New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

inspec.lock not loaded from tarball profiles #1322

Closed
alexpop opened this Issue Nov 24, 2016 · 0 comments

Comments

Projects
None yet
2 participants
@alexpop
Contributor

alexpop commented Nov 24, 2016

acme-inspec-profile.tar.gz

Using this ^ profile as an example inspec check/exec/json, the inspec.lock file is not found and because of that vendored dependencies are not used.

Output:

$ rm -rf ~/.inspec/cache; bundle exec inspec check ~/tmp2/acme-inspec-profile.tar.gz -l debug
[2016-11-24T16:22:19+00:00] DEBUG: Resolve /Users/apop/tmp2/acme-inspec-profile.tar.gz into cache /Users/apop/.inspec/cache
[2016-11-24T16:22:19+00:00] DEBUG: Dependency does not exist in the cache /Users/apop/tmp2/acme-inspec-profile.tar.gz
[2016-11-24T16:22:19+00:00] DEBUG: Copy /Users/apop/.inspec/cache/._ba076c553ff3b839a15dff7813a53d6bb1f8c269a53607ebb30e0fe2b0a0d8e1.tar.gz to cache directory
[2016-11-24T16:22:19+00:00] DEBUG: Copy /Users/apop/.inspec/cache/ba076c553ff3b839a15dff7813a53d6bb1f8c269a53607ebb30e0fe2b0a0d8e1.tar.gz to cache directory
[2016-11-24T16:22:19+00:00] DEBUG: Copy /Users/apop/.inspec/cache/._fd3ee6bdf16d529ef9031d7bbdf23052c1b9635e8799a52a34bc1f1fe07ef921.tar.gz to cache directory
[2016-11-24T16:22:19+00:00] DEBUG: Copy /Users/apop/.inspec/cache/fd3ee6bdf16d529ef9031d7bbdf23052c1b9635e8799a52a34bc1f1fe07ef921.tar.gz to cache directory
I, [2016-11-24T16:22:19.243807 #40340]  INFO -- : Checking profile in /Users/apop/tmp2/acme-inspec-profile.tar.gz
I, [2016-11-24T16:22:19.243927 #40340]  INFO -- : Metadata OK.
[2016-11-24T16:22:19+00:00] DEBUG: Starting traversal of dependencies ["linux-patch-benchmark", "windows-patch-benchmark"]
[2016-11-24T16:22:19+00:00] WARN: URL target https://github.com/dev-sec/linux-patch-benchmark.git transformed to https://github.com/dev-sec/linux-patch-benchmark/archive/master.tar.gz. Consider using the git fetcher
[2016-11-24T16:22:19+00:00] DEBUG: Fetching URL: https://github.com/dev-sec/linux-patch-benchmark/archive/master.tar.gz
[2016-11-24T16:22:20+00:00] DEBUG: Archive stored at temporary location: /var/folders/hl/zf_j1bvs7_b18rj7bbsm35p00000gp/T/inspec-dl-20161124-40340-wr2za4.tar.gz
[2016-11-24T16:22:20+00:00] DEBUG: Dependency does not exist in the cache {:cwd=>"./", :backend=>#<#<Class:0x007f982ba01778>:0x007f982b9e2c88>, :name=>"linux-patch-benchmark", :url=>"https://github.com/dev-sec/linux-patch-benchmark.git"}
[2016-11-24T16:22:20+00:00] DEBUG: Fetched archive moved to: /Users/apop/.inspec/cache/54e9cd10a75f0ce7060bd67ff1d24b0c3e9255a1513adde11d9f72aa4bd1962e.tar.gz
[2016-11-24T16:22:20+00:00] DEBUG: Using cached dependency for {:cwd=>"./", :backend=>#<#<Class:0x007f982ba01778>:0x007f982b9e2c88>, :name=>"linux-patch-benchmark", :url=>"https://github.com/dev-sec/linux-patch-benchmark.git"}
[2016-11-24T16:22:20+00:00] DEBUG: Adding dependency linux-patch-benchmark ({:url=>"https://github.com/dev-sec/linux-patch-benchmark/archive/master.tar.gz", :sha256=>"54e9cd10a75f0ce7060bd67ff1d24b0c3e9255a1513adde11d9f72aa4bd1962e"})
[2016-11-24T16:22:20+00:00] WARN: URL target https://github.com/dev-sec/windows-patch-benchmark.git transformed to https://github.com/dev-sec/windows-patch-benchmark/archive/master.tar.gz. Consider using the git fetcher
[2016-11-24T16:22:20+00:00] DEBUG: Fetching URL: https://github.com/dev-sec/windows-patch-benchmark/archive/master.tar.gz
[2016-11-24T16:22:22+00:00] DEBUG: Archive stored at temporary location: /var/folders/hl/zf_j1bvs7_b18rj7bbsm35p00000gp/T/inspec-dl-20161124-40340-bv0xlf.tar.gz
[2016-11-24T16:22:22+00:00] DEBUG: Using cached dependency for {:cwd=>"./", :backend=>#<#<Class:0x007f982ba01778>:0x007f982b9e2c88>, :name=>"windows-patch-benchmark", :url=>"https://github.com/dev-sec/windows-patch-benchmark.git"}
[2016-11-24T16:22:22+00:00] DEBUG: Using cached dependency for {:cwd=>"./", :backend=>#<#<Class:0x007f982ba01778>:0x007f982b9e2c88>, :name=>"windows-patch-benchmark", :url=>"https://github.com/dev-sec/windows-patch-benchmark.git"}
[2016-11-24T16:22:22+00:00] DEBUG: Adding dependency windows-patch-benchmark ({:url=>"https://github.com/dev-sec/windows-patch-benchmark/archive/master.tar.gz", :sha256=>"fd3ee6bdf16d529ef9031d7bbdf23052c1b9635e8799a52a34bc1f1fe07ef921"})
[2016-11-24T16:22:22+00:00] DEBUG: Dependency traversal complete.
[2016-11-24T16:22:22+00:00] DEBUG: Using cached dependency for {:url=>"https://github.com/dev-sec/linux-patch-benchmark/archive/master.tar.gz", :sha256=>"54e9cd10a75f0ce7060bd67ff1d24b0c3e9255a1513adde11d9f72aa4bd1962e", :backend=>#<#<Class:0x007f982ba01778>:0x007f982b9e2c88>, :attributes=>nil}
[2016-11-24T16:22:22+00:00] DEBUG: Loading libraries/linux_updates.rb into #<Inspec::ProfileContext:0x007f982d243a48>
[2016-11-24T16:22:22+00:00] DEBUG: Using cached dependency for {:url=>"https://github.com/dev-sec/windows-patch-benchmark/archive/master.tar.gz", :sha256=>"fd3ee6bdf16d529ef9031d7bbdf23052c1b9635e8799a52a34bc1f1fe07ef921", :backend=>#<#<Class:0x007f982ba01778>:0x007f982b9e2c88>, :attributes=>nil}
[2016-11-24T16:22:22+00:00] DEBUG: Loading libraries/windows_updates.rb into #<Inspec::ProfileContext:0x007f982c9b5098>
[2016-11-24T16:22:22+00:00] DEBUG: Loading linux-patch-benchmark-master/controls/patches.rb into #<Inspec::ProfileContext:0x007f982d243a48>
[2016-11-24T16:22:22+00:00] DEBUG: Loading windows-patch-benchmark-master/controls/patches.rb into #<Inspec::ProfileContext:0x007f982c9b5098>
[2016-11-24T16:22:22+00:00] DEBUG: Loading good/controls/._patch.rb into #<Inspec::ProfileContext:0x007f982c35fc70>
[2016-11-24T16:22:22+00:00] DEBUG: Loading good/controls/patch.rb into #<Inspec::ProfileContext:0x007f982c35fc70>
I, [2016-11-24T16:22:22.620609 #40340]  INFO -- : Found 7 controls.
W, [2016-11-24T16:22:22.620644 #40340]  WARN -- : Control verify-kb has no description
W, [2016-11-24T16:22:22.620658 #40340]  WARN -- : Control important-count has no description
W, [2016-11-24T16:22:22.620668 #40340]  WARN -- : Control important-patches has no description
W, [2016-11-24T16:22:22.620677 #40340]  WARN -- : Control important-patches has no tests defined
W, [2016-11-24T16:22:22.620686 #40340]  WARN -- : Control optional-count has no description
W, [2016-11-24T16:22:22.620697 #40340]  WARN -- : Control optional-patches has no description
W, [2016-11-24T16:22:22.620716 #40340]  WARN -- : Control optional-patches has no tests defined
W, [2016-11-24T16:22:22.620724 #40340]  WARN -- : Control verify-patches has no description
W, [2016-11-24T16:22:22.620733 #40340]  WARN -- : Control patches has no description
W, [2016-11-24T16:22:22.620741 #40340]  WARN -- : Control patches has no tests defined
Location:    /Users/apop/tmp2/acme-inspec-profile.tar.gz
Profile:     acme-inspec-profile
Controls:    7
Timestamp:   2016-11-24T16:22:19+00:00
Valid:       true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment