jason.woltje
068d868a99
Unclaimed files left in the canonical checkout. Inventory: canonical-cleanup-inventory.md (commit-as-evidence groups). detect-secrets scan clean on 2026-11-02: hits are sha256 pins, git object ids, test sentinels already in tracked tests and unit-file lines.
167 lines
6.1 KiB
Plaintext
167 lines
6.1 KiB
Plaintext
TAP version 13
|
|
# Subtest: row 280: an occupied TCP port is attempted, refused, and retried with our sshd
|
|
ok 1 - row 280: an occupied TCP port is attempted, refused, and retried with our sshd
|
|
---
|
|
duration_ms: 86.179894
|
|
type: 'test'
|
|
...
|
|
# Subtest: row 280: every injected picker sample is unprivileged and outside the ephemeral range
|
|
ok 2 - row 280: every injected picker sample is unprivileged and outside the ephemeral range
|
|
---
|
|
duration_ms: 0.333574
|
|
type: 'test'
|
|
...
|
|
# Subtest: the executor tests need sshd, ssh, ssh-agent, ssh-add, ssh-keygen and setpriv: a missing one fails, never skips
|
|
ok 3 - the executor tests need sshd, ssh, ssh-agent, ssh-add, ssh-keygen and setpriv: a missing one fails, never skips
|
|
---
|
|
duration_ms: 0.108471
|
|
type: 'test'
|
|
...
|
|
# Subtest: T3: organization.set, limits.set and instances.set refuse hosts, and the writer never runs
|
|
ok 4 - T3: organization.set, limits.set and instances.set refuse hosts, and the writer never runs
|
|
---
|
|
duration_ms: 19.394124
|
|
type: 'test'
|
|
...
|
|
# Subtest: T4: the value check takes one unencrypted ed25519 key and nothing else
|
|
ok 5 - T4: the value check takes one unencrypted ed25519 key and nothing else
|
|
---
|
|
duration_ms: 151.256775
|
|
type: 'test'
|
|
...
|
|
# Subtest: T5 to T8: registry, grant, argv shape and allowlist refusals
|
|
ok 6 - T5 to T8: registry, grant, argv shape and allowlist refusals
|
|
---
|
|
duration_ms: 474.787071
|
|
type: 'test'
|
|
...
|
|
# Subtest: T9: under 1.7 every call needs a decision bound to its host, argv and stdin, spent once
|
|
ok 7 - T9: under 1.7 every call needs a decision bound to its host, argv and stdin, spent once
|
|
---
|
|
duration_ms: 278.509156
|
|
type: 'test'
|
|
...
|
|
# Subtest: T10, T11: argv reaches sudo unchanged after sudo -n --
|
|
ok 8 - T10, T11: argv reaches sudo unchanged after sudo -n --
|
|
---
|
|
duration_ms: 255.909433
|
|
type: 'test'
|
|
...
|
|
# Subtest: T12, T13: exit code passes through, the timeout kills the group, output is capped
|
|
ok 9 - T12, T13: exit code passes through, the timeout kills the group, output is capped
|
|
---
|
|
duration_ms: 1497.381124
|
|
type: 'test'
|
|
...
|
|
# Subtest: T14: a host key not in the registry refuses and nothing runs
|
|
ok 10 - T14: a host key not in the registry refuses and nothing runs
|
|
---
|
|
duration_ms: 169.265141
|
|
type: 'test'
|
|
...
|
|
# Subtest: G18: hosts.check with a wrong pin refuses host-key-mismatch and runs nothing on the host
|
|
ok 11 - G18: hosts.check with a wrong pin refuses host-key-mismatch and runs nothing on the host
|
|
---
|
|
duration_ms: 306.68629
|
|
type: 'test'
|
|
...
|
|
# Subtest: N3: a remote exit 255 that prints the pin refusal text is the command result, and an ssh failure keeps its message
|
|
ok 12 - N3: a remote exit 255 that prints the pin refusal text is the command result, and an ssh failure keeps its message
|
|
---
|
|
duration_ms: 277.89689
|
|
type: 'test'
|
|
...
|
|
# Subtest: T15: ssh reads no config file and no user known_hosts
|
|
ok 13 - T15: ssh reads no config file and no user known_hosts
|
|
---
|
|
duration_ms: 254.434576
|
|
type: 'test'
|
|
...
|
|
# Subtest: T16, T17: key material in output or stdin refuses credential-leak, and no event holds it
|
|
ok 14 - T16, T17: key material in output or stdin refuses credential-leak, and no event holds it
|
|
---
|
|
duration_ms: 599.148927
|
|
type: 'test'
|
|
...
|
|
# Subtest: T18, T19, T20: one call at a time, no key in any argv or env, and nothing left after
|
|
ok 15 - T18, T19, T20: one call at a time, no key in any argv or env, and nothing left after
|
|
---
|
|
duration_ms: 4624.755536
|
|
type: 'test'
|
|
...
|
|
# Subtest: T21: revoke kills the call in flight, and the next call refuses
|
|
ok 16 - T21: revoke kills the call in flight, and the next call refuses
|
|
---
|
|
duration_ms: 259.419362
|
|
type: 'test'
|
|
...
|
|
# Subtest: T22: events carry host, address, user and argv in clear, and sizes and hashes only
|
|
ok 17 - T22: events carry host, address, user and argv in clear, and sizes and hashes only
|
|
---
|
|
duration_ms: 252.737785
|
|
type: 'test'
|
|
...
|
|
# Subtest: T24: no literal gitea and vikunja kind list outside vocabulary.mjs, and the credential use sites are known
|
|
ok 18 - T24: no literal gitea and vikunja kind list outside vocabulary.mjs, and the credential use sites are known
|
|
---
|
|
duration_ms: 17.389794
|
|
type: 'test'
|
|
...
|
|
# Subtest: T25: no role definition lists host.sudo while it is a hard wait
|
|
ok 19 - T25: no role definition lists host.sudo while it is a hard wait
|
|
---
|
|
duration_ms: 0.485185
|
|
type: 'test'
|
|
...
|
|
# Subtest: T27: the bus child dying takes ssh and ssh-agent with it
|
|
ok 20 - T27: the bus child dying takes ssh and ssh-agent with it
|
|
---
|
|
duration_ms: 309.059476
|
|
type: 'test'
|
|
...
|
|
# Subtest: T27: ssh-add -t drops the key from an agent the test keeps alive
|
|
ok 21 - T27: ssh-add -t drops the key from an agent the test keeps alive
|
|
---
|
|
duration_ms: 3553.20263
|
|
type: 'test'
|
|
...
|
|
# Subtest: N2: a hung ssh-add is killed at its limit or on abort, and nothing is left running
|
|
ok 22 - N2: a hung ssh-add is killed at its limit or on abort, and nothing is left running
|
|
---
|
|
duration_ms: 426.271663
|
|
type: 'test'
|
|
...
|
|
# Subtest: T27: the start sweep keeps a live bus dir and kills only a matching live process
|
|
ok 23 - T27: the start sweep keeps a live bus dir and kills only a matching live process
|
|
---
|
|
duration_ms: 26.427488
|
|
type: 'test'
|
|
...
|
|
# Subtest: T27: the bus start sweeps <configDir>/secrets/run before it listens, and a stray entry stops the start
|
|
ok 24 - T27: the bus start sweeps <configDir>/secrets/run before it listens, and a stray entry stops the start
|
|
---
|
|
duration_ms: 45.475747
|
|
type: 'test'
|
|
...
|
|
# Subtest: M3: host.run refuses host-not-granted unless the grant record has an approved, spent host grant
|
|
ok 25 - M3: host.run refuses host-not-granted unless the grant record has an approved, spent host grant
|
|
---
|
|
duration_ms: 131.446135
|
|
type: 'test'
|
|
...
|
|
# Subtest: M3: a host_grants record gives Credentials a store reference at start, and a restart reads its key
|
|
ok 26 - M3: a host_grants record gives Credentials a store reference at start, and a restart reads its key
|
|
---
|
|
duration_ms: 92.602751
|
|
type: 'test'
|
|
...
|
|
1..26
|
|
# tests 26
|
|
# suites 0
|
|
# pass 26
|
|
# fail 0
|
|
# cancelled 0
|
|
# skipped 0
|
|
# todo 0
|
|
# duration_ms 14210.377767
|