ci(windows): test using GitHub Actions

Author: myii

.github/workflows/kitchen.yml

@@ -0,0 +1,39 @@
+---
+name: CI
+
+'on': [push, pull_request]
+
+env:
+  machine_user: kitchen
+  machine_pass: Pass@word1
+  machine_port: 5985
+  KITCHEN_LOCAL_YAML: kitchen.github.yml
+
+jobs:
+  build:
+    runs-on: windows-latest
+
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/cache@v1
+        with:
+          path: vendor/bundle
+          key: ${{ runner.os }}-gems-${{ hashFiles('**/Gemfile.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-gems-
+      - shell: powershell
+        run: |
+          $password = ConvertTo-SecureString $env:machine_pass -AsPlainText -Force
+          New-LocalUser $env:machine_user -Password $password
+          Add-LocalGroupMember -Group "Administrators" -Member $env:machine_user
+      - shell: powershell
+        run: >
+          Set-WSManQuickConfig -Force;
+          Set-WSManInstance -ResourceURI winrm/config/service
+          -ValueSet @{AllowUnencrypted="true"}
+      - run: gem install bundler --quiet --no-document
+      - name: Bundle install
+        run: |
+          bundle config path vendor/bundle
+          bundle install --jobs 4 --retry 3
+      - run: bundle exec kitchen test

Gemfile

@@ -5,3 +5,7 @@ source 'https://rubygems.org'
 gem 'kitchen-docker', '>= 2.9'
 gem 'kitchen-inspec', '>= 1.1'
 gem 'kitchen-salt', '>= 0.6.0'
+
+group :vagrant do
+  gem 'kitchen-vagrant'
+end

Gemfile.lock

@@ -287,6 +287,8 @@ GEM
     kitchen-salt (0.6.3)
       hashie (>= 3.5)
       test-kitchen (>= 1.4)
+    kitchen-vagrant (1.6.1)
+      test-kitchen (>= 1.4, < 3)
     libyajl2 (1.2.0)
     license-acceptance (1.0.19)
       pastel (~> 0.7)
@@ -526,6 +528,7 @@ DEPENDENCIES
   kitchen-docker (>= 2.9)
   kitchen-inspec (>= 1.1)
   kitchen-salt (>= 0.6.0)
+  kitchen-vagrant
 
 BUNDLED WITH
    2.1.2

kitchen.github.yml

@@ -0,0 +1,16 @@
+---
+driver:
+  name: proxy
+  host: localhost
+  reset_command: "exit 0"
+  port: 5985
+  username: kitchen
+  password: Pass@word1
+
+platforms:
+  - name: windows-81-latest-py3
+
+provisioner:
+  salt_install: bootstrap
+  salt_bootstrap_options: -pythonVersion 3
+  init_environment: ""

kitchen.vagrant.yml

@@ -0,0 +1,14 @@
+# -*- coding: utf-8 -*-
+# vim: ft=yaml
+---
+driver:
+  name: vagrant
+
+platforms:
+  - name: windows-81-latest-py3
+    driver:
+      box: techneg/win81x64-pro-salt
+      gui: false
+      linked_clone: true
+    provisioner:
+      init_environment: ""

kitchen.yml

@@ -333,3 +333,21 @@ suites:
     verifier:
       inspec_tests:
         - path: test/integration/default
+  - name: windows
+    includes:
+      - windows-81-latest-py3
+    provisioner:
+      state_top:
+        base:
+          '*':
+            - packages.chocolatey
+      pillars:
+        top.sls:
+          base:
+            '*':
+              - packages
+      pillars_from_files:
+        packages.sls: test/salt/pillar/windows.sls
+    verifier:
+      inspec_tests:
+        - path: test/integration/windows

pillar.example

@@ -64,14 +64,14 @@ packages:
 
   chocolatey:
     wanted:
-      firefox:
-        install_args: "l=fr-FR"
+      Firefox:
+        package_args: "/l:en-GB"
       packagename:
         version: '12.04'
         source: 'mychocolatey/source'
         force: true
     unwanted:
-      - googlechrome
+      - GoogleChrome
 
   snaps:
     wanted:

test/integration/windows/README.md

@@ -0,0 +1,50 @@
+# InSpec Profile: `windows`
+
+This shows the implementation of the `windows` InSpec [profile](https://github.com/inspec/inspec/blob/master/docs/profiles.md).
+
+## Verify a profile
+
+InSpec ships with built-in features to verify a profile structure.
+
+```bash
+$ inspec check windows
+Summary
+-------
+Location: windows
+Profile: profile
+Controls: 4
+Timestamp: 2019-06-24T23:09:01+00:00
+Valid: true
+
+Errors
+------
+
+Warnings
+--------
+```
+
+## Execute a profile
+
+To run all **supported** controls on a local machine use `inspec exec /path/to/profile`.
+
+```bash
+$ inspec exec windows
+..
+
+Finished in 0.0025 seconds (files took 0.12449 seconds to load)
+8 examples, 0 failures
+```
+
+## Execute a specific control from a profile
+
+To run one control from the profile use `inspec exec /path/to/profile --controls name`.
+
+```bash
+$ inspec exec windows --controls package
+.
+
+Finished in 0.0025 seconds (files took 0.12449 seconds to load)
+1 examples, 0 failures
+```
+
+See an [example control here](https://github.com/inspec/inspec/blob/master/examples/profile/controls/example.rb).

test/integration/windows/controls/pkgs_spec.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+pkgs_wanted = %w[Firefox jq notepadplusplus]
+pkgs_unwanted = %w[GoogleChrome hg]
+
+### WANTED
+control 'Wanted packages' do
+  title 'should be installed'
+
+  pkgs_wanted.each do |p|
+    describe chocolatey_package(p) do
+      it { should be_installed }
+    end
+  end
+end
+
+### UNWANTED
+control 'Unwanted packages' do
+  title 'should be uninstalled'
+
+  pkgs_unwanted.each do |p|
+    describe chocolatey_package(p) do
+      it { should_not be_installed }
+    end
+  end
+end

test/integration/windows/inspec.yml

@@ -0,0 +1,10 @@
+# -*- coding: utf-8 -*-
+# vim: ft=yaml
+---
+name: windows
+title: packages formula
+maintainer: SaltStack Formulas
+license: Apache-2.0
+summary: Verify that the packages formula is setup and configured correctly (on Windows)
+supports:
+  - platform: windows