tests/tests/drs-push-rejects

   1 #!/bin/bash
   2 set -e
   3 . tests/lib
   4
   5 t-drs
   6 t-git-none
   7
   8 p=pari-extra
   9 t-worktree drs
  10
  11 cd $p
  12
  13 reporefs () {
  14         (set -e
  15         if test -d $tmp/git/$p.git; then
  16                 cd $tmp/git/$p.git
  17                 git show-ref
  18         fi)
  19 }
  20
  21 mustfail () {
  22         local wantmsg="$1"; shift
  23         reporefs >$tmp/show-refs.pre-push
  24         set +e
  25         git push origin "$@" 2>&1 |tee $tmp/mustfail.txt
  26         ps="${PIPESTATUS[*]}"
  27         set -e
  28         case $ps in
  29         "0 0")  fail "push unexpectedly succeeded: $*" ;;
  30         *" 0")  ;;
  31         *)      fail "tee failed"  ;;
  32         esac
  33         if ! fgrep "$wantmsg" $tmp/mustfail.txt >/dev/null; then
  34                 fail "error message not found"
  35         fi
  36         reporefs >$tmp/show-refs.post-push
  37         diff $tmp/show-refs.{pre,post}-push
  38 }
  39
  40 mustsucceed () {
  41         reporefs >$tmp/show-refs.pre-push
  42         git push origin "$@"
  43         reporefs >$tmp/show-refs.post-push
  44         if diff $tmp/show-refs.{pre,post}-push >$tmp/show-refs.diff; then
  45                 fail "no refs updated"
  46         fi
  47 }
  48
  49 prep () {
  50         local suite=$1
  51         local csuite=$2
  52         cp $tmp/masters/* $tmp/.
  53         tag_signer='-u Senatus'
  54         tag_message="$p release $version for $suite ($csuite) [dgit]"
  55         tag_name=debian/$version
  56         push_spec1="HEAD:refs/dgit/$csuite"
  57         push_spec2="refs/tags/$tag_name"
  58         push_spec="$push_spec1 $push_spec2"
  59 }
  60 mktag () {
  61         git tag -f $tag_signer -m "$tag_message" $tag_name "$@"
  62 }
  63
  64 mkdir $tmp/masters
  65 cp $tmp/d[dm].* $tmp/masters
  66
  67 version=3-2_dummy1
  68
  69 prep unstable sid
  70 tag_signer='-a'
  71 mktag
  72 mustfail 'missing signature' $push_spec
  73
  74 prep unstable sid
  75 tag_message='something'
  76 mktag
  77 mustfail 'tag message not in expected format' $push_spec
  78
  79 prep unstable sid
  80 mktag
  81 mustfail 'sid != sponge' HEAD:refs/dgit/sponge $push_spec2
  82
  83 # fixme test --sig-policy-url string
  84 # fixme cannot test   reject "signature is not of type 00!";
  85
  86 prep unstable sid
  87 mktag
  88 mustfail 'push is missing tag ref update' $push_spec1
  89 mustfail 'push is missing head ref update' $push_spec2
  90 mustfail 'pushing unexpected ref' $push_spec HEAD:refs/wombat
  91 mustfail 'pushing multiple heads' $push_spec HEAD:refs/dgit/wombat
  92 mustfail 'pushing multiple tags' $push_spec HEAD:refs/tags/debian/wombat
  93
  94 prep unstable sid
  95 mktag
  96 cp $tmp/dm.gpg $tmp/dd.gpg
  97 mustfail 'key not found in keyrings' $push_spec
  98
  99 prep unstable sid
 100 mustsucceed $push_spec # succeeds
 101 mktag
 102 mustfail 'not replacing previously-pushed version' $push_spec
 103
 104 prep_dm_mangle () {
 105         prep unstable sid
 106         perl -i.bak -pe '
 107                 next unless m/^fingerprint: 3A82860837A0CD32/i../^$/;
 108         ' -e "$1" $tmp/dm.txt
 109         tag_signer='-u Populus'
 110         mktag
 111 }
 112
 113 git checkout v2
 114 version=3-2_dummy2
 115
 116 prep_dm_mangle 's/allow:/asponge:/i'
 117 mustfail 'missing Allow section in permission' $push_spec
 118
 119 prep_dm_mangle 's/\bpari-extra\b/sponge/i'
 120 mustfail "package $p not allowed for key" $push_spec
 121
 122 prep_dm_mangle 'y/0-9/5-90-4/ if m/^fingerprint:/i'
 123 mustfail "not in permissions list although in keyring" $push_spec
 124
 125 prep_dm_mangle ''
 126 mustsucceed $push_spec # succeeds
 127
 128 echo ok.