1 .include "../../got-version.mk"
2 
3 REGRESS_TARGETS=test_repo_read test_repo_read_group \
4 	test_repo_read_denied_user test_repo_read_denied_group \
5 	test_repo_read_bad_user test_repo_read_bad_group \
6 	test_repo_write test_repo_write_empty test_request_bad
7 NOOBJ=Yes
8 
9 .PHONY: ensure_root prepare_test_repo check_test_repo start_gotd
10 
11 GOTD_TEST_ROOT=/tmp
12 GOTD_DEVUSER?=gotdev
13 GOTD_DEVUSER_HOME!=userinfo $(GOTD_DEVUSER) | awk '/^dir/ {print $$2}'
14 GOTD_TEST_REPO!?=mktemp -d "$(GOTD_TEST_ROOT)/gotd-test-repo-XXXXXXXXX"
15 GOTD_TEST_REPO_URL=ssh://${GOTD_DEVUSER}@127.0.0.1/test-repo
16 
17 GOTD_TEST_USER?=${DOAS_USER}
18 .if empty(GOTD_TEST_USER)
19 GOTD_TEST_USER=${SUDO_USER}
20 .endif
21 .if empty(GOTD_TEST_USER)
22 GOTD_TEST_USER=${USER}
23 .endif
24 GOTD_TEST_USER_HOME!=userinfo $(GOTD_TEST_USER) | awk '/^dir/ {print $$2}'
25 
26 # gotd.conf parameters
27 GOTD_USER?=got
28 GOTD_SOCK=${GOTD_DEVUSER_HOME}/gotd.sock
29 
30 .if "${GOT_RELEASE}" == "Yes"
31 PREFIX ?= /usr/local
32 BINDIR ?= ${PREFIX}/bin
33 .else
34 PREFIX ?= ${GOTD_TEST_USER_HOME}
35 BINDIR ?= ${PREFIX}/bin
36 .endif
37 
38 GOTD_START_CMD?=$(BINDIR)/gotd -vv -f $(PWD)/gotd.conf
39 GOTD_STOP_CMD?=$(BINDIR)/gotctl -f $(GOTD_SOCK) stop
40 GOTD_TRAP=trap "$(GOTD_STOP_CMD)" HUP INT QUIT PIPE TERM
41 
42 GOTD_TEST_ENV=GOTD_TEST_ROOT=$(GOTD_TEST_ROOT) \
43 	GOTD_TEST_REPO_URL=$(GOTD_TEST_REPO_URL) \
44 	GOTD_TEST_REPO=$(GOTD_TEST_REPO) \
45 	GOTD_SOCK=$(GOTD_SOCK) \
46 	GOTD_DEVUSER=$(GOTD_DEVUSER) \
47 	HOME=$(GOTD_TEST_USER_HOME) \
48 	PATH=$(GOTD_TEST_USER_HOME)/bin:$(PATH)
49 
50 ensure_root:
51 	@if [[ `id -u` -ne 0 ]]; then \
52 		echo gotd test suite must be started by root >&2; \
53 		false; \
54 	fi ; \
55 	if [[ "$(GOTD_TEST_USER)" = "root" ]]; then \
56 		echo GOTD_TEST_USER must be a non-root user >&2; \
57 		false; \
58 	fi
59 
60 start_gotd_ro: ensure_root
61 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
62 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
63 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
64 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
65 	@echo '    permit ro $(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
66 	@echo "}" >> $(PWD)/gotd.conf
67 	@$(GOTD_TRAP); $(GOTD_START_CMD)
68 	@$(GOTD_TRAP); sleep .5
69 
70 start_gotd_ro_group: ensure_root
71 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
72 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
73 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
74 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
75 	@echo '    permit ro :$(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
76 	@echo "}" >> $(PWD)/gotd.conf
77 	@$(GOTD_TRAP); $(GOTD_START_CMD)
78 	@$(GOTD_TRAP); sleep .5
79 
80 # try a permit rule followed by a deny rule; last matched rule wins
81 start_gotd_ro_denied_user: ensure_root
82 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
83 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
84 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
85 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
86 	@echo '    permit ro $(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
87 	@echo '    deny $(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
88 	@echo "}" >> $(PWD)/gotd.conf
89 	@$(GOTD_TRAP); $(GOTD_START_CMD)
90 	@$(GOTD_TRAP); sleep .5
91 
92 # try a permit rule followed by a deny rule; last matched rule wins
93 start_gotd_ro_denied_group: ensure_root
94 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
95 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
96 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
97 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
98 	@echo '    permit ro $(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
99 	@echo '    deny :$(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
100 	@echo "}" >> $(PWD)/gotd.conf
101 	@$(GOTD_TRAP); $(GOTD_START_CMD)
102 	@$(GOTD_TRAP); sleep .5
103 
104 # $GOTD_DEVUSER should not equal $GOTD_USER
105 start_gotd_ro_bad_user: ensure_root
106 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
107 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
108 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
109 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
110 	@echo '    permit ro $(GOTD_USER)' >> $(PWD)/gotd.conf
111 	@echo "}" >> $(PWD)/gotd.conf
112 	@$(GOTD_TRAP); $(GOTD_START_CMD)
113 	@$(GOTD_TRAP); sleep .5
114 
115 # $GOTD_DEVUSER should not be in group wheel
116 start_gotd_ro_bad_group: ensure_root
117 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
118 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
119 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
120 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
121 	@echo '    permit ro :wheel' >> $(PWD)/gotd.conf
122 	@echo "}" >> $(PWD)/gotd.conf
123 	@$(GOTD_TRAP); $(GOTD_START_CMD)
124 	@$(GOTD_TRAP); sleep .5
125 
126 start_gotd_rw: ensure_root
127 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
128 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
129 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
130 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
131 	@echo '    permit rw $(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
132 	@echo "}" >> $(PWD)/gotd.conf
133 	@$(GOTD_TRAP); $(GOTD_START_CMD)
134 	@$(GOTD_TRAP); sleep .5
135 
136 prepare_test_repo: ensure_root
137 	@chown ${GOTD_USER} "${GOTD_TEST_REPO}"
138 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./prepare_test_repo.sh'
139 
140 prepare_test_repo_empty: ensure_root
141 	@chown ${GOTD_USER} "${GOTD_TEST_REPO}"
142 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./prepare_test_repo.sh 1'
143 
144 test_repo_read: prepare_test_repo start_gotd_ro
145 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
146 		'env $(GOTD_TEST_ENV) sh ./repo_read.sh'
147 	@$(GOTD_STOP_CMD) 2>/dev/null
148 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
149 
150 test_repo_read_group: prepare_test_repo start_gotd_ro_group
151 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
152 		'env $(GOTD_TEST_ENV) sh ./repo_read.sh'
153 	@$(GOTD_STOP_CMD) 2>/dev/null
154 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
155 
156 test_repo_read_denied_user: prepare_test_repo start_gotd_ro_denied_user
157 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
158 		'env $(GOTD_TEST_ENV) sh ./repo_read_access_denied.sh'
159 	@$(GOTD_STOP_CMD) 2>/dev/null
160 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
161 
162 test_repo_read_denied_group: prepare_test_repo start_gotd_ro_denied_group
163 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
164 		'env $(GOTD_TEST_ENV) sh ./repo_read_access_denied.sh'
165 	@$(GOTD_STOP_CMD) 2>/dev/null
166 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
167 
168 test_repo_read_bad_user: prepare_test_repo start_gotd_ro_bad_user
169 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
170 		'env $(GOTD_TEST_ENV) sh ./repo_read_access_denied.sh'
171 	@$(GOTD_STOP_CMD) 2>/dev/null
172 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
173 
174 test_repo_read_bad_group: prepare_test_repo start_gotd_ro_bad_group
175 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
176 		'env $(GOTD_TEST_ENV) sh ./repo_read_access_denied.sh'
177 	@$(GOTD_STOP_CMD) 2>/dev/null
178 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
179 
180 test_repo_write: prepare_test_repo start_gotd_rw
181 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
182 		'env $(GOTD_TEST_ENV) sh ./repo_write.sh'
183 	@$(GOTD_STOP_CMD) 2>/dev/null
184 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
185 
186 test_repo_write_empty: prepare_test_repo_empty start_gotd_rw
187 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
188 		'env $(GOTD_TEST_ENV) sh ./repo_write_empty.sh'
189 	@$(GOTD_STOP_CMD) 2>/dev/null
190 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
191 	
192 test_request_bad: prepare_test_repo_empty start_gotd_ro
193 	@-$(GOTD_TRAP); su -m ${GOTD_TEST_USER} -c \
194 		'env $(GOTD_TEST_ENV) sh ./request_bad.sh'
195 	@$(GOTD_STOP_CMD) 2>/dev/null
196 
197 .include <bsd.regress.mk>