From: Alexandru Ardelean <redacted>
Date: Sat, 18 Jul 2026 18:17:18 +0000 (+0300)
Subject: ripe-atlas: add test.sh
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=74f3af5169f0f0755798494a51ec79380e8b86a3;p=openwrt-packages.git

ripe-atlas: add test.sh

Cover ripe-atlas-common, -probe and -anchor: the busybox measurement
applets resolve and run without crashing, the shell libraries parse, the
capabilities grant CAP_NET_RAW, uci parses the config, and each variant
ships its registration servers and host keys.

test-version.sh overrides the generic per-executable version probe, which
would otherwise run the /usr/sbin/ripe-atlas wrapper -- it has no version
flag and boots the probe instead.

Signed-off-by: Alexandru Ardelean <redacted>
---

diff --git a/net/ripe-atlas/test-version.sh b/net/ripe-atlas/test-version.sh
new file mode 100755
index 000000000..aade1549e
--- /dev/null
+++ b/net/ripe-atlas/test-version.sh
@@ -0,0 +1,9 @@
+#!/bin/sh
+# /usr/sbin/ripe-atlas has no version flag (running it boots the probe), so
+# accept the version for our packages and skip the generic per-exec probe.
+case "$1" in
+ripe-atlas-common|ripe-atlas-probe|ripe-atlas-anchor)
+	exit 0
+	;;
+esac
+exit 1
diff --git a/net/ripe-atlas/test.sh b/net/ripe-atlas/test.sh
new file mode 100644
index 000000000..57b6eba83
--- /dev/null
+++ b/net/ripe-atlas/test.sh
@@ -0,0 +1,116 @@
+#!/bin/sh
+
+MEAS_DIR=/usr/lib/ripe-atlas/measurement
+SCRIPT_DIR=/usr/lib/ripe-atlas/scripts
+SHARE_DIR=/usr/share/ripe-atlas
+BUSYBOX="$MEAS_DIR/busybox"
+
+# Atlas measurement applets. Standard busybox applets are deliberately not
+# built in, so only these plus the patched telnetd are expected.
+APPLETS="atlasinit buddyinfo condmv date dfrm eooqd eperd evhttpget evntp \
+evping evsslgetcert evtdig evtraceroute httppost onlyuptime perd rchoose \
+rptaddrs rptra6 rptuptime rxtxrpt telnetd"
+
+check_applets() {
+	for applet in $APPLETS; do
+		path="$MEAS_DIR/$applet"
+		[ -e "$path" ] || { echo "FAIL: missing applet: $applet"; exit 1; }
+		if [ -L "$path" ]; then
+			target=$(readlink "$path")
+			case "$target" in
+			busybox|./busybox|"$BUSYBOX") ;;
+			*) echo "FAIL: applet $applet -> unexpected target: $target"; exit 1 ;;
+			esac
+		elif [ -f "$path" ]; then
+			bb_inode=$(ls -i "$BUSYBOX" | awk '{print $1}')
+			ap_inode=$(ls -i "$path" | awk '{print $1}')
+			[ "$bb_inode" = "$ap_inode" ] || {
+				echo "FAIL: applet $applet is not a busybox hardlink"; exit 1; }
+		else
+			echo "FAIL: applet $applet is neither symlink nor regular file"
+			exit 1
+		fi
+	done
+
+	applet_list=$("$BUSYBOX" --list 2>/dev/null) || {
+		echo "FAIL: 'busybox --list' failed"; exit 1; }
+	for applet in $APPLETS; do
+		echo "$applet_list" | grep -qx "$applet" || {
+			echo "FAIL: applet '$applet' missing from 'busybox --list'"; exit 1; }
+	done
+}
+
+# Catch crash signals (132/134/137/139) and hangs. Output is not asserted
+# because the applet CLIs vary across Atlas releases.
+run_applet_smoke() {
+	name="$1"; shift
+	out=$(timeout 5 "$BUSYBOX" "$name" "$@" 2>&1); rc=$?
+	case "$rc" in
+	124) echo "FAIL: applet $name timed out"; exit 1 ;;
+	132|134|137|139)
+		echo "FAIL: applet $name crashed (rc=$rc)"; echo "$out"; exit 1 ;;
+	esac
+}
+
+case "$1" in
+ripe-atlas-common)
+	[ -x "$BUSYBOX" ] || { echo "FAIL: $BUSYBOX not installed"; exit 1; }
+	[ -s "$BUSYBOX" ] || { echo "FAIL: $BUSYBOX is empty"; exit 1; }
+	check_applets
+
+	# The probe drops to this user, so it must exist with a matching group.
+	uid=$(awk -F: '$1=="ripe-atlas" {print $3}' /etc/passwd)
+	[ -n "$uid" ] || { echo "FAIL: user 'ripe-atlas' missing from /etc/passwd"; exit 1; }
+	gid=$(awk -F: '$1=="ripe-atlas" {print $3}' /etc/group)
+	[ -n "$gid" ] || { echo "FAIL: group 'ripe-atlas' missing from /etc/group"; exit 1; }
+
+	# Exercise the applets that need no network peer.
+	run_applet_smoke rptuptime
+	run_applet_smoke dfrm -A 9018 /tmp 1 /tmp /tmp
+	run_applet_smoke condmv /tmp/atlas-no-such-src /tmp/atlas-no-such-dst
+	[ -r /proc/uptime ] && run_applet_smoke onlyuptime
+	[ -r /proc/buddyinfo ] && run_applet_smoke buddyinfo 1 /dev/null
+	[ -r /proc/net/dev ] && run_applet_smoke rxtxrpt -A 9999
+
+	# The shell libraries the init and reginit source at runtime.
+	for f in common.sh config.sh paths.lib.sh json.lib.sh support.lib.sh \
+		 linux-functions.sh reginit.sh; do
+		[ -s "$SCRIPT_DIR/$f" ] || { echo "FAIL: $SCRIPT_DIR/$f missing or empty"; exit 1; }
+	done
+	for f in $(ls "$SCRIPT_DIR"/*.sh 2>/dev/null); do
+		sh -n "$f" || { echo "FAIL: $f is not valid shell"; exit 1; }
+	done
+
+	[ -s "$SHARE_DIR/capabilities.json" ] || {
+		echo "FAIL: $SHARE_DIR/capabilities.json missing or empty"; exit 1; }
+	jsonfilter -i "$SHARE_DIR/capabilities.json" -e '@.effective' >/dev/null || {
+		echo "FAIL: capabilities.json is not valid JSON"; exit 1; }
+	jsonfilter -i "$SHARE_DIR/capabilities.json" -e '@.effective[*]' | grep -qx CAP_NET_RAW || {
+		echo "FAIL: capabilities.json does not grant CAP_NET_RAW"; exit 1; }
+
+	[ -x /etc/init.d/ripe-atlas ] || { echo "FAIL: /etc/init.d/ripe-atlas not installed"; exit 1; }
+	sh -n /etc/init.d/ripe-atlas || { echo "FAIL: init script is not valid shell"; exit 1; }
+	[ -s /etc/config/ripe-atlas ] || { echo "FAIL: /etc/config/ripe-atlas missing or empty"; exit 1; }
+	uci -q show ripe-atlas >/dev/null || { echo "FAIL: uci cannot parse ripe-atlas config"; exit 1; }
+
+	[ -x /usr/sbin/ripe-atlas ] || { echo "FAIL: /usr/sbin/ripe-atlas not installed"; exit 1; }
+	;;
+
+ripe-atlas-probe|ripe-atlas-anchor)
+	# Each variant ships the registration servers and host keys for its own
+	# environment; without them the probe cannot register.
+	[ -s "$SCRIPT_DIR/reg_servers.sh.prod" ] || {
+		echo "FAIL: $SCRIPT_DIR/reg_servers.sh.prod missing or empty"; exit 1; }
+	sh -n "$SCRIPT_DIR/reg_servers.sh.prod" || {
+		echo "FAIL: reg_servers.sh.prod is not valid shell"; exit 1; }
+	grep -qE '^REG_[0-9]+_HOST=[^[:space:]]' "$SCRIPT_DIR/reg_servers.sh.prod" || {
+		echo "FAIL: reg_servers.sh.prod defines no REG_*_HOST entries"; exit 1; }
+
+	[ -s "$SHARE_DIR/known_hosts.reg" ] || {
+		echo "FAIL: $SHARE_DIR/known_hosts.reg missing or empty"; exit 1; }
+	grep -q 'ssh-\|ecdsa-' "$SHARE_DIR/known_hosts.reg" || {
+		echo "FAIL: known_hosts.reg holds no host keys"; exit 1; }
+	;;
+esac
+
+exit 0