test(config_spec): verify /etc/ssh/ssh_known_hosts
This commit is contained in:
parent
0c064b15bf
commit
06ef24b8e1
|
@ -9,6 +9,11 @@ root_group =
|
||||||
'root'
|
'root'
|
||||||
end
|
end
|
||||||
|
|
||||||
|
github_known_host = 'github.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGm[...]'
|
||||||
|
gitlab_known_host_re = /gitlab.com,[0-9a-f.:,]* ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABA/
|
||||||
|
minion_rsa_known_host = 'minion.id,alias.of.minion.id ssh-rsa [...]'
|
||||||
|
minion_ed25519_known_host = 'minion.id,alias.of.minion.id ssh-ed25519 [...]'
|
||||||
|
|
||||||
control 'openssh configuration' do
|
control 'openssh configuration' do
|
||||||
title 'should match desired lines'
|
title 'should match desired lines'
|
||||||
|
|
||||||
|
@ -35,4 +40,15 @@ control 'openssh configuration' do
|
||||||
its('content') { should include ' HashKnownHosts yes' }
|
its('content') { should include ' HashKnownHosts yes' }
|
||||||
its('content') { should include ' SendEnv LANG LC_*' }
|
its('content') { should include ' SendEnv LANG LC_*' }
|
||||||
end
|
end
|
||||||
|
|
||||||
|
describe file('/etc/ssh/ssh_known_hosts') do
|
||||||
|
it { should be_file }
|
||||||
|
its('mode') { should cmp '0644' }
|
||||||
|
it { should be_owned_by 'root' }
|
||||||
|
it { should be_grouped_into 'root' }
|
||||||
|
its('content') { should include github_known_host }
|
||||||
|
its('content') { should match(gitlab_known_host_re) }
|
||||||
|
its('content') { should include minion_rsa_known_host }
|
||||||
|
its('content') { should include minion_ed25519_known_host }
|
||||||
|
end
|
||||||
end
|
end
|
||||||
|
|
Loading…
Reference in New Issue