b38dea0597
Share Gaia assets and adapters, keep private profiles and development documents local, and update both public READMEs.
52 lines
2.1 KiB
Python
52 lines
2.1 KiB
Python
# SPDX-License-Identifier: MPL-2.0
|
|
import json
|
|
from pathlib import Path
|
|
import sys
|
|
import tempfile
|
|
import unittest
|
|
from unittest.mock import patch
|
|
sys.path.insert(0,str(Path(__file__).resolve().parents[1]/'tools'))
|
|
import persistent_state as state
|
|
|
|
|
|
class PersistentStateTests(unittest.TestCase):
|
|
def setUp(self):
|
|
self.temp=tempfile.TemporaryDirectory();self.addCleanup(self.temp.cleanup)
|
|
self.root=Path(self.temp.name)
|
|
self.identifier='2a29bca9-5fcb-48a1-a287-dc975f56b353'
|
|
self.image=self.root/(self.identifier+'.ext4')
|
|
with self.image.open('wb') as output:output.truncate(512*1024**2)
|
|
self.value={'schema':1,'device':'sargo','uuid':self.identifier,
|
|
'image':self.image.name,'bytes':512*1024**2,
|
|
'imageSha256':'a'*64,'systemImageSha256':'b'*64,
|
|
'filesystemCheckPassed':True}
|
|
self.path=self.root/'state.json'
|
|
|
|
def validate(self):
|
|
self.path.write_text(json.dumps(self.value))
|
|
with patch.object(state,'digest',return_value='a'*64):
|
|
return state.validate_manifest(self.path)
|
|
|
|
def test_valid_prepared_state(self):
|
|
self.assertEqual(self.validate()['uuid'],self.identifier)
|
|
|
|
def test_path_escape_and_shell_input_rejected(self):
|
|
for key,value in [('image','../../root.img'),('uuid','$(command)'),('systemImageSha256','; reboot')]:
|
|
old=self.value[key];self.value[key]=value
|
|
with self.assertRaises(ValueError):self.validate()
|
|
self.value[key]=old
|
|
|
|
def test_size_change_rejected(self):
|
|
self.image.write_bytes(b'changed')
|
|
with self.assertRaisesRegex(ValueError,'changed'):self.validate()
|
|
|
|
def test_symlink_rejected(self):
|
|
target=self.root/'other';self.image.rename(target);self.image.symlink_to(target)
|
|
with self.assertRaisesRegex(ValueError,'changed'):self.validate()
|
|
|
|
def test_missing_fs_check_rejected(self):
|
|
self.value['filesystemCheckPassed']=False
|
|
with self.assertRaisesRegex(ValueError,'verification'):self.validate()
|
|
|
|
|
|
if __name__=='__main__':unittest.main()
|