safe-migrate 0.4.4

Analyze PostgreSQL migrations for schema and locking risks
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123

#!/bin/sh
set -eu

repo_root=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)
test_tmp=$(mktemp -d)
trap 'rm -rf "$test_tmp"' EXIT HUP INT TERM

install_dir="$test_tmp/install"
output="$test_tmp/output"
command_dir="$test_tmp/commands"
mkdir "$command_dir"
ln -s "$(command -v uname)" "$command_dir/uname"

# The restricted PATH contains only uname and deliberately omits curl. A
# successful dry run proves it neither requires nor invokes network tooling.
PATH="$command_dir" \
  /bin/sh "$repo_root/install.sh" \
  --dry-run \
  --version v0.4.2 \
  --target x86_64-unknown-linux-musl \
  --install-dir "$install_dir" \
  >"$output" 2>&1

grep -F '[dry-run] No network requests or filesystem changes will be made.' "$output" >/dev/null
grep -F 'safe-migrate-x86_64-unknown-linux-musl.tar.gz' "$output" >/dev/null
grep -F "atomically install ${install_dir}/safe-migrate" "$output" >/dev/null

if [ -e "$install_dir" ]; then
  printf '%s\n' 'dry run unexpectedly created the requested install directory' >&2
  exit 1
fi

# Exercise real installer integrity handling without network access.
archive_root="$test_tmp/archive"
archive="$test_tmp/safe-migrate-x86_64-unknown-linux-musl.tar.gz"
mkdir "$archive_root"
printf '%s\n' '#!/bin/sh' 'printf "mock safe-migrate\n"' > "$archive_root/safe-migrate"
chmod +x "$archive_root/safe-migrate"
tar -czf "$archive" -C "$archive_root" safe-migrate

mock_dir="$test_tmp/mock-commands"
mkdir "$mock_dir"
for command_name in \
  uname tar gzip sed head grep mktemp cp chmod mkdir mv rm cut cat find sha256sum
do
  ln -s "$(command -v "$command_name")" "$mock_dir/$command_name"
done

mock_curl="$mock_dir/curl"
printf '%s\n' \
  '#!/bin/sh' \
  'set -eu' \
  'output=""' \
  'url=""' \
  'while [ "$#" -gt 0 ]; do' \
  '  case "$1" in' \
  '    -o) output="$2"; shift 2 ;;' \
  '    -*) shift ;;' \
  '    *) url="$1"; shift ;;' \
  '  esac' \
  'done' \
  'case "$url" in' \
  '  *.tar.gz.sha256) exit 22 ;;' \
  '  *.sha256)' \
  '    case "$MOCK_CHECKSUM_MODE" in' \
  '      missing) exit 22 ;;' \
  '      malformed) printf "not-a-checksum  archive.tar.gz\n" > "$output" ;;' \
  '      mismatch) printf "%064d  archive.tar.gz\n" 0 > "$output" ;;' \
  '      valid)' \
  '        digest=$(sha256sum "$MOCK_ARCHIVE" | cut -d" " -f1)' \
  '        printf "%s  archive.tar.gz\n" "$digest" > "$output"' \
  '        ;;' \
  '      *) exit 2 ;;' \
  '    esac' \
  '    ;;' \
  '  *.tar.gz) cp "$MOCK_ARCHIVE" "$output" ;;' \
  '  *) exit 22 ;;' \
  'esac' \
  > "$mock_curl"
chmod +x "$mock_curl"

run_mock_install() {
  checksum_mode="$1"
  expected_status="$2"
  case_dir="$test_tmp/$checksum_mode"
  case_output="$case_dir/output"
  case_install="$case_dir/install"
  mkdir "$case_dir"

  set +e
  PATH="$mock_dir" \
    MOCK_ARCHIVE="$archive" \
    MOCK_CHECKSUM_MODE="$checksum_mode" \
    /bin/sh "$repo_root/install.sh" \
      --version v0.4.2 \
      --target x86_64-unknown-linux-musl \
      --install-dir "$case_install" \
      >"$case_output" 2>&1
  status=$?
  set -e

  if [ "$status" -ne "$expected_status" ]; then
    printf 'installer case %s returned %s, expected %s\n' \
      "$checksum_mode" "$status" "$expected_status" >&2
    sed -n '1,80p' "$case_output" >&2
    exit 1
  fi

  case "$checksum_mode" in
    valid)
      test -x "$case_install/safe-migrate"
      ;;
    *)
      grep -F 'release integrity verification failed' "$case_output" >/dev/null
      test ! -e "$case_install/safe-migrate"
      ;;
  esac
}

run_mock_install missing 1
run_mock_install malformed 1
run_mock_install mismatch 1
run_mock_install valid 0