You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
40 lines
1.1 KiB
Python
40 lines
1.1 KiB
Python
import subprocess
|
|
from pathlib import Path
|
|
import time
|
|
|
|
from command import Command
|
|
from random_service import random_service
|
|
|
|
|
|
def test_blocking_secret(systemd_vaultd: Path, command: Command, tempdir: Path) -> None:
|
|
secrets_dir = tempdir / "secrets"
|
|
sock = tempdir / "sock"
|
|
command.run([str(systemd_vaultd), "-secrets", str(secrets_dir), "-sock", str(sock)])
|
|
|
|
while not sock.exists():
|
|
time.sleep(0.1)
|
|
|
|
service = random_service(secrets_dir)
|
|
|
|
proc = command.run(
|
|
[
|
|
"systemd-run",
|
|
"-u",
|
|
service.name,
|
|
"--collect",
|
|
"--user",
|
|
"-p",
|
|
f"LoadCredential={service.secret_name}:{sock}",
|
|
"--wait",
|
|
"--pipe",
|
|
"cat",
|
|
"${CREDENTIALS_DIRECTORY}/" + service.secret_name,
|
|
],
|
|
stdout=subprocess.PIPE,
|
|
)
|
|
time.sleep(0.1)
|
|
assert proc.poll() is None, "service should block for secret"
|
|
service.secret_path.write_text("foo")
|
|
assert proc.stdout is not None and proc.stdout.read() == "foo"
|
|
assert proc.wait() == 0
|