jason.woltje
068d868a99
Unclaimed files left in the canonical checkout. Inventory: canonical-cleanup-inventory.md (commit-as-evidence groups). detect-secrets scan clean on 2026-11-02: hits are sha256 pins, git object ids, test sentinels already in tracked tests and unit-file lines.
167 lines
6.1 KiB
Plaintext
167 lines
6.1 KiB
Plaintext
TAP version 13
|
|
# Subtest: row 280: an occupied TCP port is attempted, refused, and retried with our sshd
|
|
ok 1 - row 280: an occupied TCP port is attempted, refused, and retried with our sshd
|
|
---
|
|
duration_ms: 86.151547
|
|
type: 'test'
|
|
...
|
|
# Subtest: row 280: every injected picker sample is unprivileged and outside the ephemeral range
|
|
ok 2 - row 280: every injected picker sample is unprivileged and outside the ephemeral range
|
|
---
|
|
duration_ms: 0.329414
|
|
type: 'test'
|
|
...
|
|
# Subtest: the executor tests need sshd, ssh, ssh-agent, ssh-add, ssh-keygen and setpriv: a missing one fails, never skips
|
|
ok 3 - the executor tests need sshd, ssh, ssh-agent, ssh-add, ssh-keygen and setpriv: a missing one fails, never skips
|
|
---
|
|
duration_ms: 0.104943
|
|
type: 'test'
|
|
...
|
|
# Subtest: T3: organization.set, limits.set and instances.set refuse hosts, and the writer never runs
|
|
ok 4 - T3: organization.set, limits.set and instances.set refuse hosts, and the writer never runs
|
|
---
|
|
duration_ms: 19.079087
|
|
type: 'test'
|
|
...
|
|
# Subtest: T4: the value check takes one unencrypted ed25519 key and nothing else
|
|
ok 5 - T4: the value check takes one unencrypted ed25519 key and nothing else
|
|
---
|
|
duration_ms: 204.738434
|
|
type: 'test'
|
|
...
|
|
# Subtest: T5 to T8: registry, grant, argv shape and allowlist refusals
|
|
ok 6 - T5 to T8: registry, grant, argv shape and allowlist refusals
|
|
---
|
|
duration_ms: 474.999353
|
|
type: 'test'
|
|
...
|
|
# Subtest: T9: under 1.7 every call needs a decision bound to its host, argv and stdin, spent once
|
|
ok 7 - T9: under 1.7 every call needs a decision bound to its host, argv and stdin, spent once
|
|
---
|
|
duration_ms: 270.007505
|
|
type: 'test'
|
|
...
|
|
# Subtest: T10, T11: argv reaches sudo unchanged after sudo -n --
|
|
ok 8 - T10, T11: argv reaches sudo unchanged after sudo -n --
|
|
---
|
|
duration_ms: 252.582152
|
|
type: 'test'
|
|
...
|
|
# Subtest: T12, T13: exit code passes through, the timeout kills the group, output is capped
|
|
ok 9 - T12, T13: exit code passes through, the timeout kills the group, output is capped
|
|
---
|
|
duration_ms: 1485.963829
|
|
type: 'test'
|
|
...
|
|
# Subtest: T14: a host key not in the registry refuses and nothing runs
|
|
ok 10 - T14: a host key not in the registry refuses and nothing runs
|
|
---
|
|
duration_ms: 174.718427
|
|
type: 'test'
|
|
...
|
|
# Subtest: G18: hosts.check with a wrong pin refuses host-key-mismatch and runs nothing on the host
|
|
ok 11 - G18: hosts.check with a wrong pin refuses host-key-mismatch and runs nothing on the host
|
|
---
|
|
duration_ms: 303.042693
|
|
type: 'test'
|
|
...
|
|
# Subtest: N3: a remote exit 255 that prints the pin refusal text is the command result, and an ssh failure keeps its message
|
|
ok 12 - N3: a remote exit 255 that prints the pin refusal text is the command result, and an ssh failure keeps its message
|
|
---
|
|
duration_ms: 277.663332
|
|
type: 'test'
|
|
...
|
|
# Subtest: T15: ssh reads no config file and no user known_hosts
|
|
ok 13 - T15: ssh reads no config file and no user known_hosts
|
|
---
|
|
duration_ms: 247.281356
|
|
type: 'test'
|
|
...
|
|
# Subtest: T16, T17: key material in output or stdin refuses credential-leak, and no event holds it
|
|
ok 14 - T16, T17: key material in output or stdin refuses credential-leak, and no event holds it
|
|
---
|
|
duration_ms: 595.214467
|
|
type: 'test'
|
|
...
|
|
# Subtest: T18, T19, T20: one call at a time, no key in any argv or env, and nothing left after
|
|
ok 15 - T18, T19, T20: one call at a time, no key in any argv or env, and nothing left after
|
|
---
|
|
duration_ms: 4620.126264
|
|
type: 'test'
|
|
...
|
|
# Subtest: T21: revoke kills the call in flight, and the next call refuses
|
|
ok 16 - T21: revoke kills the call in flight, and the next call refuses
|
|
---
|
|
duration_ms: 258.610402
|
|
type: 'test'
|
|
...
|
|
# Subtest: T22: events carry host, address, user and argv in clear, and sizes and hashes only
|
|
ok 17 - T22: events carry host, address, user and argv in clear, and sizes and hashes only
|
|
---
|
|
duration_ms: 253.776672
|
|
type: 'test'
|
|
...
|
|
# Subtest: T24: no literal gitea and vikunja kind list outside vocabulary.mjs, and the credential use sites are known
|
|
ok 18 - T24: no literal gitea and vikunja kind list outside vocabulary.mjs, and the credential use sites are known
|
|
---
|
|
duration_ms: 15.691952
|
|
type: 'test'
|
|
...
|
|
# Subtest: T25: no role definition lists host.sudo while it is a hard wait
|
|
ok 19 - T25: no role definition lists host.sudo while it is a hard wait
|
|
---
|
|
duration_ms: 0.461518
|
|
type: 'test'
|
|
...
|
|
# Subtest: T27: the bus child dying takes ssh and ssh-agent with it
|
|
ok 20 - T27: the bus child dying takes ssh and ssh-agent with it
|
|
---
|
|
duration_ms: 307.80143
|
|
type: 'test'
|
|
...
|
|
# Subtest: T27: ssh-add -t drops the key from an agent the test keeps alive
|
|
ok 21 - T27: ssh-add -t drops the key from an agent the test keeps alive
|
|
---
|
|
duration_ms: 3551.484277
|
|
type: 'test'
|
|
...
|
|
# Subtest: N2: a hung ssh-add is killed at its limit or on abort, and nothing is left running
|
|
ok 22 - N2: a hung ssh-add is killed at its limit or on abort, and nothing is left running
|
|
---
|
|
duration_ms: 426.260178
|
|
type: 'test'
|
|
...
|
|
# Subtest: T27: the start sweep keeps a live bus dir and kills only a matching live process
|
|
ok 23 - T27: the start sweep keeps a live bus dir and kills only a matching live process
|
|
---
|
|
duration_ms: 26.561686
|
|
type: 'test'
|
|
...
|
|
# Subtest: T27: the bus start sweeps <configDir>/secrets/run before it listens, and a stray entry stops the start
|
|
ok 24 - T27: the bus start sweeps <configDir>/secrets/run before it listens, and a stray entry stops the start
|
|
---
|
|
duration_ms: 47.516637
|
|
type: 'test'
|
|
...
|
|
# Subtest: M3: host.run refuses host-not-granted unless the grant record has an approved, spent host grant
|
|
ok 25 - M3: host.run refuses host-not-granted unless the grant record has an approved, spent host grant
|
|
---
|
|
duration_ms: 133.666418
|
|
type: 'test'
|
|
...
|
|
# Subtest: M3: a host_grants record gives Credentials a store reference at start, and a restart reads its key
|
|
ok 26 - M3: a host_grants record gives Credentials a store reference at start, and a restart reads its key
|
|
---
|
|
duration_ms: 103.897578
|
|
type: 'test'
|
|
...
|
|
1..26
|
|
# tests 26
|
|
# suites 0
|
|
# pass 26
|
|
# fail 0
|
|
# cancelled 0
|
|
# skipped 0
|
|
# todo 0
|
|
# duration_ms 14241.109868
|