.github/workflows/command_shell_acceptance.yml - master - githubmirror/metasploit-framework

.github/workflows/command_shell_acceptance.yml
244 строки9 KB
adfoster-r7
Update pyenv versions
05 авг 2026, 17:27
05 авг 2026, 17:273463db8
name: Command Shell Acceptance

# Optional, enabling concurrency limits: https://docs.github.com/en/actions/using-jobs/using-concurrency
#concurrency:
#  group: ${{ github.ref }}-${{ github.workflow }}
#  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
permissions:
  actions: none
  checks: none
  contents: none
  deployments: none
  id-token: none
  issues: none
  discussions: none
  packages: none
  pages: none
  pull-requests: none
  repository-projects: none
  security-events: none
  statuses: none

on:
  workflow_dispatch:
    inputs:
      metasploitPayloadsCommit:
        description: 'metasploit-payloads branch you want to test'
        required: true
        default: 'master'
      mettleCommit:
        description: 'mettle branch you want to test'
        required: true
        default: 'master'
  push:
    branches-ignore:
      - gh-pages
      - metakitty
  pull_request:
    branches:
      - '*'
    paths:
      - 'metasploit-framework.gemspec'
      - 'Gemfile.lock'
      - 'data/templates/**'
      - 'modules/payloads/**'
      - 'lib/msf/core/payload/**'
      - 'lib/msf/core/handler/**'
      - 'lib/msf/core/post/**'
      - 'lib/msf/core/session/**'
      - 'lib/msf/base/sessions/**'
      - 'tools/dev/**'
      - 'test/modules/post/**'
      - 'spec/acceptance/**'
      - 'spec/support/acceptance/**'
      - 'spec/acceptance_spec_helper.rb'
      - '.github/**'
#   Example of running as a cron, to weed out flaky tests
#  schedule:
#    - cron: '*/15 * * * *'

jobs:
  # Run all test individually, note there is a separate final job for aggregating the test results
  test:
    strategy:
      fail-fast: false
      matrix:
        include:
          # Powershell
          - { command_shell: { name: powershell }, ruby: '3.4', os: windows-2022 }
          - { command_shell: { name: powershell }, ruby: '3.4', os: windows-2025 }

          # Linux
          - { command_shell: { name: linux }, ruby: '3.4', os: ubuntu-latest }

          # Python
          - { command_shell: { name: python }, ruby: '3.4', os: ubuntu-latest }

          # CMD
          - { command_shell: { name: cmd }, ruby: '3.4', os: windows-2022 }

          # TODO: Tests currently fail:
          # - { command_shell: { name: cmd }, ruby: '3.4', os: windows-2025 }

          # Python SSL
          - { command_shell: { name: python_ssl_2_6  }, ruby: '3.4', os: ubuntu-latest }
          - { command_shell: { name: python_ssl_2_7  }, ruby: '3.4', os: ubuntu-latest }
          - { command_shell: { name: python_ssl_3_4  }, ruby: '3.4', os: ubuntu-latest }
          - { command_shell: { name: python_ssl_3_13 }, ruby: '3.4', os: ubuntu-latest }

    runs-on: ${{ matrix.os }}

    timeout-minutes: 50

    env:
      RAILS_ENV: test
      HOST_RUNNER_IMAGE: ${{ matrix.os }}
      SESSION: 'command_shell/${{ matrix.command_shell.name }}'
      SESSION_RUNTIME_VERSION: ${{ matrix.command_shell.runtime_version }}
      BUNDLE_WITHOUT: "coverage development"

    name: ${{ matrix.command_shell.name }} ${{ matrix.command_shell.runtime_version }} ${{ matrix.os }}
    steps:
      - name: Install system dependencies (Linux)
        if: runner.os == 'Linux'
        run: sudo apt-get -y --no-install-recommends install libpcap-dev graphviz

      - uses: shivammathur/setup-php@fc14643b0a99ee9db10a3c025a33d76544fa3761
        if: ${{ matrix.command_shell.name == 'php' }}
        with:
          php-version: ${{ matrix.command_shell.runtime_version }}
          tools: none

      - name: Install system dependencies (Windows)
        shell: pwsh
        if: runner.os == 'Windows'
        run: |
          $ErrorActionPreference = 'Stop'
          # pcap dependencies
          [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
          Invoke-WebRequest -Uri 'https://www.winpcap.org/install/bin/WpdPack_4_1_2.zip' -OutFile 'C:\Windows\Temp\WpdPack_4_1_2.zip' -SkipCertificateCheck
          $expected = 'ea799cf2f26e4afb1892938070fd2b1ca37ce5cf75fec4349247df12b784edbd'
          $actual = (Get-FileHash 'C:\Windows\Temp\WpdPack_4_1_2.zip' -Algorithm SHA256).Hash.ToLower()
          if ($actual -ne $expected) { throw "WpdPack_4_1_2.zip SHA256 mismatch: expected $expected, got $actual" }

          choco install 7zip -y --no-progress
          if ($LASTEXITCODE -ne 0) { throw "choco install 7zip failed with exit code $LASTEXITCODE" }

          7z x "C:\Windows\Temp\WpdPack_4_1_2.zip" -o"C:\"
          if ($LASTEXITCODE -ne 0) { throw "7z extraction failed with exit code $LASTEXITCODE" }

      # The job checkout structure is:
      #  .
      #  └── metasploit-framework

      - name: Checkout metasploit-framework code
        uses: actions/checkout@v4
        with:
          path: metasploit-framework

      # https://github.com/orgs/community/discussions/26952
      - name: Support longpaths
        if: runner.os == 'Windows'
        run: git config --system core.longpaths true

      - name: Setup '${{ matrix.ruby }}' Ruby
        # Skip for now to ensure CI passes on Windows server 2025 powershell tests
        #env:
        #  BUNDLE_FORCE_RUBY_PLATFORM: true
        uses: ruby/setup-ruby@eaecf785f6a34567a6d97f686bbb7bccc1ac1e5c
        with:
          ruby-version: ${{ matrix.ruby }}
          bundler-cache: true
          working-directory: metasploit-framework
          cache-version: 5

      - name: Pull pyenv container image
        if: startsWith(matrix.command_shell.name, 'python_ssl')
        run: docker pull rapid7/msf-pyenv@sha256:596c78595c69847661a135890bfb7ed09b7cd3b39fb66699e075f7eea5dc0f09
        working-directory: metasploit-framework

      - name: Acceptance
        env:
          SPEC_HELPER_LOAD_METASPLOIT: false
          SPEC_OPTS: "--tag acceptance --require acceptance_spec_helper.rb --color --format documentation --format AllureRspec::RSpecFormatter"
        # Unix run command:
        #   SPEC_HELPER_LOAD_METASPLOIT=false bundle exec ./spec/acceptance
        # Windows cmd command:
        #   set SPEC_HELPER_LOAD_METASPLOIT=false
        #   bundle exec rspec .\spec\acceptance
        # Note: rspec retry is intentionally not used, as it can cause issues with allure's reporting
        # Additionally - flakey tests should be fixed or marked as flakey instead of silently retried
        run: |
          bundle exec rspec spec/acceptance/command_shell_spec.rb
        working-directory: metasploit-framework

      - name: Archive results
        if: always()
        uses: actions/upload-artifact@v4
        with:
          # Provide a unique artifact for each matrix os, otherwise race conditions can lead to corrupt zips
          name: raw-data-${{ matrix.command_shell.name }}-${{ matrix.command_shell.runtime_version }}-${{ matrix.os }}
          path: metasploit-framework/tmp/allure-raw-data

  # Generate a final report from the previous test results
  report:
    name: Generate report
    needs: test
    runs-on: ubuntu-latest
    if: always()

    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        if: always()

      - name: Install system dependencies (Linux)
        if: always()
        run: sudo apt-get -y --no-install-recommends install libpcap-dev graphviz

      # https://github.com/orgs/community/discussions/26952
      - name: Support longpaths
        if: runner.os == 'Windows'
        run: git config --system core.longpaths true

      - name: Setup Ruby
        if: always()
        env:
          BUNDLE_FORCE_RUBY_PLATFORM: true
        uses: ruby/setup-ruby@v1
        with:
          # use the default version from the .ruby-version file
          ruby-version: '.ruby-version'
          bundler-cache: true
          cache-version: 4

      - uses: actions/download-artifact@v4
        id: download
        if: always()
        with:
          # Note: Not specifying a name will download all artifacts from the previous workflow jobs
          path: raw-data

      - name: allure generate
        if: always()
        run: |
          export VERSION=2.22.1

          curl -o allure-$VERSION.tgz -Ls https://github.com/allure-framework/allure2/releases/download/$VERSION/allure-$VERSION.tgz
          tar -zxvf allure-$VERSION.tgz -C .

          ls -la ${{steps.download.outputs.download-path}}
          ./allure-$VERSION/bin/allure generate ${{steps.download.outputs.download-path}}/* -o ./allure-report

          find ${{steps.download.outputs.download-path}}
          bundle exec ruby tools/dev/report_generation/support_matrix/generate.rb --allure-data ${{steps.download.outputs.download-path}} > ./allure-report/support_matrix.html

      - name: archive results
        if: always()
        uses: actions/upload-artifact@v4
        with:
          name: final-report-${{ github.run_id }}
          path: |
            ./allure-report