1 .include "../../got-version.mk"
2 
3 REGRESS_TARGETS=test_repo_read test_repo_read_group \
4 	test_repo_read_denied_user test_repo_read_denied_group \
5 	test_repo_read_bad_user test_repo_read_bad_group \
6 	test_repo_write test_repo_write_empty test_request_bad
7 NOOBJ=Yes
8 CLEANFILES=gotd.conf
9 
10 .PHONY: ensure_root prepare_test_repo check_test_repo start_gotd
11 
12 GOTD_TEST_ROOT=/tmp
13 GOTD_DEVUSER?=gotdev
14 GOTD_DEVUSER_HOME!=userinfo $(GOTD_DEVUSER) | awk '/^dir/ {print $$2}'
15 GOTD_TEST_REPO!?=mktemp -d "$(GOTD_TEST_ROOT)/gotd-test-repo-XXXXXXXXX"
16 GOTD_TEST_REPO_URL=ssh://${GOTD_DEVUSER}@127.0.0.1/test-repo
17 
18 GOTD_TEST_USER?=${DOAS_USER}
19 .if empty(GOTD_TEST_USER)
20 GOTD_TEST_USER=${SUDO_USER}
21 .endif
22 .if empty(GOTD_TEST_USER)
23 GOTD_TEST_USER=${USER}
24 .endif
25 GOTD_TEST_USER_HOME!=userinfo $(GOTD_TEST_USER) | awk '/^dir/ {print $$2}'
26 
27 # gotd.conf parameters
28 GOTD_USER?=got
29 GOTD_SOCK=${GOTD_DEVUSER_HOME}/gotd.sock
30 
31 .if "${GOT_RELEASE}" == "Yes"
32 PREFIX ?= /usr/local
33 BINDIR ?= ${PREFIX}/bin
34 .else
35 PREFIX ?= ${GOTD_TEST_USER_HOME}
36 BINDIR ?= ${PREFIX}/bin
37 .endif
38 
39 GOTD_START_CMD?=$(BINDIR)/gotd -vv -f $(PWD)/gotd.conf
40 GOTD_STOP_CMD?=$(BINDIR)/gotctl -f $(GOTD_SOCK) stop
41 GOTD_TRAP=trap "$(GOTD_STOP_CMD)" HUP INT QUIT PIPE TERM
42 
43 GOTD_TEST_ENV=GOTD_TEST_ROOT=$(GOTD_TEST_ROOT) \
44 	GOTD_TEST_REPO_URL=$(GOTD_TEST_REPO_URL) \
45 	GOTD_TEST_REPO=$(GOTD_TEST_REPO) \
46 	GOTD_SOCK=$(GOTD_SOCK) \
47 	GOTD_DEVUSER=$(GOTD_DEVUSER) \
48 	HOME=$(GOTD_TEST_USER_HOME) \
49 	PATH=$(GOTD_TEST_USER_HOME)/bin:$(PATH)
50 
51 ensure_root:
52 	@if [[ `id -u` -ne 0 ]]; then \
53 		echo gotd test suite must be started by root >&2; \
54 		false; \
55 	fi ; \
56 	if [[ "$(GOTD_TEST_USER)" = "root" ]]; then \
57 		echo GOTD_TEST_USER must be a non-root user >&2; \
58 		false; \
59 	fi
60 
61 start_gotd_ro: ensure_root
62 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
63 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
64 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
65 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
66 	@echo '    permit ro $(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
67 	@echo "}" >> $(PWD)/gotd.conf
68 	@$(GOTD_TRAP); $(GOTD_START_CMD)
69 	@$(GOTD_TRAP); sleep .5
70 
71 start_gotd_ro_group: ensure_root
72 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
73 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
74 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
75 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
76 	@echo '    permit ro :$(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
77 	@echo "}" >> $(PWD)/gotd.conf
78 	@$(GOTD_TRAP); $(GOTD_START_CMD)
79 	@$(GOTD_TRAP); sleep .5
80 
81 # try a permit rule followed by a deny rule; last matched rule wins
82 start_gotd_ro_denied_user: ensure_root
83 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
84 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
85 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
86 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
87 	@echo '    permit ro $(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
88 	@echo '    deny $(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
89 	@echo "}" >> $(PWD)/gotd.conf
90 	@$(GOTD_TRAP); $(GOTD_START_CMD)
91 	@$(GOTD_TRAP); sleep .5
92 
93 # try a permit rule followed by a deny rule; last matched rule wins
94 start_gotd_ro_denied_group: ensure_root
95 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
96 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
97 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
98 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
99 	@echo '    permit ro $(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
100 	@echo '    deny :$(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
101 	@echo "}" >> $(PWD)/gotd.conf
102 	@$(GOTD_TRAP); $(GOTD_START_CMD)
103 	@$(GOTD_TRAP); sleep .5
104 
105 # $GOTD_DEVUSER should not equal $GOTD_USER
106 start_gotd_ro_bad_user: ensure_root
107 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
108 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
109 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
110 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
111 	@echo '    permit ro $(GOTD_USER)' >> $(PWD)/gotd.conf
112 	@echo "}" >> $(PWD)/gotd.conf
113 	@$(GOTD_TRAP); $(GOTD_START_CMD)
114 	@$(GOTD_TRAP); sleep .5
115 
116 # $GOTD_DEVUSER should not be in group wheel
117 start_gotd_ro_bad_group: ensure_root
118 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
119 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
120 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
121 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
122 	@echo '    permit ro :wheel' >> $(PWD)/gotd.conf
123 	@echo "}" >> $(PWD)/gotd.conf
124 	@$(GOTD_TRAP); $(GOTD_START_CMD)
125 	@$(GOTD_TRAP); sleep .5
126 
127 start_gotd_rw: ensure_root
128 	@echo 'listen on "$(GOTD_SOCK)"' > $(PWD)/gotd.conf
129 	@echo "user $(GOTD_USER)" >> $(PWD)/gotd.conf
130 	@echo 'repository "test-repo" {' >> $(PWD)/gotd.conf
131 	@echo '    path "$(GOTD_TEST_REPO)"' >> $(PWD)/gotd.conf
132 	@echo '    permit rw $(GOTD_DEVUSER)' >> $(PWD)/gotd.conf
133 	@echo "}" >> $(PWD)/gotd.conf
134 	@$(GOTD_TRAP); $(GOTD_START_CMD)
135 	@$(GOTD_TRAP); sleep .5
136 
137 prepare_test_repo: ensure_root
138 	@chown ${GOTD_USER} "${GOTD_TEST_REPO}"
139 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./prepare_test_repo.sh'
140 
141 prepare_test_repo_empty: ensure_root
142 	@chown ${GOTD_USER} "${GOTD_TEST_REPO}"
143 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./prepare_test_repo.sh 1'
144 
145 test_repo_read: prepare_test_repo start_gotd_ro
146 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
147 		'env $(GOTD_TEST_ENV) sh ./repo_read.sh'
148 	@$(GOTD_STOP_CMD) 2>/dev/null
149 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
150 
151 test_repo_read_group: prepare_test_repo start_gotd_ro_group
152 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
153 		'env $(GOTD_TEST_ENV) sh ./repo_read.sh'
154 	@$(GOTD_STOP_CMD) 2>/dev/null
155 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
156 
157 test_repo_read_denied_user: prepare_test_repo start_gotd_ro_denied_user
158 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
159 		'env $(GOTD_TEST_ENV) sh ./repo_read_access_denied.sh'
160 	@$(GOTD_STOP_CMD) 2>/dev/null
161 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
162 
163 test_repo_read_denied_group: prepare_test_repo start_gotd_ro_denied_group
164 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
165 		'env $(GOTD_TEST_ENV) sh ./repo_read_access_denied.sh'
166 	@$(GOTD_STOP_CMD) 2>/dev/null
167 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
168 
169 test_repo_read_bad_user: prepare_test_repo start_gotd_ro_bad_user
170 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
171 		'env $(GOTD_TEST_ENV) sh ./repo_read_access_denied.sh'
172 	@$(GOTD_STOP_CMD) 2>/dev/null
173 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
174 
175 test_repo_read_bad_group: prepare_test_repo start_gotd_ro_bad_group
176 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
177 		'env $(GOTD_TEST_ENV) sh ./repo_read_access_denied.sh'
178 	@$(GOTD_STOP_CMD) 2>/dev/null
179 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
180 
181 test_repo_write: prepare_test_repo start_gotd_rw
182 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
183 		'env $(GOTD_TEST_ENV) sh ./repo_write.sh'
184 	@$(GOTD_STOP_CMD) 2>/dev/null
185 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
186 
187 test_repo_write_empty: prepare_test_repo_empty start_gotd_rw
188 	@-$(GOTD_TRAP); su ${GOTD_TEST_USER} -c \
189 		'env $(GOTD_TEST_ENV) sh ./repo_write_empty.sh'
190 	@$(GOTD_STOP_CMD) 2>/dev/null
191 	@su -m ${GOTD_USER} -c 'env $(GOTD_TEST_ENV) sh ./check_test_repo.sh'
192 	
193 test_request_bad: prepare_test_repo_empty start_gotd_ro
194 	@-$(GOTD_TRAP); su -m ${GOTD_TEST_USER} -c \
195 		'env $(GOTD_TEST_ENV) sh ./request_bad.sh'
196 	@$(GOTD_STOP_CMD) 2>/dev/null
197 
198 .include <bsd.regress.mk>