mirror of
https://github.com/ansible-collections/community.docker.git
synced 2025-12-16 20:08:41 +00:00
* Prevent RCE via inventory plugins. * Do not make ansible_connection unsafe. * Add test.
32 lines
1.0 KiB
Bash
Executable File
32 lines
1.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Copyright (c) Ansible Project
|
|
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
[[ -n "$DEBUG" || -n "$ANSIBLE_DEBUG" ]] && set -x
|
|
|
|
set -euo pipefail
|
|
|
|
cleanup() {
|
|
echo "Cleanup"
|
|
ansible-playbook playbooks/docker_cleanup.yml "$@"
|
|
echo "Done"
|
|
}
|
|
|
|
trap cleanup INT TERM EXIT
|
|
|
|
echo "Setup"
|
|
ANSIBLE_ROLES_PATH=.. ansible-playbook playbooks/docker_setup.yml "$@"
|
|
|
|
echo "Test docker_containers inventory 1"
|
|
ansible-playbook -i inventory_1.docker.yml playbooks/test_inventory_1.yml "$@"
|
|
|
|
echo "Test docker_containers inventory 2"
|
|
rm -f /tmp/ansible-docker-test-docker-inventory-container-*-labels.txt
|
|
ansible-playbook -i inventory_2.docker.yml playbooks/test_inventory_2.yml "$@"
|
|
|
|
echo "Validate that 'EVALUATED' does not appear in the labels"
|
|
for FILENAME in /tmp/ansible-docker-test-docker-inventory-container-*-labels.txt; do
|
|
grep -qv EVALUATED "${FILENAME}" || ( echo "${FILENAME} contains EVALUATED!" && exit 1 )
|
|
done
|