tests/pytests/functional/states/test_ssh_auth.py - master - githubmirror/salt

tests/pytests/functional/states/test_ssh_auth.py

64 строки2 KB

Daniel A. Wozniak

Fix Python 3.12 CI: pip/virtualenv, deb SourcesList, nacl, and test harness

04 май 2026, 13:37

04 май 2026, 13:37c2ae29f

import logging
import pathlib

import pytest

import salt.states.ssh_auth as ssh_auth_state
import salt.utils.files

log = logging.getLogger(__name__)


@pytest.fixture
def configure_loader_modules(modules, minion_opts):
    loader = {"__salt__": modules, "__opts__": minion_opts, "__env__": "base"}
    return {ssh_auth_state: loader}


@pytest.fixture(scope="module")
def system_user():
    with pytest.helpers.create_account() as system_account:
        yield system_account


@pytest.mark.skip_if_not_root
@pytest.mark.destructive_test
@pytest.mark.slow_test
def test_ssh_auth_config(tmp_path, system_user, state_tree):
    """
    test running ssh_auth state when
    different config is set. Ensure
    it does not edit the default config.
    """
    userdetails = system_user.info
    user_ssh_dir = pathlib.Path(userdetails.home, ".ssh")
    # Use a modern pubkey: Python 3.12+ validates OpenSSH key blobs with
    # base64.b64decode(..., validate=True); the legacy ssh-dss sample used here
    # fails that check ("Excess padding"), so ssh.set_auth_key never wrote a file.
    test_pubkey = (
        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINEIiNXlqUlqiVg69lJkzMfyBWAansuwqW6bw7zox7kR "
        "root@domain"
    )
    ret = ssh_auth_state.manage(
        name="test",
        user=system_user.username,
        ssh_keys=[test_pubkey],
    )
    with salt.utils.files.fopen(user_ssh_dir / "authorized_keys") as fp:
        pre_data = fp.read()
    file_contents = test_pubkey
    new_auth_file = tmp_path / "authorized_keys3"
    with pytest.helpers.temp_file("authorized", file_contents, state_tree):
        ssh_auth_state.manage(
            name="test",
            user=system_user.username,
            source="salt://authorized",
            config=str(new_auth_file),
            ssh_keys=[""],
        )
    with salt.utils.files.fopen(user_ssh_dir / "authorized_keys") as fp:
        post_data = fp.read()
    assert pre_data == post_data
    with salt.utils.files.fopen(new_auth_file) as fp:
        data = fp.read().strip()
    assert data == file_contents