94 lines
3.2 KiB
Python
94 lines
3.2 KiB
Python
"""Test Check Core trust."""
|
|
# pylint: disable=import-error,protected-access
|
|
from unittest.mock import AsyncMock, patch
|
|
|
|
from supervisor.const import CoreState
|
|
from supervisor.coresys import CoreSys
|
|
from supervisor.exceptions import CodeNotaryError, CodeNotaryUntrusted
|
|
from supervisor.resolution.checks.core_trust import CheckCoreTrust
|
|
from supervisor.resolution.const import IssueType, UnhealthyReason
|
|
|
|
|
|
async def test_base(coresys: CoreSys):
|
|
"""Test check basics."""
|
|
core_trust = CheckCoreTrust(coresys)
|
|
assert core_trust.slug == "core_trust"
|
|
assert core_trust.enabled
|
|
|
|
|
|
async def test_check(coresys: CoreSys):
|
|
"""Test check."""
|
|
core_trust = CheckCoreTrust(coresys)
|
|
coresys.core.state = CoreState.RUNNING
|
|
|
|
assert len(coresys.resolution.issues) == 0
|
|
|
|
coresys.homeassistant.core.check_trust = AsyncMock(side_effect=CodeNotaryError)
|
|
await core_trust.run_check()
|
|
assert coresys.homeassistant.core.check_trust.called
|
|
|
|
coresys.homeassistant.core.check_trust = AsyncMock(return_value=None)
|
|
await core_trust.run_check()
|
|
assert coresys.homeassistant.core.check_trust.called
|
|
|
|
assert len(coresys.resolution.issues) == 0
|
|
|
|
coresys.homeassistant.core.check_trust = AsyncMock(side_effect=CodeNotaryUntrusted)
|
|
await core_trust.run_check()
|
|
assert coresys.homeassistant.core.check_trust.called
|
|
|
|
assert len(coresys.resolution.issues) == 1
|
|
assert coresys.resolution.issues[-1].type == IssueType.TRUST
|
|
|
|
assert UnhealthyReason.UNTRUSTED in coresys.resolution.unhealthy
|
|
|
|
|
|
async def test_approve(coresys: CoreSys):
|
|
"""Test check."""
|
|
core_trust = CheckCoreTrust(coresys)
|
|
coresys.core.state = CoreState.RUNNING
|
|
|
|
coresys.homeassistant.core.check_trust = AsyncMock(side_effect=CodeNotaryUntrusted)
|
|
assert await core_trust.approve_check()
|
|
|
|
coresys.homeassistant.core.check_trust = AsyncMock(return_value=None)
|
|
assert not await core_trust.approve_check()
|
|
|
|
|
|
async def test_with_global_disable(coresys: CoreSys, caplog):
|
|
"""Test when pwned is globally disabled."""
|
|
coresys.security.content_trust = False
|
|
core_trust = CheckCoreTrust(coresys)
|
|
coresys.core.state = CoreState.RUNNING
|
|
|
|
assert len(coresys.resolution.issues) == 0
|
|
coresys.security.verify_own_content = AsyncMock(side_effect=CodeNotaryUntrusted)
|
|
await core_trust.run_check()
|
|
assert not coresys.security.verify_own_content.called
|
|
assert "Skipping core_trust, content_trust is globally disabled" in caplog.text
|
|
|
|
|
|
async def test_did_run(coresys: CoreSys):
|
|
"""Test that the check ran as expected."""
|
|
core_trust = CheckCoreTrust(coresys)
|
|
should_run = core_trust.states
|
|
should_not_run = [state for state in CoreState if state not in should_run]
|
|
assert len(should_run) != 0
|
|
assert len(should_not_run) != 0
|
|
|
|
with patch(
|
|
"supervisor.resolution.checks.core_trust.CheckCoreTrust.run_check",
|
|
return_value=None,
|
|
) as check:
|
|
for state in should_run:
|
|
coresys.core.state = state
|
|
await core_trust()
|
|
check.assert_called_once()
|
|
check.reset_mock()
|
|
|
|
for state in should_not_run:
|
|
coresys.core.state = state
|
|
await core_trust()
|
|
check.assert_not_called()
|
|
check.reset_mock()
|