mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-10-25 21:19:38 +00:00
Oliver Kieselbach
3a898b5071
- Loader 1.3 downloads into a protected run folder of its own (%ProgramData%\AutopilotMonitor-Loader-<8 hex>), runs the installer only when it is signed by the pinned publisher and declares the installer role and version 2.7 or later, removes the folder after a successful run and never touches the agent folder. Unbound arguments now reach the installer by name; the array splat bound them by position. - Installer 2.7 refuses without elevation and decides before it writes: guards read HKLM through the 64-bit view (a 32-bit host never saw the deployment marker), guard 5 is covered by the agent check. An agent's folder stays as it is, a skip without agent removes the folder, an install starts from an emptied, protected folder and stages the ZIP in a run folder. It moves the MSI's working directory out, writes stderr only on failure and removes the copy older loaders left at the fixed path. - Help texts of both scripts state what customers need; .CHANGELOG, which made Get-Help ignore the help, gives way to the Platform Changelog. - OOBE go-script: the installer's shared helpers, its own elevation check (#Requires is ignored under irm | iex), a run folder. - Publish: version read line-anchored, the loader's own check on the exact publish bytes, installers before loaders, -Channel dev (dispatch input). - Bootstrap MSI 1.2.0; Test-ShouldBootstrapAgent reads the 64-bit view; Uninstall removes loader run folders and keeps the Deployed marker. - Tests: Pester unit suites, an integration harness running the real scripts (loader 1.2 and the MSI 1.0 runner frozen in TestData), BootstrapContractTests; the gate runs on windows-2022 and windows-2025, once more as SYSTEM, and against a real standard user. [skip actions]: published by a dispatch of publish-scripts.yml, channel dev first. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
734 lines
40 KiB
PowerShell
734 lines
40 KiB
PowerShell
# Integration tests (Pester 5+) for the bootstrap chain: the real loader and installer, each
|
|
# started the way Intune and the bootstrap MSI start them -- powershell.exe -File, in a process
|
|
# of its own -- against a scratch ProgramData and TEMP. Loader 1.2 and the MSI 1.0.x runner run
|
|
# from TestData, frozen from git: devices keep running them until customers replace them.
|
|
#
|
|
# What these tests do not cover is swapped out by global aliases, which win over cmdlets and
|
|
# over functions a script defines: downloads (served from a scratch folder), signatures, the
|
|
# catalog check, the guard decision, the deployment marker, the agent task, the agent's
|
|
# --install and sleeps. Every swap writes a trace line, and the tests check the lines they rely
|
|
# on, so a swap that stops working turns a test red instead of reaching the real machine.
|
|
#
|
|
# Run elevated (CI also runs it as SYSTEM), the folder permissions are the real ones. Without
|
|
# elevation the test account may not make Administrators the owner, so the protected DACL is
|
|
# swapped for one without that owner change, and folders the account owns count as ours.
|
|
# Entries whose name starts with "foreign" count as another account's.
|
|
#
|
|
# This file MUST remain pure ASCII (PS 5.1 reads BOM-less files as ANSI).
|
|
|
|
BeforeAll {
|
|
$script:repoRoot = (Resolve-Path (Join-Path $PSScriptRoot '..\..')).Path
|
|
$script:loaderPath = Join-Path $PSScriptRoot 'Start-AutopilotMonitor.ps1'
|
|
$script:installerPath = Join-Path $PSScriptRoot 'Install-AutopilotMonitor.ps1'
|
|
$script:loader12Path = Join-Path $PSScriptRoot 'TestData\Start-AutopilotMonitor-1.2.ps1'
|
|
$script:msiRunnerPath = Join-Path $PSScriptRoot 'TestData\Invoke-BootstrapDownload-1.0.ps1'
|
|
# The backend's pin of the generated OOBE script, test values filled in.
|
|
$script:oobeScriptPath = Join-Path $script:repoRoot 'src\Backend\AutopilotMonitor.Functions.Tests\TestData\oobe-bootstrap-golden.ps1'
|
|
$script:powershell = Join-Path $env:SystemRoot 'System32\WindowsPowerShell\v1.0\powershell.exe'
|
|
$script:isElevated = (New-Object System.Security.Principal.WindowsPrincipal([System.Security.Principal.WindowsIdentity]::GetCurrent())).IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator)
|
|
$script:payloadFiles = @('AutopilotMonitor.Agent.Core.dll', 'AutopilotMonitor.Agent.cat', 'AutopilotMonitor.Agent.exe', 'AutopilotMonitor.Agent.exe.config')
|
|
|
|
# The agent package: text files under the agent's names. --install is swapped out, so
|
|
# nothing in it ever runs.
|
|
$payload = Join-Path $TestDrive 'payload'
|
|
New-Item -ItemType Directory -Path $payload | Out-Null
|
|
foreach ($name in $script:payloadFiles) { Set-Content -LiteralPath (Join-Path $payload $name) -Value "stub $name" }
|
|
$script:agentZip = Join-Path $TestDrive 'AutopilotMonitor-Agent.zip'
|
|
Compress-Archive -Path (Join-Path $payload '*') -DestinationPath $script:agentZip
|
|
$script:agentZipSha256 = (Get-FileHash -LiteralPath $script:agentZip -Algorithm SHA256).Hash.ToLowerInvariant()
|
|
|
|
$script:wrapperText = @'
|
|
$global:HarnessDir = $PSScriptRoot
|
|
$global:HarnessOptions = [System.IO.File]::ReadAllText((Join-Path $PSScriptRoot 'options.json')) | ConvertFrom-Json
|
|
|
|
function global:Write-HarnessTrace {
|
|
param([string]$Name, [string]$Detail)
|
|
[System.IO.File]::AppendAllText((Join-Path $global:HarnessDir 'trace.txt'), "$Name|$Detail`r`n")
|
|
}
|
|
|
|
function global:Get-HarnessServerFile {
|
|
param([string]$Uri)
|
|
$source = Join-Path $global:HarnessOptions.Server ($Uri.Substring($Uri.LastIndexOf('/') + 1))
|
|
if (-not [System.IO.File]::Exists($source)) { throw "The remote server returned an error: (404) Not Found. ($Uri)" }
|
|
return $source
|
|
}
|
|
|
|
function global:HarnessInvokeWebRequest {
|
|
[CmdletBinding()]
|
|
param([string]$Uri, [string]$OutFile, [switch]$UseBasicParsing, [int]$TimeoutSec, [string]$Method)
|
|
Write-HarnessTrace 'Invoke-WebRequest' $Uri
|
|
[System.IO.File]::Copy((Get-HarnessServerFile $Uri), $OutFile, $true)
|
|
}
|
|
|
|
function global:HarnessInvokeRestMethod {
|
|
[CmdletBinding()]
|
|
param([string]$Uri, [switch]$UseBasicParsing, [int]$TimeoutSec)
|
|
Write-HarnessTrace 'Invoke-RestMethod' $Uri
|
|
return ([System.IO.File]::ReadAllText((Get-HarnessServerFile $Uri)) | ConvertFrom-Json)
|
|
}
|
|
|
|
function global:HarnessGetAuthenticodeSignature {
|
|
[CmdletBinding()]
|
|
param([string]$FilePath)
|
|
Write-HarnessTrace 'Get-AuthenticodeSignature' $FilePath
|
|
return [pscustomobject]@{
|
|
Status = $global:HarnessOptions.SignatureStatus
|
|
SignerCertificate = [pscustomobject]@{ Subject = $global:HarnessOptions.SignerSubject; Thumbprint = 'HARNESS' }
|
|
}
|
|
}
|
|
|
|
function global:HarnessTestFileCatalog {
|
|
[CmdletBinding()]
|
|
param([string]$Path, [string]$CatalogFilePath, [string[]]$FilesToSkip, [switch]$Detailed)
|
|
Write-HarnessTrace 'Test-FileCatalog' $Path
|
|
return [pscustomobject]@{
|
|
Status = $(if ($global:HarnessOptions.CatalogValid) { 'Valid' } else { 'ValidationFailed' })
|
|
Signature = [pscustomobject]@{ Status = 'Valid'; SignerCertificate = [pscustomobject]@{ Subject = 'CN=glueckkanja AG, O=glueckkanja AG, C=DE' } }
|
|
CatalogItems = @{}
|
|
PathItems = @{}
|
|
}
|
|
}
|
|
|
|
function global:HarnessGetBootstrapDecision {
|
|
param([int]$MaxBootstrapWindowHours, [int]$OobeProfileMaxAgeMinutes)
|
|
Write-HarnessTrace 'Get-BootstrapDecision' "MaxBootstrapWindowHours=$MaxBootstrapWindowHours"
|
|
$install = [bool]$global:HarnessOptions.Install
|
|
return [pscustomobject]@{ Install = $install; ReasonCode = $(if ($install) { $null } else { 'ProfilesFound' }); RelaxActive = $false }
|
|
}
|
|
|
|
function global:HarnessGetRegistryValue64 {
|
|
param([string]$SubKey, [string]$Name)
|
|
Write-HarnessTrace 'Get-RegistryValue64' "$SubKey\$Name"
|
|
if ($SubKey -eq 'SOFTWARE\AutopilotMonitor' -and $Name -eq 'Deployed') { return $global:HarnessOptions.Marker }
|
|
return $null
|
|
}
|
|
|
|
function global:HarnessGetScheduledTask {
|
|
[CmdletBinding()]
|
|
param([string]$TaskName)
|
|
Write-HarnessTrace 'Get-ScheduledTask' $TaskName
|
|
if ($global:HarnessOptions.TaskPresent) { return [pscustomobject]@{ TaskName = $TaskName } }
|
|
throw (New-Object System.Management.Automation.ErrorRecord((New-Object System.Exception "No MSFT_ScheduledTask objects found with property 'TaskName' equal to '$TaskName'."), 'CmdletizationQuery_NotFound_TaskName,Get-ScheduledTask', [System.Management.Automation.ErrorCategory]::ObjectNotFound, $TaskName))
|
|
}
|
|
|
|
function global:HarnessInvokeAgentInstallMode {
|
|
param([string]$ExePath, [string[]]$Arguments = @('--install'))
|
|
Write-HarnessTrace 'Invoke-AgentInstallMode' ('{0} {1} exists={2}' -f $ExePath, ($Arguments -join ' '), [System.IO.File]::Exists($ExePath))
|
|
return [int]$global:HarnessOptions.InstallExitCode
|
|
}
|
|
|
|
function global:HarnessGetProcess {
|
|
[CmdletBinding()]
|
|
param([string[]]$Name)
|
|
if ($Name -contains 'AutopilotMonitor.Agent') {
|
|
Write-HarnessTrace 'Get-Process' 'AutopilotMonitor.Agent'
|
|
return [pscustomobject]@{ Id = 4242; StartTime = Get-Date }
|
|
}
|
|
return Microsoft.PowerShell.Management\Get-Process @PSBoundParameters
|
|
}
|
|
|
|
function global:HarnessStartSleep {
|
|
[CmdletBinding()]
|
|
param([int]$Seconds, [int]$Milliseconds)
|
|
Write-HarnessTrace 'Start-Sleep' "$Seconds s $Milliseconds ms"
|
|
}
|
|
|
|
function global:HarnessTestIsElevated {
|
|
Write-HarnessTrace 'Test-IsElevated' "$($global:HarnessOptions.Elevated)"
|
|
return [bool]$global:HarnessOptions.Elevated
|
|
}
|
|
|
|
# The protected DACL without the owner change a standard account may not make.
|
|
function global:HarnessNewProtectedDirectorySecurity {
|
|
$security = New-Object System.Security.AccessControl.DirectorySecurity
|
|
$security.SetAccessRuleProtection($true, $false)
|
|
$inherit = [System.Security.AccessControl.InheritanceFlags]'ContainerInherit, ObjectInherit'
|
|
$propagation = [System.Security.AccessControl.PropagationFlags]::None
|
|
foreach ($sid in @([System.Security.Principal.WindowsIdentity]::GetCurrent().User, (New-Object System.Security.Principal.SecurityIdentifier('S-1-5-18')))) {
|
|
$security.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', $inherit, $propagation, 'Allow')))
|
|
}
|
|
$security.AddAccessRule((New-Object System.Security.AccessControl.FileSystemAccessRule((New-Object System.Security.Principal.SecurityIdentifier('S-1-5-32-545')), 'ReadAndExecute', $inherit, $propagation, 'Allow')))
|
|
return $security
|
|
}
|
|
|
|
function global:HarnessTestIsOwnedByUs {
|
|
param([string]$Path)
|
|
if ([System.IO.Path]::GetFileName($Path) -like 'foreign*') { return $false }
|
|
try {
|
|
$owner = (Get-Item -LiteralPath $Path -Force -ErrorAction Stop).GetAccessControl([System.Security.AccessControl.AccessControlSections]::Owner).GetOwner([System.Security.Principal.SecurityIdentifier])
|
|
return ($owner.Value -eq 'S-1-5-18' -or $owner.Value -eq 'S-1-5-32-544' -or $owner -eq [System.Security.Principal.WindowsIdentity]::GetCurrent().User)
|
|
} catch {
|
|
return $false
|
|
}
|
|
}
|
|
|
|
$swaps = @{
|
|
'Invoke-WebRequest' = 'HarnessInvokeWebRequest'
|
|
'Invoke-RestMethod' = 'HarnessInvokeRestMethod'
|
|
'Get-AuthenticodeSignature' = 'HarnessGetAuthenticodeSignature'
|
|
'Test-FileCatalog' = 'HarnessTestFileCatalog'
|
|
'Get-BootstrapDecision' = 'HarnessGetBootstrapDecision'
|
|
'Get-RegistryValue64' = 'HarnessGetRegistryValue64'
|
|
'Get-ScheduledTask' = 'HarnessGetScheduledTask'
|
|
'Invoke-AgentInstallMode' = 'HarnessInvokeAgentInstallMode'
|
|
'Get-Process' = 'HarnessGetProcess'
|
|
'Start-Sleep' = 'HarnessStartSleep'
|
|
'Test-IsOwnedByUs' = 'HarnessTestIsOwnedByUs'
|
|
}
|
|
if ($global:HarnessOptions.SwapElevation) { $swaps['Test-IsElevated'] = 'HarnessTestIsElevated' }
|
|
if ($global:HarnessOptions.SwapDacl) { $swaps['New-ProtectedDirectorySecurity'] = 'HarnessNewProtectedDirectorySecurity' }
|
|
foreach ($name in $swaps.Keys) { Set-Alias -Name $name -Value $swaps[$name] -Scope Global -Force }
|
|
|
|
# The OOBE script arrives as irm | iex, which ignores #Requires.
|
|
if ($global:HarnessOptions.Iex) {
|
|
Invoke-Expression ([System.IO.File]::ReadAllText($global:HarnessOptions.Script))
|
|
} else {
|
|
& $global:HarnessOptions.Script @args
|
|
}
|
|
exit $LASTEXITCODE
|
|
'@
|
|
|
|
function New-Scenario {
|
|
$root = Join-Path $TestDrive ('s' + [guid]::NewGuid().ToString('N').Substring(0, 7))
|
|
$scenario = [pscustomobject]@{
|
|
Root = $root
|
|
ProgramData = Join-Path $root 'ProgramData'
|
|
Base = Join-Path $root 'ProgramData\AutopilotMonitor'
|
|
Temp = Join-Path $root 'Temp'
|
|
Server = Join-Path $root 'Server'
|
|
Outside = Join-Path $root 'Outside'
|
|
Ime = Join-Path $root 'Ime'
|
|
}
|
|
foreach ($dir in @($scenario.ProgramData, $scenario.Temp, $scenario.Server, $scenario.Outside, $scenario.Ime)) {
|
|
New-Item -ItemType Directory -Path $dir -Force | Out-Null
|
|
}
|
|
Copy-Item -LiteralPath $script:installerPath -Destination (Join-Path $scenario.Server 'Install-AutopilotMonitor.ps1')
|
|
Copy-Item -LiteralPath $script:agentZip -Destination (Join-Path $scenario.Server 'AutopilotMonitor-Agent.zip')
|
|
Set-Content -LiteralPath (Join-Path $scenario.Server 'version.json') -Value ('{"version":"2.0.9999","sha256":"' + $script:agentZipSha256 + '"}')
|
|
return $scenario
|
|
}
|
|
|
|
function Invoke-Scenario {
|
|
param(
|
|
$Scenario,
|
|
[string]$Script,
|
|
[string[]]$Arguments = @(),
|
|
[string]$WorkingDirectory,
|
|
[hashtable]$Options = @{}
|
|
)
|
|
$settings = @{
|
|
Script = $Script
|
|
Server = $Scenario.Server
|
|
Install = $true
|
|
Marker = $null
|
|
TaskPresent = $false
|
|
InstallExitCode = 0
|
|
SignatureStatus = 'Valid'
|
|
SignerSubject = 'CN=glueckkanja AG, O=glueckkanja AG, C=DE'
|
|
CatalogValid = $true
|
|
Elevated = $true
|
|
Iex = $false
|
|
}
|
|
foreach ($key in $Options.Keys) { $settings[$key] = $Options[$key] }
|
|
$settings.SwapElevation = ([bool]$settings.Elevated -ne $script:isElevated)
|
|
$settings.SwapDacl = -not $script:isElevated
|
|
|
|
$harness = Join-Path $Scenario.Root 'Harness'
|
|
New-Item -ItemType Directory -Path $harness -Force | Out-Null
|
|
$tracePath = Join-Path $harness 'trace.txt'
|
|
if (Test-Path -LiteralPath $tracePath) { Remove-Item -LiteralPath $tracePath }
|
|
[System.IO.File]::WriteAllText((Join-Path $harness 'options.json'), ($settings | ConvertTo-Json))
|
|
[System.IO.File]::WriteAllText((Join-Path $harness 'run.ps1'), $script:wrapperText)
|
|
|
|
$psi = New-Object System.Diagnostics.ProcessStartInfo
|
|
$psi.FileName = $script:powershell
|
|
$quoted = @($Arguments | ForEach-Object { if ($_ -match '\s') { '"' + $_ + '"' } else { $_ } })
|
|
$psi.Arguments = ('-NoProfile -ExecutionPolicy Bypass -File "{0}" {1}' -f (Join-Path $harness 'run.ps1'), ($quoted -join ' ')).Trim()
|
|
$psi.WorkingDirectory = $(if ($WorkingDirectory) { $WorkingDirectory } else { $Scenario.Root })
|
|
$psi.UseShellExecute = $false
|
|
$psi.RedirectStandardOutput = $true
|
|
$psi.RedirectStandardError = $true
|
|
$psi.EnvironmentVariables['ProgramData'] = $Scenario.ProgramData
|
|
$psi.EnvironmentVariables['ALLUSERSPROFILE'] = $Scenario.ProgramData
|
|
$psi.EnvironmentVariables['TEMP'] = $Scenario.Temp
|
|
$psi.EnvironmentVariables['TMP'] = $Scenario.Temp
|
|
$process = [System.Diagnostics.Process]::Start($psi)
|
|
$stdout = $process.StandardOutput.ReadToEndAsync()
|
|
$stderr = $process.StandardError.ReadToEndAsync()
|
|
if (-not $process.WaitForExit(300000)) { $process.Kill(); throw 'The harness run did not end within five minutes.' }
|
|
$process.WaitForExit()
|
|
|
|
return [pscustomobject]@{
|
|
ExitCode = $process.ExitCode
|
|
StdOut = $stdout.Result
|
|
StdErr = $stderr.Result
|
|
Trace = @(if (Test-Path -LiteralPath $tracePath) { Get-Content -LiteralPath $tracePath })
|
|
}
|
|
}
|
|
|
|
# Every entry below $Root, links as links and never followed; run-folder ids as <id>.
|
|
# -Content adds a hash per file, for "exactly as it was".
|
|
function Get-Tree {
|
|
param([string]$Root, [switch]$Content)
|
|
$entries = New-Object System.Collections.Generic.List[string]
|
|
$walk = {
|
|
param([string]$Folder)
|
|
foreach ($entry in [System.IO.Directory]::GetFileSystemEntries($Folder)) {
|
|
$relative = $entry.Substring($Root.Length + 1) -replace '-[0-9a-f]{8}(?=\\|$)', '-<id>'
|
|
$attributes = [System.IO.File]::GetAttributes($entry)
|
|
if (($attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { $entries.Add("$relative -> link"); continue }
|
|
if (($attributes -band [System.IO.FileAttributes]::Directory) -ne 0) { $entries.Add("$relative\"); & $walk $entry; continue }
|
|
if ($Content) { $relative += ' ' + (Get-FileHash -LiteralPath $entry -Algorithm SHA256).Hash.Substring(0, 16) }
|
|
$entries.Add($relative)
|
|
}
|
|
}
|
|
if ([System.IO.Directory]::Exists($Root)) { & $walk $Root }
|
|
return (Join-Tree $entries)
|
|
}
|
|
|
|
function Join-Tree {
|
|
param([string[]]$Entries)
|
|
$sorted = [string[]]@($Entries | Where-Object { $_ })
|
|
[System.Array]::Sort($sorted, [System.StringComparer]::Ordinal)
|
|
return ($sorted -join "`n")
|
|
}
|
|
|
|
function Get-StdErrLines {
|
|
param($Run)
|
|
return @($Run.StdErr -split "`r?`n" | Where-Object { $_ })
|
|
}
|
|
|
|
function New-Junction {
|
|
param([string]$Link, [string]$Target)
|
|
cmd.exe /c mklink /J "$Link" "$Target" | Out-Null
|
|
}
|
|
|
|
function Add-File {
|
|
param([string]$Path, [string]$Value = 'x')
|
|
New-Item -ItemType Directory -Path (Split-Path $Path) -Force | Out-Null
|
|
Set-Content -LiteralPath $Path -Value $Value
|
|
}
|
|
|
|
# A base with what earlier bootstrap versions and agents could leave behind, plus a file
|
|
# no version knows yet and a junction out of it.
|
|
function Add-Leftovers {
|
|
param($Scenario)
|
|
Add-File (Join-Path $Scenario.Base 'Install-AutopilotMonitor.ps1')
|
|
Add-File (Join-Path $Scenario.Base 'Logs\bootstrap-loader.log')
|
|
Add-File (Join-Path $Scenario.Base 'Logs\bootstrap-script.log')
|
|
Add-File (Join-Path $Scenario.Base 'Agent-Install\Agent\AutopilotMonitor.Agent.Core.dll')
|
|
Add-File (Join-Path $Scenario.Base 'future-version-file.bin')
|
|
Add-File (Join-Path $Scenario.Outside 'target\sentinel.txt') 'must survive'
|
|
New-Junction -Link (Join-Path $Scenario.Base 'linked') -Target (Join-Path $Scenario.Outside 'target')
|
|
}
|
|
|
|
$script:installedTree = @(
|
|
'AutopilotMonitor\'
|
|
'AutopilotMonitor\Agent\'
|
|
'AutopilotMonitor\Agent\AutopilotMonitor.Agent.Core.dll'
|
|
'AutopilotMonitor\Agent\AutopilotMonitor.Agent.cat'
|
|
'AutopilotMonitor\Agent\AutopilotMonitor.Agent.exe'
|
|
'AutopilotMonitor\Agent\AutopilotMonitor.Agent.exe.config'
|
|
'AutopilotMonitor\Logs\'
|
|
)
|
|
}
|
|
|
|
Describe 'loader 1.3' {
|
|
It 'installs and leaves only the agent folder, with its log carried over' {
|
|
$s = New-Scenario
|
|
$run = Invoke-Scenario $s -Script $script:loaderPath -Arguments @('-MaxBootstrapWindowHours', '24')
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree ($script:installedTree + 'AutopilotMonitor\Logs\bootstrap-loader.log' + 'AutopilotMonitor\Logs\bootstrap-script.log'))
|
|
Get-Tree $s.Temp | Should -BeNullOrEmpty
|
|
$run.Trace | Should -Contain 'Get-BootstrapDecision|MaxBootstrapWindowHours=24'
|
|
$run.Trace | Should -Contain 'Invoke-WebRequest|https://download.autopilotmonitor.com/agent/Install-AutopilotMonitor.ps1'
|
|
$run.Trace | Should -Contain 'Invoke-WebRequest|https://download.autopilotmonitor.com/agent/AutopilotMonitor-Agent.zip'
|
|
$run.Trace | Should -Contain 'Invoke-RestMethod|https://download.autopilotmonitor.com/agent/version.json'
|
|
@($run.Trace | Where-Object { $_ -like 'Test-FileCatalog|*' }).Count | Should -Be 1
|
|
@($run.Trace | Where-Object { $_ -like 'Invoke-AgentInstallMode|*\AutopilotMonitor\Agent\AutopilotMonitor.Agent.exe --install exists=True' }).Count | Should -Be 1
|
|
$run.StdOut | Should -Match 'Bootstrap Completed Successfully'
|
|
Get-Content -LiteralPath (Join-Path $s.Base 'Logs\bootstrap-loader.log') -Raw | Should -Match '=== Autopilot Monitor bootstrap loader v1\.3 started'
|
|
if ($script:isElevated) {
|
|
(Get-Item -LiteralPath $s.Base).GetAccessControl('Owner').GetOwner([System.Security.Principal.SecurityIdentifier]).Value | Should -Be 'S-1-5-32-544'
|
|
}
|
|
}
|
|
|
|
It 'skips and leaves nothing behind, also what older versions left and files no version knows' {
|
|
$s = New-Scenario
|
|
Add-Leftovers $s
|
|
$run = Invoke-Scenario $s -Script $script:loaderPath -Options @{ Install = $false }
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -BeNullOrEmpty
|
|
Get-Content -LiteralPath (Join-Path $s.Outside 'target\sentinel.txt') | Should -Be 'must survive'
|
|
$run.StdOut | Should -Match 'No agent on this device: .* removed\.'
|
|
@($run.Trace | Where-Object { $_ -like 'Invoke-WebRequest|*Agent.zip' }).Count | Should -Be 0
|
|
}
|
|
|
|
It 'leaves the folder of an agent exactly as it is, self-update leftovers included' {
|
|
$s = New-Scenario
|
|
Add-File (Join-Path $s.Base 'Agent\AutopilotMonitor.Agent.exe') 'running agent'
|
|
Add-File (Join-Path $s.Base 'Agent\AutopilotMonitor.Agent.Core.dll.old') 'previous version'
|
|
Add-File (Join-Path $s.Base 'Updates\AutopilotMonitor-Agent-Update.zip') 'update'
|
|
Add-File (Join-Path $s.Base 'Agent-Update\AutopilotMonitor.Agent.Core.dll') 'staged'
|
|
Add-File (Join-Path $s.Base 'Logs\agent.log') 'agent log'
|
|
Add-File (Join-Path $s.Base 'State\session.id') 'session'
|
|
$before = Get-Tree $s.ProgramData -Content
|
|
$run = Invoke-Scenario $s -Script $script:loaderPath
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData -Content | Should -Be $before
|
|
$run.StdOut | Should -Match 'Agent present \(agent executable\)'
|
|
@($run.Trace | Where-Object { $_ -like 'Invoke-AgentInstallMode|*' }).Count | Should -Be 0
|
|
}
|
|
|
|
It 'leaves the folder alone when only the deployment marker <Case>' -TestCases @(
|
|
@{ Case = 'is there (logs kept after enrollment)'; Options = @{ Marker = '2026-10-01T08:00:00Z' } }
|
|
@{ Case = 'is missing but the agent task exists'; Options = @{ TaskPresent = $true } }
|
|
) {
|
|
$s = New-Scenario
|
|
Add-File (Join-Path $s.Base 'Logs\agent.log') 'kept log'
|
|
$before = Get-Tree $s.ProgramData -Content
|
|
$run = Invoke-Scenario $s -Script $script:loaderPath -Options $Options
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData -Content | Should -Be $before
|
|
}
|
|
|
|
It 'keeps its log when the installer fails, and the next run removes it' {
|
|
$s = New-Scenario
|
|
Remove-Item -LiteralPath (Join-Path $s.Server 'version.json')
|
|
$failed = Invoke-Scenario $s -Script $script:loaderPath
|
|
|
|
$failed.ExitCode | Should -Be 0
|
|
@(Get-StdErrLines $failed).Count | Should -Be 1
|
|
$failed.StdErr | Should -Match '^AutopilotMonitor bootstrap failed: No SHA-256 hash available'
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree @(
|
|
'AutopilotMonitor-Loader-<id>\'
|
|
'AutopilotMonitor-Loader-<id>\bootstrap-loader.log'
|
|
'AutopilotMonitor\'
|
|
'AutopilotMonitor\Logs\'
|
|
'AutopilotMonitor\Logs\bootstrap-loader.log'
|
|
'AutopilotMonitor\Logs\bootstrap-script.log'
|
|
))
|
|
|
|
Set-Content -LiteralPath (Join-Path $s.Server 'version.json') -Value ('{"version":"2.0.9999","sha256":"' + $script:agentZipSha256 + '"}')
|
|
$next = Invoke-Scenario $s -Script $script:loaderPath
|
|
|
|
$next.ExitCode | Should -Be 0
|
|
$next.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree ($script:installedTree + 'AutopilotMonitor\Logs\bootstrap-loader.log' + 'AutopilotMonitor\Logs\bootstrap-script.log'))
|
|
}
|
|
|
|
It 'runs nothing it cannot verify: <Case>' -TestCases @(
|
|
@{ Case = 'unsigned'; Options = @{ SignatureStatus = 'NotSigned' }; Edit = $null }
|
|
@{ Case = 'another publisher'; Options = @{ SignerSubject = 'CN=Somebody Else, O=Somebody Else Ltd, C=US' }; Edit = $null }
|
|
@{ Case = 'an installer below 2.7'; Options = @{}; Edit = @('$ScriptVersion = "2.7"', '$ScriptVersion = "2.6"') }
|
|
@{ Case = 'not the installer'; Options = @{}; Edit = @('$ScriptRole = "AutopilotMonitor-Installer"', '$ScriptRole = "AutopilotMonitor-Other"') }
|
|
) {
|
|
$s = New-Scenario
|
|
if ($Edit) {
|
|
$served = Join-Path $s.Server 'Install-AutopilotMonitor.ps1'
|
|
$text = [System.IO.File]::ReadAllText($served)
|
|
$text.Contains($Edit[0]) | Should -BeTrue
|
|
[System.IO.File]::WriteAllText($served, $text.Replace($Edit[0], $Edit[1]))
|
|
}
|
|
$run = Invoke-Scenario $s -Script $script:loaderPath -Options $Options
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
@($run.Trace | Where-Object { $_ -like 'Invoke-WebRequest|*Install-AutopilotMonitor.ps1' }).Count | Should -Be 3
|
|
@($run.Trace | Where-Object { $_ -like 'Get-BootstrapDecision|*' }).Count | Should -Be 0
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree @('AutopilotMonitor-Loader-<id>\', 'AutopilotMonitor-Loader-<id>\bootstrap-loader.log'))
|
|
}
|
|
|
|
It 'refuses to run without SYSTEM or administrator rights and creates nothing' {
|
|
$s = New-Scenario
|
|
$run = Invoke-Scenario $s -Script $script:loaderPath -Options @{ Elevated = $false }
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
@(Get-StdErrLines $run) | Should -Be 'AutopilotMonitor loader: not running as SYSTEM or administrator; nothing was downloaded or changed.'
|
|
Get-Tree $s.ProgramData | Should -BeNullOrEmpty
|
|
@($run.Trace | Where-Object { $_ -like 'Invoke-WebRequest|*' }).Count | Should -Be 0
|
|
}
|
|
}
|
|
|
|
Describe 'installer assigned directly' {
|
|
BeforeEach {
|
|
$s = New-Scenario
|
|
$imeCopy = Join-Path $s.Ime '0f1e2d3c-4b5a-6978-8796-a5b4c3d2e1f0.ps1'
|
|
Copy-Item -LiteralPath $script:installerPath -Destination $imeCopy
|
|
}
|
|
|
|
It 'installs, and the copy IME runs stays where IME put it' {
|
|
$run = Invoke-Scenario $s -Script $imeCopy
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree ($script:installedTree + 'AutopilotMonitor\Logs\bootstrap-script.log'))
|
|
Test-Path -LiteralPath $imeCopy | Should -BeTrue
|
|
Get-Tree $s.Temp | Should -BeNullOrEmpty
|
|
}
|
|
|
|
It 'skips and leaves nothing behind' {
|
|
Add-Leftovers $s
|
|
$run = Invoke-Scenario $s -Script $imeCopy -Options @{ Install = $false }
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -BeNullOrEmpty
|
|
Get-Content -LiteralPath (Join-Path $s.Outside 'target\sentinel.txt') | Should -Be 'must survive'
|
|
}
|
|
|
|
It 'fails with exit code 1 and exactly one line on stderr: <Case>' -TestCases @(
|
|
@{ Case = 'the download fails'; Missing = 'AutopilotMonitor-Agent.zip'; Options = @{}; Message = 'AutopilotMonitor bootstrap failed: The remote server returned an error: (404) Not Found.*' }
|
|
@{ Case = 'the payload fails its catalog'; Missing = $null; Options = @{ CatalogValid = $false }; Message = 'AutopilotMonitor bootstrap failed: Payload verification FAILED*' }
|
|
@{ Case = 'the agent install fails'; Missing = $null; Options = @{ InstallExitCode = 7 }; Message = 'AutopilotMonitor bootstrap failed: Agent install failed with exit code 7' }
|
|
) {
|
|
if ($Missing) { Remove-Item -LiteralPath (Join-Path $s.Server $Missing) }
|
|
$run = Invoke-Scenario $s -Script $imeCopy -Options $Options
|
|
|
|
$run.ExitCode | Should -Be 1
|
|
@(Get-StdErrLines $run).Count | Should -Be 1
|
|
@(Get-StdErrLines $run)[0] | Should -BeLike $Message
|
|
Get-Tree $s.ProgramData | Should -Not -Match 'Agent-Install'
|
|
Test-Path -LiteralPath (Join-Path $s.Base 'Logs\bootstrap-script.log') | Should -BeTrue
|
|
}
|
|
|
|
It 'refuses to run without SYSTEM or administrator rights and changes nothing' {
|
|
Add-File (Join-Path $s.Base 'Logs\bootstrap-script.log') 'earlier run'
|
|
$before = Get-Tree $s.ProgramData -Content
|
|
$run = Invoke-Scenario $s -Script $imeCopy -Options @{ Elevated = $false }
|
|
|
|
$run.ExitCode | Should -Be 1
|
|
@(Get-StdErrLines $run) | Should -Be 'AutopilotMonitor bootstrap: not running as SYSTEM or administrator; nothing was changed.'
|
|
Get-Tree $s.ProgramData -Content | Should -Be $before
|
|
}
|
|
|
|
It 'does not install into a folder that holds another account''s entries, and leaves them' {
|
|
Add-File (Join-Path $s.Base 'foreign-planted.dll') 'planted'
|
|
Add-File (Join-Path $s.Base 'Logs\bootstrap-script.log') 'earlier run'
|
|
$run = Invoke-Scenario $s -Script $imeCopy
|
|
|
|
$run.ExitCode | Should -Be 1
|
|
@(Get-StdErrLines $run).Count | Should -Be 1
|
|
$run.StdErr | Should -Match 'holds entries another account created'
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree @('AutopilotMonitor\', 'AutopilotMonitor\foreign-planted.dll'))
|
|
@($run.Trace | Where-Object { $_ -like 'Invoke-WebRequest|*' }).Count | Should -Be 0
|
|
}
|
|
|
|
It 'leaves another account''s entries and their folder when it skips' {
|
|
Add-File (Join-Path $s.Base 'foreign-planted.dll') 'planted'
|
|
Add-File (Join-Path $s.Base 'Logs\bootstrap-script.log') 'earlier run'
|
|
$run = Invoke-Scenario $s -Script $imeCopy -Options @{ Install = $false }
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree @('AutopilotMonitor\', 'AutopilotMonitor\foreign-planted.dll'))
|
|
}
|
|
|
|
It 'never follows an agent folder that is a link: <Case>' -TestCases @(
|
|
@{ Case = 'install'; Install = $true; ExitCode = 1 }
|
|
@{ Case = 'skip'; Install = $false; ExitCode = 0 }
|
|
) {
|
|
Add-File (Join-Path $s.Outside 'target\sentinel.txt') 'must survive'
|
|
New-Junction -Link $s.Base -Target (Join-Path $s.Outside 'target')
|
|
$run = Invoke-Scenario $s -Script $imeCopy -Options @{ Install = $Install }
|
|
|
|
$run.ExitCode | Should -Be $ExitCode
|
|
Get-Tree $s.ProgramData | Should -Be 'AutopilotMonitor -> link'
|
|
Get-Tree (Join-Path $s.Outside 'target') | Should -Be 'sentinel.txt'
|
|
}
|
|
}
|
|
|
|
Describe 'loader 1.2, frozen' {
|
|
It 'installs with the current installer, which removes its copy and keeps the loader start line' {
|
|
$s = New-Scenario
|
|
$run = Invoke-Scenario $s -Script $script:loader12Path
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree ($script:installedTree + 'AutopilotMonitor\Logs\bootstrap-loader.log' + 'AutopilotMonitor\Logs\bootstrap-script.log'))
|
|
$log = @(Get-Content -LiteralPath (Join-Path $s.Base 'Logs\bootstrap-loader.log'))
|
|
$log[0] | Should -Match '^\[\d{4}-\d\d-\d\d \d\d:\d\d:\d\d\] === Autopilot Monitor bootstrap loader v1\.2 started \(carried over by the bootstrapper\) ===$'
|
|
}
|
|
|
|
It 'leaves the folder of an agent as it is, but not the copy the old loader saved there' {
|
|
$s = New-Scenario
|
|
Add-File (Join-Path $s.Base 'Agent\AutopilotMonitor.Agent.exe') 'running agent'
|
|
Add-File (Join-Path $s.Base 'Logs\agent.log') 'agent log'
|
|
$run = Invoke-Scenario $s -Script $script:loader12Path
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree @(
|
|
'AutopilotMonitor\', 'AutopilotMonitor\Agent\', 'AutopilotMonitor\Agent\AutopilotMonitor.Agent.exe'
|
|
'AutopilotMonitor\Logs\', 'AutopilotMonitor\Logs\agent.log', 'AutopilotMonitor\Logs\bootstrap-loader.log'
|
|
))
|
|
Get-Content -LiteralPath (Join-Path $s.Base 'Agent\AutopilotMonitor.Agent.exe') | Should -Be 'running agent'
|
|
}
|
|
|
|
It 'skips with the current installer and leaves nothing behind' {
|
|
$s = New-Scenario
|
|
Add-Leftovers $s
|
|
$run = Invoke-Scenario $s -Script $script:loader12Path -Options @{ Install = $false }
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -BeNullOrEmpty
|
|
Get-Content -LiteralPath (Join-Path $s.Outside 'target\sentinel.txt') | Should -Be 'must survive'
|
|
}
|
|
}
|
|
|
|
Describe 'bootstrap MSI layouts, started in the folder the MSI installed' {
|
|
It '<Name> skips and leaves <Left>' -TestCases @(
|
|
@{ Name = 'MSI 1.2 (loader 1.3)'; File = 'Start-AutopilotMonitor.ps1'; Source = 'loader'; Arguments = @('-LogFileName', 'bootstrap-msi.log'); Left = 'nothing'; Tree = @() }
|
|
@{ Name = 'MSI 1.1 (loader 1.2)'; File = 'Start-AutopilotMonitor.ps1'; Source = 'loader12'; Arguments = @('-LogFileName', 'bootstrap-msi.log'); Left = 'nothing'; Tree = @() }
|
|
@{ Name = 'MSI 1.0 (own runner)'; File = 'Invoke-BootstrapDownload.ps1'; Source = 'msiRunner'; Arguments = @(); Left = 'only the log the runner holds open'; Tree = @('AutopilotMonitor\', 'AutopilotMonitor\Logs\', 'AutopilotMonitor\Logs\bootstrap-msi.log') }
|
|
) {
|
|
$s = New-Scenario
|
|
$msi = Join-Path $s.Base 'Msi'
|
|
New-Item -ItemType Directory -Path $msi -Force | Out-Null
|
|
$sourcePath = @{ loader = $script:loaderPath; loader12 = $script:loader12Path; msiRunner = $script:msiRunnerPath }[$Source]
|
|
Copy-Item -LiteralPath $sourcePath -Destination (Join-Path $msi $File)
|
|
$run = Invoke-Scenario $s -Script (Join-Path $msi $File) -Arguments $Arguments -WorkingDirectory $msi -Options @{ Install = $false }
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree $Tree)
|
|
}
|
|
|
|
It '<Name> installs' -TestCases @(
|
|
@{ Name = 'MSI 1.2 (loader 1.3)'; File = 'Start-AutopilotMonitor.ps1'; Source = 'loader'; Arguments = @('-LogFileName', 'bootstrap-msi.log') }
|
|
@{ Name = 'MSI 1.1 (loader 1.2)'; File = 'Start-AutopilotMonitor.ps1'; Source = 'loader12'; Arguments = @('-LogFileName', 'bootstrap-msi.log') }
|
|
@{ Name = 'MSI 1.0 (own runner)'; File = 'Invoke-BootstrapDownload.ps1'; Source = 'msiRunner'; Arguments = @() }
|
|
) {
|
|
$s = New-Scenario
|
|
$msi = Join-Path $s.Base 'Msi'
|
|
New-Item -ItemType Directory -Path $msi -Force | Out-Null
|
|
$sourcePath = @{ loader = $script:loaderPath; loader12 = $script:loader12Path; msiRunner = $script:msiRunnerPath }[$Source]
|
|
Copy-Item -LiteralPath $sourcePath -Destination (Join-Path $msi $File)
|
|
$run = Invoke-Scenario $s -Script (Join-Path $msi $File) -Arguments $Arguments -WorkingDirectory $msi
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree ($script:installedTree + 'AutopilotMonitor\Logs\bootstrap-msi.log' + 'AutopilotMonitor\Logs\bootstrap-script.log'))
|
|
}
|
|
}
|
|
|
|
Describe 'OOBE script, as the backend generates it' {
|
|
It 'installs the agent with the bootstrap token and leaves only the agent folder' {
|
|
$s = New-Scenario
|
|
Add-Leftovers $s
|
|
$run = Invoke-Scenario $s -Script $script:oobeScriptPath -Options @{ Iex = $true }
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree ($script:installedTree + 'AutopilotMonitor\Logs\oobe_bootstrap.log'))
|
|
Get-Tree $s.Temp | Should -BeNullOrEmpty
|
|
Get-Content -LiteralPath (Join-Path $s.Outside 'target\sentinel.txt') | Should -Be 'must survive'
|
|
$run.Trace | Should -Contain ('Invoke-AgentInstallMode|' + $s.Base + '\Agent\AutopilotMonitor.Agent.exe --install --no-auth --bootstrap-token 22222222-2222-2222-2222-222222222222 --tenant-id 11111111-1111-1111-1111-111111111111 exists=True')
|
|
@($run.Trace | Where-Object { $_ -like 'Test-FileCatalog|*' }).Count | Should -Be 1
|
|
}
|
|
|
|
It 'only runs --install again when the agent is there' {
|
|
$s = New-Scenario
|
|
Add-File (Join-Path $s.Base 'Agent\AutopilotMonitor.Agent.exe') 'running agent'
|
|
Add-File (Join-Path $s.Base 'State\session.id') 'session'
|
|
$run = Invoke-Scenario $s -Script $script:oobeScriptPath -Options @{ Iex = $true }
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree @(
|
|
'AutopilotMonitor\', 'AutopilotMonitor\Agent\', 'AutopilotMonitor\Agent\AutopilotMonitor.Agent.exe'
|
|
'AutopilotMonitor\Logs\', 'AutopilotMonitor\Logs\oobe_bootstrap.log', 'AutopilotMonitor\State\', 'AutopilotMonitor\State\session.id'
|
|
))
|
|
@($run.Trace | Where-Object { $_ -like 'Invoke-WebRequest|*' }).Count | Should -Be 0
|
|
@($run.Trace | Where-Object { $_ -like 'Invoke-AgentInstallMode|*' }).Count | Should -Be 1
|
|
}
|
|
|
|
It 'refuses to run without SYSTEM or administrator rights and creates nothing' {
|
|
$s = New-Scenario
|
|
$run = Invoke-Scenario $s -Script $script:oobeScriptPath -Options @{ Iex = $true; Elevated = $false }
|
|
|
|
$run.ExitCode | Should -Be 1
|
|
$run.StdOut | Should -Match 'Run this script from PowerShell as SYSTEM or administrator\. Nothing was changed\.'
|
|
Get-Tree $s.ProgramData | Should -BeNullOrEmpty
|
|
}
|
|
}
|
|
|
|
Describe 'publish pipeline and dev channel' {
|
|
BeforeAll {
|
|
$script:rendered = Join-Path $TestDrive 'rendered'
|
|
$script:pwsh = (Get-Command pwsh -CommandType Application -ErrorAction Stop | Select-Object -First 1).Source
|
|
$script:publish = Join-Path $script:repoRoot '.github\scripts\Publish-BootstrapScripts.ps1'
|
|
$script:publishOutput = @(& $script:pwsh -NoProfile -File $script:publish -DryRun -SignedOutputDir $script:rendered 2>&1 | ForEach-Object { "$_" })
|
|
if ($LASTEXITCODE -ne 0) { throw "Publish dry run failed: $($script:publishOutput -join [Environment]::NewLine)" }
|
|
}
|
|
|
|
# A loader that went live first would refuse the installer still being served.
|
|
It 'puts both installers before both loaders' {
|
|
$order = @($script:publishOutput | Where-Object { $_ -match '\[dry-run\] (\S+\.ps1) ' } | ForEach-Object { $Matches[1] })
|
|
$order[0..3] | Should -Be @('Install-AutopilotMonitor.ps1', 'Install-AutopilotMonitor-Dev.ps1', 'Start-AutopilotMonitor.ps1', 'Start-AutopilotMonitor-Dev.ps1')
|
|
@($script:publishOutput | Where-Object { $_ -like '*Installer accepted: AutopilotMonitor-Installer v*' }).Count | Should -Be 2
|
|
}
|
|
|
|
It 'refuses to publish an installer the loader would refuse: <Case>' -TestCases @(
|
|
@{ Case = 'below the minimum version'; Old = '$ScriptVersion = "2.7"'; New = '$ScriptVersion = "2.6"' }
|
|
@{ Case = 'without its role line'; Old = '$ScriptRole = "AutopilotMonitor-Installer"'; New = '# no role' }
|
|
@{ Case = 'with a second version line'; Old = '$ScriptVersion = "2.7"'; New = "`$ScriptVersion = `"2.7`"`n`$ScriptVersion = `"2.8`"" }
|
|
) {
|
|
$root = Join-Path $TestDrive ('repo' + [guid]::NewGuid().ToString('N').Substring(0, 6))
|
|
New-Item -ItemType Directory -Path (Join-Path $root 'scripts\Bootstrap') -Force | Out-Null
|
|
Copy-Item -LiteralPath $script:loaderPath -Destination (Join-Path $root 'scripts\Bootstrap')
|
|
$text = [System.IO.File]::ReadAllText($script:installerPath)
|
|
$text.Contains($Old) | Should -BeTrue
|
|
[System.IO.File]::WriteAllText((Join-Path $root 'scripts\Bootstrap\Install-AutopilotMonitor.ps1'), $text.Replace($Old, $New))
|
|
|
|
$output = @(& $script:pwsh -NoProfile -File $script:publish -DryRun -Channel dev -RepoRoot $root 2>&1 | ForEach-Object { "$_" })
|
|
|
|
$LASTEXITCODE | Should -Not -Be 0
|
|
($output -join "`n") | Should -Match 'The loader would refuse Install-AutopilotMonitor-Dev\.ps1'
|
|
($output -join "`n") | Should -Not -Match '\[dry-run\]'
|
|
}
|
|
|
|
It 'the dev loader fetches the dev installer, which installs the dev agent' {
|
|
$s = New-Scenario
|
|
Copy-Item -LiteralPath (Join-Path $script:rendered 'Install-AutopilotMonitor-Dev.ps1') -Destination $s.Server
|
|
Copy-Item -LiteralPath $script:agentZip -Destination (Join-Path $s.Server 'AutopilotMonitor-Agent-dev.zip')
|
|
Set-Content -LiteralPath (Join-Path $s.Server 'version-dev.json') -Value ('{"version":"2.0.9999","sha256":"' + $script:agentZipSha256 + '"}')
|
|
Remove-Item -LiteralPath (Join-Path $s.Server 'Install-AutopilotMonitor.ps1'), (Join-Path $s.Server 'AutopilotMonitor-Agent.zip'), (Join-Path $s.Server 'version.json')
|
|
$devLoader = Join-Path $s.Ime 'Start-AutopilotMonitor-Dev.ps1'
|
|
Copy-Item -LiteralPath (Join-Path $script:rendered 'Start-AutopilotMonitor-Dev.ps1') -Destination $devLoader
|
|
$run = Invoke-Scenario $s -Script $devLoader
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
@($run.Trace | Where-Object { $_ -like 'Invoke-*' }) | Should -Be @(
|
|
'Invoke-WebRequest|https://download.autopilotmonitor.com/agent/Install-AutopilotMonitor-Dev.ps1'
|
|
'Invoke-RestMethod|https://download.autopilotmonitor.com/agent/version-dev.json'
|
|
'Invoke-WebRequest|https://download.autopilotmonitor.com/agent/AutopilotMonitor-Agent-dev.zip'
|
|
('Invoke-AgentInstallMode|' + $s.Base + '\Agent\AutopilotMonitor.Agent.exe --install exists=True')
|
|
)
|
|
Get-Tree $s.ProgramData | Should -Be (Join-Tree ($script:installedTree + 'AutopilotMonitor\Logs\bootstrap-loader.log' + 'AutopilotMonitor\Logs\bootstrap-script.log'))
|
|
}
|
|
|
|
It 'the stable loader in its published form runs the stable installer in its published form' {
|
|
$s = New-Scenario
|
|
Copy-Item -LiteralPath (Join-Path $script:rendered 'Install-AutopilotMonitor.ps1') -Destination $s.Server -Force
|
|
$loader = Join-Path $s.Ime 'Start-AutopilotMonitor.ps1'
|
|
Copy-Item -LiteralPath (Join-Path $script:rendered 'Start-AutopilotMonitor.ps1') -Destination $loader
|
|
[System.IO.File]::ReadAllText($loader).Contains("`r`n") | Should -BeTrue
|
|
$run = Invoke-Scenario $s -Script $loader
|
|
|
|
$run.ExitCode | Should -Be 0
|
|
$run.StdErr | Should -BeNullOrEmpty
|
|
$run.StdOut | Should -Match 'Installer accepted: AutopilotMonitor-Installer v2\.7'
|
|
$run.StdOut | Should -Match 'Bootstrap Completed Successfully'
|
|
}
|
|
}
|