nginx-formula/test/integration/passenger/controls/repository.rb

# frozen_string_literal: true

case os.family
when 'redhat'
  repo_file = '/etc/yum.repos.d/passenger.repo'
  repo_url = 'https://oss-binaries.phusionpassenger.com/yum/passenger/el/$releasever/$basearch'
when 'debian'
  # Inspec does not provide a `codename` matcher, so we add ours
  case platform[:release].to_f.truncate
  # ubuntu
  when 18
    codename = 'bionic'
  when 20
    codename = 'focal'
  # debian
  when 9
    codename = 'stretch'
  when 10
    codename = 'buster'
  when 11
    codename = 'bullseye'
  end
  repo_keyring = '/usr/share/keyrings/phusionpassenger-archive-keyring.gpg'
  repo_file = "/etc/apt/sources.list.d/phusionpassenger-official-#{codename}.list"
  # rubocop:disable Metrics/LineLength
  repo_url = "deb [signed-by=#{repo_keyring}] https://oss-binaries.phusionpassenger.com/apt/passenger #{codename} main"
  # rubocop:enable Metrics/LineLength
end

control 'Phusion-passenger repository keyring' do
  title 'should be installed'

  only_if('Requirement for Debian family') do
    os.debian?
  end

  describe file(repo_keyring) do
    it { should exist }
    it { should be_owned_by 'root' }
    it { should be_grouped_into 'root' }
    its('mode') { should cmp '0644' }
  end
end

control 'Phusion-passenger repository' do
  impact 1
  title 'should be configured'
  describe file(repo_file) do
    its('content') { should include repo_url }
  end
end