5d6ff"Tb4b4b4,

Tb4b4b4}

Tff7b72if Te6edf3shutilTff7b72.Td2a8ffwhichTb4b4b4(Ta5d6ff"Ta5d6ffgccTa5d6ff"Tb4b4b4)Tb4b4b4:

Te6edf3languagesTb4b4b4[Ta5d6ff"Ta5d6ffc_helloTa5d6ff"Tb4b4b4] Tff7b72= Ta5d6ff"Ta5d6ffC: Hello test_senderTa5d6ff"

Tff7b72if Te6edf3shutilTff7b72.Td2a8ffwhichTb4b4b4(Ta5d6ff"Ta5d6ffgoTa5d6ff"Tb4b4b4)Tb4b4b4:

Te6edf3languagesTb4b4b4[Ta5d6ff"Ta5d6ffgo_helloTa5d6ff"Tb4b4b4] Tff7b72= Ta5d6ff"Ta5d6ffGo: Hello test_senderTa5d6ff"

Tff7b72for Te6edf3cmd_nameTb4b4b4, Te6edf3expected_output Tff7b72in Te6edf3languagesTff7b72.Td2a8ffitemsTb4b4b4(Tb4b4b4)Tb4b4b4:

Tff7b72assert Te6edf3cmd_name Tff7b72in Te6edf3botTff7b72.Td2a8ffcommands

Te6edf3msg Tff7b72= Te6edf3MagicMockTb4b4b4(Tb4b4b4)

Te6edf3msgTff7b72.Td2a8ffsender Tff7b72= Ta5d6ff"Ta5d6fftest_senderTa5d6ff"

Te6edf3msgTff7b72.Td2a8ffcontent Tff7b72= Ta5d6fffTa5d6ff"Ta5d6ff/Tffd700{Te6edf3cmd_nameTffd700}Ta5d6ff"

Te6edf3msgTff7b72.Td2a8ffargs Tff7b72= Tb4b4b4[Tb4b4b4]

Te6edf3botTff7b72.Td2a8ffcommandsTb4b4b4[Te6edf3cmd_nameTb4b4b4]Tff7b72.Td2a8ffcallbackTb4b4b4(Te6edf3msgTb4b4b4)

Te6edf3msgTff7b72.Td2a8ffreplyTff7b72.Td2a8ffassert_called_withTb4b4b4(Te6edf3expected_outputTb4b4b4)

Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffskipifTb4b4b4(

Tff7b72not Te6edf3is_bwrap_functionalTb4b4b4(Tb4b4b4)Tb4b4b4,

Te6edf3reasonTff7b72=Ta5d6ff"Ta5d6ffbwrap is not functional in this environmentTa5d6ff"Tb4b4b4,

Tb4b4b4)

Tff7b72def Td2a8fftest_bwrap_sandbox_isolationTb4b4b4(Te6edf3realistic_cogs_setupTb4b4b4)Tb4b4b4:

T8b949e"""Test that bwrap sandbox actually isolates the process."""

T8b949e# Create a script that tries to read a file outside the sandbox

Te6edf3secret_file Tff7b72= Te6edf3realistic_cogs_setup Tff7b72/ Ta5d6ff"Ta5d6ffhost_secret.txtTa5d6ff"

Te6edf3secret_fileTff7b72.Td2a8ffwrite_textTb4b4b4(Ta5d6ff"Ta5d6ffHOST_SECRET_DATATa5d6ff"Tb4b4b4)

Te6edf3cogs_dir Tff7b72= Te6edf3realistic_cogs_setup Tff7b72/ Ta5d6ff"Ta5d6ffcogsTa5d6ff"

Te6edf3leak_script Tff7b72= Te6edf3cogs_dir Tff7b72/ Ta5d6ff"Ta5d6ffleak_testTa5d6ff"

T8b949e# Try to cat a file that isn't bound in bwrap

Te6edf3leak_scriptTff7b72.Td2a8ffwrite_textTb4b4b4(Ta5d6fffTa5d6ff"Ta5d6ff#!/bin/bashTffea00\nTa5d6ffcat Tffd700{Te6edf3secret_fileTffd700}Ta5d6ff 2>&1Ta5d6ff"Tb4b4b4)

Te6edf3osTff7b72.Td2a8ffchmodTb4b4b4(Te6edf3leak_scriptTb4b4b4, Te6edf3osTff7b72.Td2a8ffstatTb4b4b4(Te6edf3leak_scriptTb4b4b4)Tff7b72.Td2a8ffst_mode Tff7b72| Te6edf3statTff7b72.Td2a8ffS_IEXECTb4b4b4)

Te6edf3config Tff7b72= Te6edf3BotConfigTb4b4b4(

Te6edf3nameTff7b72=Ta5d6ff"Ta5d6ffTestBotTa5d6ff"Tb4b4b4,

Te6edf3test_modeTff7b72=Tff7b72TrueTb4b4b4,

Te6edf3external_cogs_enabledTff7b72=Tff7b72TrueTb4b4b4,

Te6edf3external_cogs_sandbox_enabledTff7b72=Tff7b72TrueTb4b4b4,

Te6edf3external_cogs_sandbox_typeTff7b72=Ta5d6ff"Ta5d6ffbwrapTa5d6ff"Tb4b4b4,

Te6edf3config_pathTff7b72=Tffa657strTb4b4b4(Te6edf3realistic_cogs_setupTb4b4b4)Tb4b4b4,

Te6edf3storage_pathTff7b72=Tffa657strTb4b4b4(Te6edf3realistic_cogs_setup Tff7b72/ Ta5d6ff"Ta5d6ffstorageTa5d6ff"Tb4b4b4)Tb4b4b4,

Tb4b4b4)

Te6edf3bot Tff7b72= Te6edf3LXMFBotTb4b4b4(Tff7b72*Tff7b72*Te6edf3configTff7b72.Td2a8ff__dict__Tb4b4b4)

Te6edf3botTff7b72.Td2a8ffconfig_path Tff7b72= Tffa657strTb4b4b4(Te6edf3realistic_cogs_setupTb4b4b4)

Te6edf3load_cogs_from_directoryTb4b4b4(Te6edf3botTb4b4b4)

Te6edf3msg Tff7b72= Te6edf3MagicMockTb4b4b4(Tb4b4b4)

Te6edf3msgTff7b72.Td2a8ffsender Tff7b72= Ta5d6ff"Ta5d6fftest_senderTa5d6ff"

Te6edf3botTff7b72.Td2a8ffcommandsTb4b4b4[Ta5d6ff"Ta5d6ffleak_testTa5d6ff"Tb4b4b4]Tff7b72.Td2a8ffcallbackTb4b4b4(Te6edf3msgTb4b4b4)

T8b949e# It should fail to read the file

Te6edf3argsTb4b4b4, Te6edf3_ Tff7b72= Te6edf3msgTff7b72.Td2a8ffreplyTff7b72.Td2a8ffcall_args

Te6edf3output Tff7b72= Te6edf3argsTb4b4b4[T79c0ff0Tb4b4b4]

T8b949e# The handler replies with "Error executing command: ..." on non-zero exit

Tff7b72assert Ta5d6ff"Ta5d6ffError executing commandTa5d6ff" Tff7b72in Te6edf3output

Tff7b72assert Ta5d6ff"Ta5d6ffHOST_SECRET_DATATa5d6ff" Tff7b72not Tff7b72in Te6edf3output