-
Notifications
You must be signed in to change notification settings - Fork 49
/
Copy pathkitchen.yml
124 lines (108 loc) · 2.24 KB
/
kitchen.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
---
driver:
name: vagrant
provider: parallels
customize:
hypervisor-type: apple
provisioner:
product_name: chef
product_version: 18
multiple_converge: 2
verifier:
name: inspec
sudo: true
reporter:
- cli
- junit:/tmp/%{suite}-%{platform}-inspec.xml
inspec_tests:
- test/integration/default
platforms:
- name: monterey-x86
driver:
box: microsoft/macos-monterey
- name: ventura-x86
driver:
box: microsoft/macos-ventura
- name: ventura-arm
driver:
box: microsoft/macos-ventura-arm
- name: sonoma-x86
driver:
box: microsoft/macos-sonoma
- name: sonoma-arm
driver:
box: microsoft/macos-sonoma-arm
suites:
- name: software-updates
provisioner:
enforce_idempotency: true
run_list:
- recipe[macos_test::disable_software_updates]
verifier:
controls:
- updates-disabled
- name: spotlight
provisioner:
enforce_idempotency: true
run_list:
- recipe[macos_test::spotlight]
verifier:
controls:
- indexing-and-searching
- name: xcode-from-apple
run_list:
- recipe[macos_test::xcode_from_apple]
lifecycle:
pre_converge:
- remote: echo -n '<%= ENV['APPLEID_USERNAME'] %>' > ~/username
- remote: echo -n '<%= ENV['APPLEID_PASSWORD'] %>' > ~/password
verifier:
controls:
- xcode-and-simulators
- name: xcode-from-url
run_list:
- recipe[macos_test::xcode_from_url]
lifecycle:
pre_converge:
- remote: echo -n '<%= ENV['XCODE_URL'] %>' > ~/xcode
verifier:
controls:
- xcode-and-simulators
- name: command-line-tools
run_list:
- recipe[macos_test::command_line_tools]
verifier:
controls:
- command-line-tool-demand
- xcrun
- name: certificate
run_list:
- recipe[macos_test::certificate]
verifier:
controls:
- certificate-install
- name: users
run_list:
- recipe[macos_test::users]
verifier:
controls:
- admin-user
- standard-user
- hidden-user
- deleted-user
- secure-token-user
- name: keychain
run_list:
- recipe[macos_test::keychain]
verifier:
controls:
- keychain-creation
- login-keychain-creation
- name: remote-access
provisioner:
enforce_idempotency: true
run_list:
- recipe[macos_test::remote_access]
verifier:
controls:
- remote-control