regress/cmdline/tag.sh

   1 #!/bin/sh
   2 #
   3 # Copyright (c) 2019 Stefan Sperling <stsp@openbsd.org>
   4 #
   5 # Permission to use, copy, modify, and distribute this software for any
   6 # purpose with or without fee is hereby granted, provided that the above
   7 # copyright notice and this permission notice appear in all copies.
   8 #
   9 # THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
  10 # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  11 # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  12 # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  13 # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  14 # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  15 # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  16
  17 . ./common.sh
  18
  19 test_tag_create() {
  20         local testroot=`test_init tag_create`
  21         local commit_id=`git_show_head $testroot/repo`
  22         local tag=1.0.0
  23         local tag2=2.0.0
  24
  25         # Create a tag based on repository's HEAD reference
  26         got tag -m 'test' -r $testroot/repo -c HEAD $tag > $testroot/stdout
  27         ret=$?
  28         if [ $ret -ne 0 ]; then
  29                 echo "got ref command failed unexpectedly"
  30                 test_done "$testroot" "$ret"
  31                 return 1
  32         fi
  33
  34         tag_id=`got ref -r $testroot/repo -l \
  35                 | grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
  36         echo "Created tag $tag_id" > $testroot/stdout.expected
  37         cmp -s $testroot/stdout $testroot/stdout.expected
  38         ret=$?
  39         if [ $ret -ne 0 ]; then
  40                 diff -u $testroot/stdout.expected $testroot/stdout
  41                 test_done "$testroot" "$ret"
  42                 return 1
  43         fi
  44
  45         # Ensure that Git recognizes the tag Got has created
  46         (cd $testroot/repo && git checkout -q $tag)
  47         ret=$?
  48         if [ $ret -ne 0 ]; then
  49                 echo "git checkout command failed unexpectedly"
  50                 test_done "$testroot" "$ret"
  51                 return 1
  52         fi
  53
  54         # Ensure Got recognizes the new tag
  55         got checkout -c $tag $testroot/repo $testroot/wt >/dev/null
  56         ret=$?
  57         if [ $ret -ne 0 ]; then
  58                 echo "got checkout command failed unexpectedly"
  59                 test_done "$testroot" "$ret"
  60                 return 1
  61         fi
  62
  63         # Create a tag based on implied worktree HEAD ref
  64         (cd $testroot/wt && got branch foo > /dev/null)
  65         echo 'foo' >> $testroot/wt/alpha
  66         (cd $testroot/wt && got commit -m foo > /dev/null)
  67         local commit_id2=`git_show_branch_head $testroot/repo foo`
  68         (cd $testroot/wt && got tag -m 'test' $tag2 > $testroot/stdout)
  69         ret=$?
  70         if [ $ret -ne 0 ]; then
  71                 test_done "$testroot" "$ret"
  72                 return 1
  73         fi
  74
  75         tag_id2=`got ref -r $testroot/repo -l \
  76                 | grep "^refs/tags/$tag2" | tr -d ' ' | cut -d: -f2`
  77         echo "Created tag $tag_id2" > $testroot/stdout.expected
  78         cmp -s $testroot/stdout $testroot/stdout.expected
  79         ret=$?
  80         if [ $ret -ne 0 ]; then
  81                 diff -u $testroot/stdout.expected $testroot/stdout
  82                 test_done "$testroot" "$ret"
  83                 return 1
  84         fi
  85
  86         tagged_commit=`got cat -r $testroot/repo $tag2 | grep ^object \
  87                 | cut -d' ' -f2`
  88         if [ "$tagged_commit" != "$commit_id2" ]; then
  89                 echo "wrong commit was tagged" >&2
  90                 test_done "$testroot" "1"
  91                 return 1
  92         fi
  93
  94         (cd $testroot/repo && git checkout -q $tag2)
  95         ret=$?
  96         if [ $ret -ne 0 ]; then
  97                 echo "git checkout command failed unexpectedly"
  98                 test_done "$testroot" "$ret"
  99                 return 1
 100         fi
 101
 102         # Attempt to create a tag pointing at a non-commit
 103         local tree_id=`git_show_tree $testroot/repo`
 104         (cd $testroot/wt && got tag -m 'test' -c $tree_id foobar \
 105                 2> $testroot/stderr)
 106         ret=$?
 107         if [ $ret -eq 0 ]; then
 108                 echo "got tag command succeeded unexpectedly"
 109                 test_done "$testroot" "1"
 110                 return 1
 111         fi
 112
 113         echo "got: commit $tree_id: object not found" \
 114                 > $testroot/stderr.expected
 115         cmp -s $testroot/stderr $testroot/stderr.expected
 116         ret=$?
 117         if [ $ret -ne 0 ]; then
 118                 diff -u $testroot/stderr.expected $testroot/stderr
 119                 test_done "$testroot" "$ret"
 120                 return 1
 121         fi
 122
 123         got ref -r $testroot/repo -l > $testroot/stdout
 124         echo "HEAD: $commit_id2" > $testroot/stdout.expected
 125         echo -n "refs/got/worktree/base-" >> $testroot/stdout.expected
 126         cat $testroot/wt/.got/uuid | tr -d '\n' >> $testroot/stdout.expected
 127         echo ": $commit_id2" >> $testroot/stdout.expected
 128         echo "refs/heads/foo: $commit_id2" >> $testroot/stdout.expected
 129         echo "refs/heads/master: $commit_id" >> $testroot/stdout.expected
 130         echo "refs/tags/$tag: $tag_id" >> $testroot/stdout.expected
 131         echo "refs/tags/$tag2: $tag_id2" >> $testroot/stdout.expected
 132         cmp -s $testroot/stdout $testroot/stdout.expected
 133         ret=$?
 134         if [ $ret -ne 0 ]; then
 135                 diff -u $testroot/stdout.expected $testroot/stdout
 136         fi
 137         test_done "$testroot" "$ret"
 138 }
 139
 140 test_tag_list() {
 141         local testroot=`test_init tag_list`
 142         local commit_id=`git_show_head $testroot/repo`
 143         local tag=1.0.0
 144         local tag2=2.0.0
 145
 146         # create tag with Git
 147         (cd $testroot/repo && git tag -a -m 'test' $tag)
 148         # create tag with Got
 149         (cd $testroot/repo && got tag -m 'test' $tag2 > /dev/null)
 150
 151         tag_id=`got ref -r $testroot/repo -l \
 152                 | grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
 153         local tagger_time=`git_show_tagger_time $testroot/repo $tag`
 154
 155         local prev_LC_TIME=$LC_TIME
 156         export LC_TIME=C
 157         d1=`date -u -d "@$tagger_time" +"%a %b %e %X %Y UTC"`
 158         LC_TIME="$prev_LC_TIME"
 159
 160         tag_id2=`got ref -r $testroot/repo -l \
 161                 | grep "^refs/tags/$tag2" | tr -d ' ' | cut -d: -f2`
 162         local tagger_time2=`git_show_tagger_time $testroot/repo $tag2`
 163
 164         prev_LC_TIME="$LC_TIME"
 165         export LC_TIME=C
 166         d2=`date -u -d "@$tagger_time2" +"%a %b %e %X %Y UTC"`
 167         LC_TIME="$prev_LC_TIME"
 168
 169         got tag -r $testroot/repo -l > $testroot/stdout
 170
 171         echo "-----------------------------------------------" \
 172                 > $testroot/stdout.expected
 173         echo "tag $tag2 $tag_id2" >> $testroot/stdout.expected
 174         echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
 175         echo "date: $d2" >> $testroot/stdout.expected
 176         echo "object: commit $commit_id" >> $testroot/stdout.expected
 177         echo " " >> $testroot/stdout.expected
 178         echo " test" >> $testroot/stdout.expected
 179         echo " " >> $testroot/stdout.expected
 180         echo "-----------------------------------------------" \
 181                 >> $testroot/stdout.expected
 182         echo "tag $tag $tag_id" >> $testroot/stdout.expected
 183         echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
 184         echo "date: $d1" >> $testroot/stdout.expected
 185         echo "object: commit $commit_id" >> $testroot/stdout.expected
 186         echo " " >> $testroot/stdout.expected
 187         echo " test" >> $testroot/stdout.expected
 188         echo " " >> $testroot/stdout.expected
 189         cmp -s $testroot/stdout $testroot/stdout.expected
 190         ret=$?
 191         if [ $ret -ne 0 ]; then
 192                 diff -u $testroot/stdout.expected $testroot/stdout
 193                 test_done "$testroot" "$ret"
 194                 return 1
 195         fi
 196
 197         got tag -r $testroot/repo -l $tag > $testroot/stdout
 198
 199         echo "-----------------------------------------------" \
 200                 > $testroot/stdout.expected
 201         echo "tag $tag $tag_id" >> $testroot/stdout.expected
 202         echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
 203         echo "date: $d1" >> $testroot/stdout.expected
 204         echo "object: commit $commit_id" >> $testroot/stdout.expected
 205         echo " " >> $testroot/stdout.expected
 206         echo " test" >> $testroot/stdout.expected
 207         echo " " >> $testroot/stdout.expected
 208         cmp -s $testroot/stdout $testroot/stdout.expected
 209         ret=$?
 210         if [ $ret -ne 0 ]; then
 211                 diff -u $testroot/stdout.expected $testroot/stdout
 212                 test_done "$testroot" "$ret"
 213                 return 1
 214         fi
 215
 216         got tag -r $testroot/repo -l $tag2 > $testroot/stdout
 217
 218         echo "-----------------------------------------------" \
 219                 > $testroot/stdout.expected
 220         echo "tag $tag2 $tag_id2" >> $testroot/stdout.expected
 221         echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
 222         echo "date: $d2" >> $testroot/stdout.expected
 223         echo "object: commit $commit_id" >> $testroot/stdout.expected
 224         echo " " >> $testroot/stdout.expected
 225         echo " test" >> $testroot/stdout.expected
 226         echo " " >> $testroot/stdout.expected
 227         cmp -s $testroot/stdout $testroot/stdout.expected
 228         ret=$?
 229         if [ $ret -ne 0 ]; then
 230                 diff -u $testroot/stdout.expected $testroot/stdout
 231         fi
 232         test_done "$testroot" "$ret"
 233 }
 234
 235 test_tag_list_lightweight() {
 236         local testroot=`test_init tag_list_lightweight`
 237         local commit_id=`git_show_head $testroot/repo`
 238         local tag=1.0.0
 239         local tag2=2.0.0
 240
 241         # create "lightweight" tag with Git
 242         (cd $testroot/repo && git tag $tag)
 243         (cd $testroot/repo && git tag $tag2)
 244
 245         tag_id=`got ref -r $testroot/repo -l \
 246                 | grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
 247         local tagger_time=`git_show_author_time $testroot/repo $tag`
 248         local prev_LC_TIME=$LC_TIME
 249         export LC_TIME=C
 250         d1=`date -u -d "@$tagger_time" +"%a %b %e %X %Y UTC"`
 251         LC_TIME="$prev_LC_TIME"
 252         tag_id2=`got ref -r $testroot/repo -l \
 253                 | grep "^refs/tags/$tag2" | tr -d ' ' | cut -d: -f2`
 254         local tagger_time2=`git_show_author_time $testroot/repo $tag2`
 255
 256         export LC_TIME=C
 257         d2=`date -u -d "@$tagger_time2" +"%a %b %e %X %Y UTC"`
 258         LC_TIME="$prev_LC_TIME"
 259
 260         got tag -r $testroot/repo -l > $testroot/stdout
 261
 262         # test signature validation ignoring lightweight tags
 263         got tag -r $testroot/repo -V > $testroot/stdout
 264
 265         echo "-----------------------------------------------" \
 266                 > $testroot/stdout.expected
 267         echo "tag $tag2 $tag_id2" >> $testroot/stdout.expected
 268         echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
 269         echo "date: $d2" >> $testroot/stdout.expected
 270         echo "object: commit $commit_id" >> $testroot/stdout.expected
 271         echo " " >> $testroot/stdout.expected
 272         echo " adding the test tree" >> $testroot/stdout.expected
 273         echo " " >> $testroot/stdout.expected
 274         echo "-----------------------------------------------" \
 275                 >> $testroot/stdout.expected
 276         echo "tag $tag $tag_id" >> $testroot/stdout.expected
 277         echo "from: $GOT_AUTHOR" >> $testroot/stdout.expected
 278         echo "date: $d1" >> $testroot/stdout.expected
 279         echo "object: commit $commit_id" >> $testroot/stdout.expected
 280         echo " " >> $testroot/stdout.expected
 281         echo " adding the test tree" >> $testroot/stdout.expected
 282         echo " " >> $testroot/stdout.expected
 283         cmp -s $testroot/stdout $testroot/stdout.expected
 284         ret=$?
 285         if [ $ret -ne 0 ]; then
 286                 diff -u $testroot/stdout.expected $testroot/stdout
 287         fi
 288         test_done "$testroot" "$ret"
 289 }
 290
 291 test_tag_create_ssh_signed() {
 292         local testroot=`test_init tag_create`
 293         local commit_id=`git_show_head $testroot/repo`
 294         local tag=1.0.0
 295         local tag2=2.0.0
 296         local tag3=3.0.0
 297
 298         ssh-keygen -q -N '' -t ed25519 -f $testroot/id_ed25519
 299         ret=$?
 300         if [ $ret -ne 0 ]; then
 301                 echo "ssh-keygen failed unexpectedly"
 302                 test_done "$testroot" "$ret"
 303                 return 1
 304         fi
 305         touch $testroot/allowed_signers
 306         touch $testroot/revoked_signers
 307         echo "allowed_signers \"$testroot/allowed_signers\"" >> \
 308                 $testroot/repo/.git/got.conf
 309         echo "revoked_signers \"$testroot/revoked_signers\"" >> \
 310                 $testroot/repo/.git/got.conf
 311
 312         # Create a signed tag based on repository's HEAD reference
 313         got tag -s $testroot/id_ed25519 -m 'test' -r $testroot/repo -c HEAD \
 314                 $tag > $testroot/stdout
 315         ret=$?
 316         if [ $ret -ne 0 ]; then
 317                 echo "got tag command failed unexpectedly"
 318                 test_done "$testroot" "$ret"
 319                 return 1
 320         fi
 321
 322         tag_id=`got ref -r $testroot/repo -l \
 323                 | grep "^refs/tags/$tag" | tr -d ' ' | cut -d: -f2`
 324         echo "Created tag $tag_id" > $testroot/stdout.expected
 325         cmp -s $testroot/stdout $testroot/stdout.expected
 326         ret=$?
 327         if [ $ret -ne 0 ]; then
 328                 diff -u $testroot/stdout.expected $testroot/stdout
 329                 test_done "$testroot" "$ret"
 330                 return 1
 331         fi
 332
 333         # Ensure validation fails when the key is not allowed
 334         echo "signature: Could not verify signature." > \
 335                 $testroot/stdout.expected
 336         VERIFY_STDOUT=$(got tag -r $testroot/repo -V $tag 2> $testroot/stderr)
 337         ret=$?
 338         echo "$VERIFY_STDOUT" | grep '^signature: ' > $testroot/stdout
 339         if [ $ret -eq 0 ]; then
 340                 diff -u $testroot/stdout.expected $testroot/stdout
 341                 test_done "$testroot" "1"
 342                 return 1
 343         fi
 344
 345         GOOD_SIG='Good "git" signature for flan_hacker@openbsd.org with ED25519 key '
 346
 347         # Validate the signature with the key allowed
 348         echo -n 'flan_hacker@openbsd.org ' > $testroot/allowed_signers
 349         cat $testroot/id_ed25519.pub >> $testroot/allowed_signers
 350         GOT_STDOUT=$(got tag -r $testroot/repo -V $tag 2> $testroot/stderr)
 351         ret=$?
 352         if [ $ret -ne 0 ]; then
 353                 echo "got tag command failed unexpectedly"
 354                 diff -u $testroot/stdout.expected $testroot/stdout
 355                 test_done "$testroot" "$ret"
 356                 return 1
 357         fi
 358
 359         if ! echo "$GOT_STDOUT" | grep -q "^signature: $GOOD_SIG"; then
 360                 echo "got tag command failed to validate signature"
 361                 test_done "$testroot" "1"
 362                 return 1
 363         fi
 364
 365         # Ensure validation fails after revoking the key
 366         ssh-keygen -y -f $testroot/id_ed25519 >> $testroot/revoked_signers
 367         echo "signature: Could not verify signature." > \
 368                 $testroot/stdout.expected
 369         VERIFY_STDOUT=$(got tag -r $testroot/repo -V $tag 2> $testroot/stderr)
 370         ret=$?
 371         echo "$VERIFY_STDOUT" | grep '^signature: ' > $testroot/stdout
 372         if [ $ret -eq 0 ]; then
 373                 diff -u $testroot/stdout.expected $testroot/stdout
 374                 test_done "$testroot" "1"
 375                 return 1
 376         fi
 377
 378         # Later tests expect validation to work
 379         echo -n > $testroot/revoked_signers
 380
 381         # Ensure that Git recognizes and verifies the tag Got has created
 382         (cd $testroot/repo && git checkout -q $tag)
 383         ret=$?
 384         if [ $ret -ne 0 ]; then
 385                 echo "git checkout command failed unexpectedly"
 386                 test_done "$testroot" "$ret"
 387                 return 1
 388         fi
 389         (cd $testroot/repo && git config --local gpg.ssh.allowedSignersFile \
 390                 $testroot/allowed_signers)
 391         GIT_STDERR=$(cd $testroot/repo && git tag -v $tag 2>&1 1>/dev/null)
 392         if ! echo "$GIT_STDERR" | grep -q "^$GOOD_SIG"; then
 393                 echo "git tag command failed to validate signature"
 394                 test_done "$testroot" "1"
 395                 return 1
 396         fi
 397
 398         # Ensure Got recognizes the new tag
 399         got checkout -c $tag $testroot/repo $testroot/wt >/dev/null
 400         ret=$?
 401         if [ $ret -ne 0 ]; then
 402                 echo "got checkout command failed unexpectedly"
 403                 test_done "$testroot" "$ret"
 404                 return 1
 405         fi
 406
 407         # Create another signed tag with a SHA1 commit ID
 408         got tag -s $testroot/id_ed25519 -m 'test' -r $testroot/repo \
 409                 -c $commit_id $tag2 > $testroot/stdout
 410
 411         # Create another signed tag with key defined in got.conf(5)
 412         echo "signer_id \"$testroot/id_ed25519\"" >> \
 413                 $testroot/repo/.git/got.conf
 414         got tag -m 'test' -r $testroot/repo -c HEAD $tag3 > $testroot/stdout
 415         ret=$?
 416         if [ $ret -ne 0 ]; then
 417                 echo "got tag command failed unexpectedly"
 418                 test_done "$testroot" "$ret"
 419                 return 1
 420         fi
 421
 422         # got tag -V behaves like got tag -l, but with verification enabled.
 423         got tag -l -r $testroot/repo > $testroot/stdout.list
 424         got tag -V -r $testroot/repo > $testroot/stdout.verify
 425         diff -U0 $testroot/stdout.list $testroot/stdout.verify |
 426             sed -e '/^--- /d' -e '/^+++ /d' > $testroot/stdout
 427         echo "@@ -5,0 +6 @@" > $testroot/stdout.expected
 428         echo -n "+signature: $GOOD_SIG" >> $testroot/stdout.expected
 429         ssh-keygen -l -f $testroot/id_ed25519.pub | cut -d' ' -f 2 \
 430                 >> $testroot/stdout.expected
 431         echo "@@ -19,0 +21 @@" >> $testroot/stdout.expected
 432         echo -n "+signature: $GOOD_SIG" >> $testroot/stdout.expected
 433         ssh-keygen -l -f $testroot/id_ed25519.pub | cut -d' ' -f 2 \
 434                 >> $testroot/stdout.expected
 435         echo "@@ -33,0 +36 @@" >> $testroot/stdout.expected
 436         echo -n "+signature: $GOOD_SIG" >> $testroot/stdout.expected
 437         ssh-keygen -l -f $testroot/id_ed25519.pub | cut -d' ' -f 2 \
 438                 >> $testroot/stdout.expected
 439         cmp -s $testroot/stdout $testroot/stdout.expected
 440         ret=$?
 441         if [ $ret -ne 0 ]; then
 442                 diff -u $testroot/stdout.expected $testroot/stdout
 443         fi
 444         test_done "$testroot" "$ret"
 445 }
 446
 447 test_tag_create_ssh_signed_missing_key() {
 448         local testroot=`test_init tag_create`
 449         local commit_id=`git_show_head $testroot/repo`
 450         local tag=1.0.0
 451
 452         # Fail to create a signed tag due to a missing SSH key
 453         got tag -s $testroot/bogus -m 'test' -r $testroot/repo \
 454                 -c HEAD $tag > $testroot/stdout 2> $testroot/stderr
 455         ret=$?
 456         if [ $ret -eq 0 ]; then
 457                 echo "got tag command succeeded unexpectedly"
 458                 test_done "$testroot" 1
 459                 return 1
 460         fi
 461
 462         got ref -r $testroot/repo -l > $testroot/stdout
 463         echo "HEAD: refs/heads/master" > $testroot/stdout.expected
 464         echo "refs/heads/master: $commit_id" >> $testroot/stdout.expected
 465         cmp -s $testroot/stdout $testroot/stdout.expected
 466         ret=$?
 467         if [ $ret -ne 0 ]; then
 468                 diff -u $testroot/stdout.expected $testroot/stdout
 469                 test_done "$testroot" "$ret"
 470                 return 1
 471         fi
 472         printf "Couldn't load public key $testroot/bogus: " \
 473                 >> $testroot/stderr.expected
 474         printf "No such file or directory\r\n" >> $testroot/stderr.expected
 475         echo "got: unable to sign tag" >> $testroot/stderr.expected
 476         cmp -s $testroot/stderr $testroot/stderr.expected
 477         ret=$?
 478         if [ $ret -ne 0 ]; then
 479                 diff -u $testroot/stderr.expected $testroot/stderr
 480         fi
 481         test_done "$testroot" "$ret"
 482 }
 483
 484 test_parseargs "$@"
 485 run_test test_tag_create
 486 run_test test_tag_list
 487 run_test test_tag_list_lightweight
 488 run_test test_tag_create_ssh_signed
 489 run_test test_tag_create_ssh_signed_missing_key