bvandeusen
712aec60c1
The on-disk-version test hardcoded '1.0.0' and broke on the 1.1.0 bump. Compare against agent.AGENT_VERSION so future bumps don't require touching the test. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
78 lines
2.2 KiB
Python
78 lines
2.2 KiB
Python
"""Pure-function tests for install.sh.j2 rendering and agent.py parsing."""
|
|
import subprocess
|
|
from pathlib import Path
|
|
|
|
from jinja2 import Environment, FileSystemLoader
|
|
|
|
from plugins.host_agent.routes import _agent_version, AGENT_SOURCE_PATH
|
|
|
|
|
|
TEMPLATE_DIR = Path(__file__).resolve().parents[3] / "plugins" / "host_agent" / "templates"
|
|
|
|
|
|
def _render(**overrides) -> str:
|
|
env = Environment(loader=FileSystemLoader(str(TEMPLATE_DIR)))
|
|
defaults = dict(
|
|
url="https://r.example",
|
|
token="tok-abc",
|
|
agent_version="1.0.0",
|
|
host_name="testhost",
|
|
host_address="10.0.0.1",
|
|
)
|
|
defaults.update(overrides)
|
|
return env.get_template("install.sh.j2").render(**defaults)
|
|
|
|
|
|
def test_render_contains_token_and_url():
|
|
out = _render()
|
|
assert "tok-abc" in out
|
|
assert "https://r.example" in out
|
|
assert "testhost" in out
|
|
|
|
|
|
def test_render_contains_hardening_directives():
|
|
out = _render()
|
|
for needle in (
|
|
"NoNewPrivileges=yes",
|
|
"ProtectSystem=strict",
|
|
"ProtectHome=yes",
|
|
"PrivateTmp=yes",
|
|
"ReadOnlyPaths=/proc /sys",
|
|
):
|
|
assert needle in out, f"missing {needle}"
|
|
|
|
|
|
def test_render_has_uninstall_branch():
|
|
out = _render()
|
|
assert "--uninstall" in out
|
|
assert "systemctl disable --now steward-agent.service" in out
|
|
|
|
|
|
def test_render_has_systemctl_enable():
|
|
out = _render()
|
|
assert "systemctl enable --now steward-agent.service" in out
|
|
|
|
|
|
def test_render_uses_agent_py_url():
|
|
out = _render()
|
|
assert "/plugins/host_agent/agent.py" in out
|
|
|
|
|
|
def test_rendered_script_passes_sh_n(tmp_path):
|
|
out = _render()
|
|
script = tmp_path / "install.sh"
|
|
script.write_text(out)
|
|
result = subprocess.run(
|
|
["sh", "-n", str(script)], capture_output=True, text=True
|
|
)
|
|
assert result.returncode == 0, f"sh -n failed: {result.stderr}"
|
|
|
|
|
|
def test_agent_version_parses_on_disk_agent():
|
|
# Version-agnostic: the parsed value must match the agent module's constant,
|
|
# so a future AGENT_VERSION bump doesn't require touching this test.
|
|
from plugins.host_agent import agent
|
|
assert AGENT_SOURCE_PATH.exists()
|
|
v = _agent_version()
|
|
assert v == agent.AGENT_VERSION
|