rustd-resolved 0.2.3

Native DNS resolver and name-service daemon for RustD
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116

// SPDX-License-Identifier: LGPL-2.1-or-later

use std::path::Path;

#[test]
fn native_resolver_targets_use_rustd_names() {
    for target in [
        env!("CARGO_BIN_EXE_rustd-resolved"),
        env!("CARGO_BIN_EXE_rustd-resolvectl"),
    ] {
        let file_name = Path::new(target)
            .file_name()
            .and_then(|name| name.to_str())
            .expect("native resolver target must have a UTF-8 file name");
        assert!(
            file_name.starts_with("rustd-"),
            "unexpected native resolver target name: {file_name}"
        );
    }
}

#[test]
fn install_surface_is_rustd_native_only() {
    let makefile = include_str!("../Makefile");

    for required in [
        "RUSTD_LIBEXECDIR ?= $(PREFIX)/lib/rustd",
        "target/release/rustd-resolved $(DESTDIR)$(RUSTD_LIBEXECDIR)/rustd-resolved",
        "target/release/rustd-resolvectl $(DESTDIR)$(BINDIR)/rustd-resolvectl",
        "$(LIBDIR)/libnss_resolve.so.2",
        "packaging/rustd/rustd-resolved.service",
        "packaging/rustd/rustd-resolved-varlink.socket",
        "packaging/rustd/rustd-resolved-monitor.socket",
        "packaging/sysusers/rustd-resolve.conf",
        "certify: release boot-smoke",
    ] {
        assert!(
            makefile.contains(required),
            "native installation contract is missing {required}"
        );
    }

    let install_recipe = makefile
        .split_once("\ninstall: build nss\n")
        .and_then(|(_, remainder)| remainder.split_once("\nclean:\n"))
        .map(|(recipe, _)| recipe)
        .expect("Makefile must contain a bounded install recipe");

    for forbidden in [
        "$(LIBEXECDIR)/systemd-resolved",
        "$(BINDIR)/resolvectl",
        "$(BINDIR)/systemd-resolve",
        "systemd-resolved.service",
        "/run/systemd/resolve",
    ] {
        assert!(
            !install_recipe.contains(forbidden),
            "legacy compatibility install surface remains: {forbidden}"
        );
    }
}

#[test]
fn installed_certificate_is_rustd_native() {
    let smoke = include_str!("../scripts/boot-smoke.sh");

    for required in [
        "/usr/bin/rustctl",
        "/usr/bin/rustd-resolvectl",
        "/usr/lib/rustd/rustd-resolved",
        "/run/rustd/resolve",
        "io.rustd.Resolve",
        "rustd-resolved.service",
    ] {
        assert!(
            smoke.contains(required),
            "native boot certificate is missing {required}"
        );
    }

    for forbidden in [
        "systemctl",
        "systemd-resolved",
        "/run/systemd/resolve",
        "resolvectl-rs",
    ] {
        assert!(
            !smoke.contains(forbidden),
            "legacy boot-certificate surface remains: {forbidden}"
        );
    }
}

#[test]
fn replacement_and_parity_release_tools_do_not_return() {
    let makefile = include_str!("../Makefile");
    let mdns_workflow = include_str!("../.github/workflows/mdns-live.yml");

    for forbidden in [
        "capture-replacement-state.sh",
        "uninstall-restore.sh",
        "rollback_roundtrip.sh",
        "REPLACEMENT-CERTIFICATION.md",
        "run-upstream-test-75.sh",
        "systemd_service_replace.sh",
    ] {
        assert!(
            !makefile.contains(forbidden),
            "replacement-era release dependency returned: {forbidden}"
        );
    }

    assert!(mdns_workflow.contains("tests/live-avahi-interop.sh"));
    assert!(!mdns_workflow.contains("tests/parity/"));
    assert!(!mdns_workflow.contains("systemctl"));
}