e987f24903
Все проверки выполнены успешно
CI / test (push) Successful in 2m32s
Docker / Build and publish worker image (push) Successful in 18m17s
- reconnect safely after token rotation and retry leased results - reject malformed tasks and remove production cluster debug mutation - validate environment files and require immutable container images BREAKING CHANGE: Docker install, deploy, and Compose now require an immutable repository@sha256 image reference.
56 строки
1.4 KiB
Go
56 строки
1.4 KiB
Go
package installer
|
|
|
|
import (
|
|
"crypto/ed25519"
|
|
"crypto/rand"
|
|
"net"
|
|
"strings"
|
|
"testing"
|
|
|
|
"golang.org/x/crypto/ssh"
|
|
)
|
|
|
|
func TestFingerprintHostKeyCallback(t *testing.T) {
|
|
_, privateKey, err := ed25519.GenerateKey(rand.Reader)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
publicKey, err := ssh.NewPublicKey(privateKey.Public())
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
callback, err := hostKeyCallback(DeployOptions{HostKeyFingerprint: ssh.FingerprintSHA256(publicKey)})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := callback("host", &net.TCPAddr{}, publicKey); err != nil {
|
|
t.Fatalf("matching fingerprint rejected: %v", err)
|
|
}
|
|
callback, err = hostKeyCallback(DeployOptions{HostKeyFingerprint: "SHA256:wrong"})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if err := callback("host", &net.TCPAddr{}, publicKey); err == nil {
|
|
t.Fatal("mismatched fingerprint accepted")
|
|
}
|
|
}
|
|
|
|
func TestKnownHostsMissingFile(t *testing.T) {
|
|
if _, err := hostKeyCallback(DeployOptions{KnownHostsFile: t.TempDir() + "/missing"}); err == nil {
|
|
t.Fatal("missing known_hosts file accepted")
|
|
}
|
|
}
|
|
|
|
func TestDeployRejectsMutableDockerImageBeforeConnecting(t *testing.T) {
|
|
err := Deploy(DeployOptions{
|
|
Host: "unreachable.example.test",
|
|
User: "deploy",
|
|
Token: "token",
|
|
Docker: true,
|
|
Image: "reg.rsxx.ru/rsmon/rsmon-worker:latest",
|
|
})
|
|
if err == nil || !strings.Contains(err.Error(), "immutable") {
|
|
t.Fatalf("Deploy() error = %v, want immutable image error", err)
|
|
}
|
|
}
|