Node / ReticulumProjects / MeshChatX.git / files / vendor / rns_filesync / tests / smoke / test_packaging_docker.py

Displaying Raw • Download

T8b949e"""Smoke checks for packaging and docker assets."""

Tff7b72from T7ee787__future__ Tff7b72import Te6edf3annotations

Tff7b72from T7ee787pathlib Tff7b72import Te6edf3Path

Tff7b72import T7ee787pytest

Te6edf3pytestmark Tff7b72= Tb4b4b4[Te6edf3pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffsmokeTb4b4b4, Te6edf3pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffunitTb4b4b4]

Te6edf3ROOT Tff7b72= Te6edf3PathTb4b4b4(Tff7b72__file__Tb4b4b4)Tff7b72.Td2a8ffresolveTb4b4b4(Tb4b4b4)Tff7b72.Td2a8ffparentsTb4b4b4[T79c0ff2Tb4b4b4]

Tf0883e@pytestTff7b72.Td2a8ffmarkTff7b72.Td2a8ffparametrizeTb4b4b4(

Ta5d6ff"Ta5d6ffrelTa5d6ff"Tb4b4b4,

Tb4b4b4[

Ta5d6ff"Ta5d6ffpackaging/systemd/rns-filesync.serviceTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffpackaging/systemd/rns-filesync.user.serviceTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffpackaging/openrc/rns-filesyncTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffpackaging/dinit/rns-filesyncTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffpackaging/runit/rns-filesync/runTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffpackaging/sysusers.d/rns-filesync.confTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffpackaging/tmpfiles.d/rns-filesync.confTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffdocker/DockerfileTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffdocker/Dockerfile.buildTa5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffdocker/README.mdTa5d6ff"Tb4b4b4,

Tb4b4b4]Tb4b4b4,

Tb4b4b4)

Tff7b72def Td2a8fftest_packaging_and_docker_files_existTb4b4b4(Te6edf3relTb4b4b4)Tb4b4b4:

Te6edf3path Tff7b72= Te6edf3ROOT Tff7b72/ Te6edf3rel

Tff7b72assert Te6edf3pathTff7b72.Td2a8ffis_fileTb4b4b4(Tb4b4b4)Tb4b4b4, Te6edf3rel

Tff7b72def Td2a8fftest_systemd_unit_is_non_root_and_hardenedTb4b4b4(Tb4b4b4)Tb4b4b4:

Te6edf3text Tff7b72= Tb4b4b4(Te6edf3ROOT Tff7b72/ Ta5d6ff"Ta5d6ffpackaging/systemd/rns-filesync.serviceTa5d6ff"Tb4b4b4)Tff7b72.Td2a8ffread_textTb4b4b4(Te6edf3encodingTff7b72=Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4)

Tff7b72assert Ta5d6ff"Ta5d6ffUser=rns-filesyncTa5d6ff" Tff7b72in Te6edf3text

Tff7b72assert Ta5d6ff"Ta5d6ffNoNewPrivileges=trueTa5d6ff" Tff7b72in Te6edf3text

Tff7b72assert Ta5d6ff"Ta5d6ffProtectSystem=strictTa5d6ff" Tff7b72in Te6edf3text

Tff7b72assert Ta5d6ff"Ta5d6ff--no-replTa5d6ff" Tff7b72in Te6edf3text

Tff7b72assert Ta5d6ff"Ta5d6ffUser=rootTa5d6ff" Tff7b72not Tff7b72in Te6edf3text

Tff7b72def Td2a8fftest_dockerfile_is_rootless_multistageTb4b4b4(Tb4b4b4)Tb4b4b4:

Te6edf3text Tff7b72= Tb4b4b4(Te6edf3ROOT Tff7b72/ Ta5d6ff"Ta5d6ffdocker/DockerfileTa5d6ff"Tb4b4b4)Tff7b72.Td2a8ffread_textTb4b4b4(Te6edf3encodingTff7b72=Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4)

Tff7b72assert Ta5d6ff"Ta5d6ffAS builderTa5d6ff" Tff7b72in Te6edf3text

Tff7b72assert Ta5d6ff"Ta5d6ffAS runtimeTa5d6ff" Tff7b72in Te6edf3text

Tff7b72assert Ta5d6ff"Ta5d6ffUSER filesyncTa5d6ff" Tff7b72in Te6edf3text

Tff7b72assert Ta5d6ff"Ta5d6ffadduserTa5d6ff" Tff7b72in Te6edf3text

Tff7b72assert Ta5d6ff"Ta5d6ffUSER rootTa5d6ff" Tff7b72not Tff7b72in Te6edf3textTff7b72.Td2a8ffsplitTb4b4b4(Ta5d6ff"Ta5d6ffAS runtimeTa5d6ff"Tb4b4b4, T79c0ff1Tb4b4b4)Tb4b4b4[Tff7b72-T79c0ff1Tb4b4b4]