mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-10-26 13:39:47 +00:00
pulse-triage[bot]
63fcae0a3a
Replace the rejected global host-network proposal with the unchanged private namespace on every platform, including native linux-386. Carry successful rows and omitted VMIDs through operation v2 without clearing degraded health or renewing omitted measurements; retain strict complete-only v1 compatibility. Restart the installer-owned helper only after isolated-unit and socket checks, and document the unresolved pmxcfs IPC limitation rather than claiming PVE recovery. Change-source: pulse-maintainer
50 lines
1.7 KiB
Go
50 lines
1.7 KiB
Go
package installtests
|
|
|
|
import (
|
|
"bytes"
|
|
"os"
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
func TestSecureRuntimePlatformMatrixRemainsExplicitAndShipped(t *testing.T) {
|
|
canonical, err := os.ReadFile(repoFile("docs", "AGENT_SECURITY.md"))
|
|
if err != nil {
|
|
t.Fatalf("read canonical agent security documentation: %v", err)
|
|
}
|
|
shipped, err := os.ReadFile(repoFile("frontend-modern", "public", "docs", "AGENT_SECURITY.md"))
|
|
if err != nil {
|
|
t.Fatalf("read shipped agent security documentation: %v", err)
|
|
}
|
|
if !bytes.Equal(canonical, shipped) {
|
|
t.Fatal("shipped Agent Security documentation differs from the canonical source")
|
|
}
|
|
|
|
content := string(canonical)
|
|
required := []string{
|
|
"### Safe-profile support and qualification matrix",
|
|
"Standard Linux systemd host telemetry and collector update",
|
|
"Linux SMART telemetry",
|
|
"Proxmox node-local LXC filesystem telemetry",
|
|
"Rootful Docker or Podman inventory",
|
|
"Collector-owned rootless Docker or Podman",
|
|
"Separate runner package update and package-cache cleanup",
|
|
"Separate runner Proxmox guest and container lifecycle/update actions",
|
|
"Appliance, non-systemd, Windows, and macOS host-agent profiles",
|
|
"Implemented, unqualified",
|
|
"collectionMode: typed-helper-summary",
|
|
"currently explicit rather than the installer default.",
|
|
"Residual owner and removal condition",
|
|
"systemd does not enforce `RestrictAddressFamilies` on native 32-bit x86",
|
|
"Do not\nremove `PrivateNetwork` to work around a telemetry failure.",
|
|
"helper's private network namespace",
|
|
"operation v2 preserves the collected",
|
|
"Unavailable on hosts where pmxcfs abstract IPC is hidden",
|
|
}
|
|
for _, marker := range required {
|
|
if !strings.Contains(content, marker) {
|
|
t.Errorf("secure-runtime platform matrix is missing %q", marker)
|
|
}
|
|
}
|
|
}
|