79 lines
2.1 KiB
Go
79 lines
2.1 KiB
Go
package deploy
|
|
|
|
import (
|
|
"crypto/hmac"
|
|
"crypto/sha256"
|
|
"encoding/hex"
|
|
"encoding/json"
|
|
"testing"
|
|
|
|
"crypto-miner-agent/config"
|
|
)
|
|
|
|
func TestVerifyDeployPlanSignatureAgent(t *testing.T) {
|
|
plan := DeployPlanBody{
|
|
JoinLane: "winrm",
|
|
Action: "winrm",
|
|
Script: "# noop",
|
|
}
|
|
payload, _ := json.Marshal(plan)
|
|
mac := hmac.New(sha256.New, []byte("fleet-test"))
|
|
mac.Write(payload)
|
|
sig := hex.EncodeToString(mac.Sum(nil))
|
|
if !VerifyDeployPlanSignature(plan, sig, "fleet-test") {
|
|
t.Fatal("expected valid signature")
|
|
}
|
|
}
|
|
|
|
func TestRunDiscoverAndJoinFakeServices(t *testing.T) {
|
|
cfg := config.RuntimeConfig{
|
|
BuiltinConfig: config.BuiltinConfig{
|
|
FleetSecret: "fleet-test",
|
|
WorkerName: "test-worker",
|
|
ServerURL: "http://127.0.0.1:8989",
|
|
},
|
|
}
|
|
|
|
fetch := func(services []DeployServiceFinding, uncPath string) (DeployPlanResponse, error) {
|
|
if len(services) == 0 {
|
|
t.Fatal("expected services")
|
|
}
|
|
if services[0].Name != "CCMEXEC" {
|
|
t.Fatalf("service=%q", services[0].Name)
|
|
}
|
|
plan := DeployPlanBody{
|
|
JoinLane: "gpo",
|
|
Action: "gpo",
|
|
Script: "$env:AETHER_DEFER_MINING='1'",
|
|
}
|
|
payload, _ := json.Marshal(plan)
|
|
mac := hmac.New(sha256.New, []byte(cfg.FleetSecret))
|
|
mac.Write(payload)
|
|
return DeployPlanResponse{
|
|
OK: true,
|
|
JoinLane: "gpo",
|
|
Plan: plan,
|
|
Signature: hex.EncodeToString(mac.Sum(nil)),
|
|
}, nil
|
|
}
|
|
|
|
// Inject fake discovery via ParseServiceDiscoverJSON path
|
|
oldDiscover := runServiceDiscoverFn
|
|
runServiceDiscoverFn = func(maxLANHosts int) string {
|
|
return `{"probed_at":"2026-06-06T12:00:00Z","local":{"host":"10.0.0.1","subnet":"10.0.0","services":[{"service_name":"CCMEXEC","status":"running","join_lane_candidate":"gpo","source":"local_service"}]}}`
|
|
}
|
|
defer func() { runServiceDiscoverFn = oldDiscover }()
|
|
|
|
lane, detail, err := RunDiscoverAndJoin(cfg, 8, fetch)
|
|
if err != nil {
|
|
// gpo script execution may fail on non-windows — still expect lane selection + signature pass
|
|
if lane != "gpo" {
|
|
t.Fatalf("lane=%q err=%v", lane, err)
|
|
}
|
|
return
|
|
}
|
|
if lane != "gpo" {
|
|
t.Fatalf("lane=%q detail=%q", lane, detail)
|
|
}
|
|
}
|