54 lines
1.8 KiB
Python
54 lines
1.8 KiB
Python
import os
|
|
import sys
|
|
import unittest
|
|
from pathlib import Path
|
|
from unittest.mock import Mock, patch
|
|
|
|
sys.path.insert(0, str(Path(__file__).resolve().parents[1] / "lib"))
|
|
|
|
import secure_boot
|
|
|
|
|
|
class BootArtifactsMayChangeTests(unittest.TestCase):
|
|
def test_detects_kernel_and_bootloader_packages(self):
|
|
for name in ("linux", "linux-cachyos", "linux-zen", "grub", "shim-signed"):
|
|
with self.subTest(name=name):
|
|
self.assertTrue(secure_boot.boot_artifacts_may_change([name]))
|
|
|
|
def test_ignores_unrelated_packages(self):
|
|
self.assertFalse(
|
|
secure_boot.boot_artifacts_may_change(["firefox", "mesa", "curl"])
|
|
)
|
|
|
|
|
|
class PrepareSecureBootTests(unittest.TestCase):
|
|
@patch.object(secure_boot, "SIGNER_PATH")
|
|
def test_skips_when_signer_is_not_configured(self, signer_path):
|
|
signer_path.is_file.return_value = False
|
|
result = secure_boot.prepare_secure_boot(["linux-cachyos"])
|
|
self.assertTrue(result.success)
|
|
self.assertFalse(result.configured)
|
|
|
|
@patch.object(secure_boot, "_run")
|
|
@patch.object(os, "access", return_value=True)
|
|
@patch.object(os, "geteuid", return_value=0)
|
|
@patch.object(secure_boot, "SIGNER_PATH")
|
|
def test_mounts_and_validates_esp(
|
|
self, signer_path, _geteuid, _access, run_mock
|
|
):
|
|
signer_path.is_file.return_value = True
|
|
signer_path.__str__ = Mock(return_value="/usr/local/sbin/signer")
|
|
run_mock.return_value = Mock(returncode=0, stdout="", stderr="")
|
|
|
|
result = secure_boot.prepare_secure_boot(["linux-cachyos"])
|
|
|
|
self.assertTrue(result.success)
|
|
self.assertTrue(result.configured)
|
|
run_mock.assert_called_once_with(
|
|
["/usr/local/sbin/signer", "--prepare"]
|
|
)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|