RHELにおける自動化テスティング – InSpecを使用したテストケース作成

curl https://omnitruck.chef.io/install.sh | sudo bash -s -- -P inspec
inspec version

mkdir ~/inspec-tests
cd ~/inspec-tests

inspec init profile example-profile
cd example-profile

nano controls/example.rb

control 'httpd-service' do
impact 1.0
title 'Apache HTTP Serverの確認'
describe package('httpd') do
it { should be_installed }
end

describe service('httpd') do
it { should be_enabled }
it { should be_running }
end
end

inspec exec .

inspec exec . -t ssh://user@remote-host --password 'password'

inspec exec . --reporter json:results.json

inspec exec . --reporter html:results.html

mkdir libraries
nano libraries/custom_resource.rb

class CustomResource < Inspec.resource(1)
name 'custom_resource'

def my_check
# 実装例
File.exist?('/etc/myconfig.conf')
end
end

inspec supermarket exec dev-sec/linux-baseline

pipeline {
agent any
stages {
stage('Run InSpec Tests') {
steps {
sh 'inspec exec .'
}
}
}
}

control 'password-policy' do
impact 1.0
title 'パスワードポリシーの確認'
describe file('/etc/login.defs') do
its('content') { should match /PASS_MAX_DAYS\s+90/ }
end
end