unit-test.sh

#!/bin/bash

# setup Bash environment
set -eufx -o pipefail

# setup variables
KEY_FILE_PATH=test.key
LOCKBOX_PATH=/tmp/lockbox
TOTAL_NUMBER_FILES=100
TEST_FILE_NUMBER=10
ROOT_FILE_NUMBER=42
LARGE_FILE_NAME=large.bin
MANIFEST_FILE_NAME=manifest.txt
UNAME_S=$(uname -s)

# setup contents of lockbox
rm -rf "$LOCKBOX_PATH" || true
mkdir "$LOCKBOX_PATH"
for I in $(seq $TOTAL_NUMBER_FILES); do
    echo "Test $I" > "$LOCKBOX_PATH/$I"
done
if [ "$(uname)" == "Darwin" ]; then
    sudo chown root:wheel "$LOCKBOX_PATH/$ROOT_FILE_NUMBER"
elif [ "${UNAME_S:0:5}" == "Linux" ]; then
    sudo chown root:root "$LOCKBOX_PATH/$ROOT_FILE_NUMBER"
else
    echo "Unknown OS"
    exit 1
fi

# setup large file contents.
# must be larger than 8KiB (larger than block size in OpenSSL's enc).
head -c 10000 /dev/urandom > "$LARGE_FILE_NAME"
cp -v "$LARGE_FILE_NAME" "$LOCKBOX_PATH/$LARGE_FILE_NAME"
# leave original copy in CWD for final comparison.

# print summary info about lockbox
ls -li "$LOCKBOX_PATH"
xxd -g4 "$LOCKBOX_PATH/$TEST_FILE_NUMBER"
xxd -g4 "$LOCKBOX_PATH/$ROOT_FILE_NUMBER"

# record inode and size info
ORIG_INODE=$(ls -i "$LOCKBOX_PATH/$TEST_FILE_NUMBER" | cut -d ' ' -f 1)
ORIG_SIZE=$(wc -c < "$LOCKBOX_PATH/$TEST_FILE_NUMBER")
ORIG_LARGE_INODE=$(ls -i "$LOCKBOX_PATH/$LARGE_FILE_NAME" | cut -d ' ' -f 1)
ORIG_LARGE_SIZE=$(wc -c < "$LOCKBOX_PATH/$LARGE_FILE_NAME")

# generate key to be used for encryption
./gen_key.sh "$KEY_FILE_PATH"
# encrypt lockbox
./lockbox.sh -e "$LOCKBOX_PATH" "$(xxd -p "$KEY_FILE_PATH" | tr -d '\n')" | tee "$MANIFEST_FILE_NAME"

# print summary info about lockbox
ls -li "$LOCKBOX_PATH"
xxd -g4 "$LOCKBOX_PATH/$TEST_FILE_NUMBER"
xxd -g4 "$LOCKBOX_PATH/$ROOT_FILE_NUMBER"

# verify that inode and size are same
NEW_INODE=$(ls -i "$LOCKBOX_PATH/$TEST_FILE_NUMBER" | cut -d ' ' -f 1)
test "$NEW_INODE" -eq "$ORIG_INODE"
NEW_SIZE=$(wc -c < "$LOCKBOX_PATH/$TEST_FILE_NUMBER")
test "$NEW_SIZE" -eq "$ORIG_SIZE"
NEW_LARGE_INODE=$(ls -i "$LOCKBOX_PATH/$LARGE_FILE_NAME" | cut -d ' ' -f 1)
test "$NEW_LARGE_INODE" -eq "$ORIG_LARGE_INODE"
NEW_LARGE_SIZE=$(wc -c < "$LOCKBOX_PATH/$LARGE_FILE_NAME")
test "$NEW_LARGE_SIZE" -eq "$ORIG_LARGE_SIZE"

# verify that file owned by root has not been modified
diff -q "$LOCKBOX_PATH/$ROOT_FILE_NUMBER" <(echo "Test $ROOT_FILE_NUMBER")

# verify that file contents have been changed
if diff -q "$LOCKBOX_PATH/$TEST_FILE_NUMBER" <(echo "Test $TEST_FILE_NUMBER"); then false; fi
if diff -q "$LOCKBOX_PATH/$LARGE_FILE_NAME" "$LARGE_FILE_NAME"; then false; fi

# decrypt lockbox
./lockbox.sh -d "$MANIFEST_FILE_NAME" "$(xxd -p "$KEY_FILE_PATH" | tr -d '\n')"

# print summary info about lockbox
ls -li "$LOCKBOX_PATH"
xxd -g4 "$LOCKBOX_PATH/$TEST_FILE_NUMBER"
xxd -g4 "$LOCKBOX_PATH/$ROOT_FILE_NUMBER"

# verify that inode and size are same
NEW_INODE=$(ls -i "$LOCKBOX_PATH/$TEST_FILE_NUMBER" | cut -d ' ' -f 1)
test "$NEW_INODE" -eq "$ORIG_INODE"
NEW_SIZE=$(wc -c < "$LOCKBOX_PATH/$TEST_FILE_NUMBER")
test "$NEW_SIZE" -eq "$ORIG_SIZE"
NEW_LARGE_INODE=$(ls -i "$LOCKBOX_PATH/$LARGE_FILE_NAME" | cut -d ' ' -f 1)
test "$NEW_LARGE_INODE" -eq "$ORIG_LARGE_INODE"
NEW_LARGE_SIZE=$(wc -c < "$LOCKBOX_PATH/$LARGE_FILE_NAME")
test "$NEW_LARGE_SIZE" -eq "$ORIG_LARGE_SIZE"

# verify that all files are back to original contents
for I in $(seq $TOTAL_NUMBER_FILES); do
    diff -q "$LOCKBOX_PATH/$I" <(echo "Test $I")
done
diff -q "$LARGE_FILE_NAME" "$LOCKBOX_PATH/$LARGE_FILE_NAME"

# print success
echo "Test succeeded"