Privatae
77 lines
3.0 KiB
Go
77 lines
3.0 KiB
Go
package main
|
|
|
|
import (
|
|
"os"
|
|
"os/exec"
|
|
"path/filepath"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
// install.ps1 has no Windows runner here, so its -Pair shape is read from the
|
|
// file: the code is checked before anything is downloaded, reaches `pair -`
|
|
// on standard input and never an argument, exit 3 is success, and the
|
|
// install with no flag still ends the way it did.
|
|
func TestInstallPs1PairShape(t *testing.T) {
|
|
raw, err := os.ReadFile(filepath.Join("..", "deploy", "install.ps1"))
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
s := string(raw)
|
|
for _, want := range []string{
|
|
"param([switch]$Networked, [switch]$Shared, [switch]$Personal, [switch]$JustMe, [string]$Pair,",
|
|
"$Pair | & $exe pair -",
|
|
"elseif ($rc -eq 3)",
|
|
"Start-ScheduledTask -TaskName 'PrivataeBastion'",
|
|
"Restart-Service -Name 'PrivataeBastion'",
|
|
// The whole machine by default, through one UAC prompt; the code
|
|
// reaches the elevated step in a file, and the owner by SID.
|
|
"Start-Process -FilePath 'powershell.exe' -Verb RunAs",
|
|
"[IO.File]::WriteAllText($pf, $Pair)",
|
|
"& $exe approvals-owner --sid $owner",
|
|
"if (-not $elevatedDone) {",
|
|
} {
|
|
if !strings.Contains(s, want) {
|
|
t.Errorf("install.ps1 lacks %q", want)
|
|
}
|
|
}
|
|
for _, bad := range []string{"pair $Pair", "pair -- $Pair", "-ArgumentList $Pair", "Write-Host $Pair", "$Pair\"", "'$Pair'",
|
|
"-Pair '$Pair'", "-Pair $Pair"} {
|
|
if strings.Contains(s, bad) {
|
|
t.Errorf("install.ps1 must never put the code in an argument or the output: %q", bad)
|
|
}
|
|
}
|
|
check, fetch := strings.Index(s, "StartsWith('skp_')"), strings.Index(s, `Write-Host "Fetching manifest..."`)
|
|
if check < 0 || fetch < 0 || check > fetch {
|
|
t.Error("the pairing code must be checked before the manifest is fetched")
|
|
}
|
|
}
|
|
|
|
// The -Pair block itself, run by pwsh against a stand-in bastion
|
|
// (testdata/install_ps1_pair.ps1). Skipped where pwsh is not installed.
|
|
func TestInstallPs1PairBlockRunsUnderPwsh(t *testing.T) {
|
|
pwsh, err := exec.LookPath("pwsh")
|
|
if err != nil {
|
|
t.Skip("pwsh is not installed: install.ps1's -Pair block is checked only by TestInstallPs1PairShape here")
|
|
}
|
|
out, err := exec.Command(pwsh, "-NoProfile", "-NonInteractive", "-File",
|
|
filepath.Join("testdata", "install_ps1_pair.ps1"), filepath.Join("..", "deploy", "install.ps1")).CombinedOutput()
|
|
if err != nil || !strings.HasPrefix(strings.TrimSpace(string(out)), "ok:") {
|
|
t.Fatalf("%v\n%s", err, out)
|
|
}
|
|
}
|
|
|
|
// The elevation block, run by pwsh with Windows' prompt stood in
|
|
// (testdata/install_ps1_elevate.ps1). Skipped where pwsh is not installed.
|
|
func TestInstallPs1ElevatesForTheWholeMachineUnderPwsh(t *testing.T) {
|
|
pwsh, err := exec.LookPath("pwsh")
|
|
if err != nil {
|
|
t.Skip("pwsh is not installed: install.ps1's elevation is checked only by TestInstallPs1PairShape here")
|
|
}
|
|
out, err := exec.Command(pwsh, "-NoProfile", "-NonInteractive", "-File",
|
|
filepath.Join("testdata", "install_ps1_elevate.ps1"), filepath.Join("..", "deploy", "install.ps1")).CombinedOutput()
|
|
if err != nil || !strings.HasPrefix(strings.TrimSpace(string(out)), "ok:") {
|
|
t.Fatalf("%v\n%s", err, out)
|
|
}
|
|
}
|