Add legacy sensor-proxy uninstall helper (#1363)

scripts/tests/test-uninstall-sensor-proxy.sh

@@ -0,0 +1,105 @@
+#!/usr/bin/env bash
+#
+# Smoke tests for scripts/uninstall-sensor-proxy.sh helper behavior.
+
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+UNINSTALL_SCRIPT="${ROOT_DIR}/scripts/uninstall-sensor-proxy.sh"
+
+if [[ ! -f "${UNINSTALL_SCRIPT}" ]]; then
+  echo "uninstall-sensor-proxy.sh not found at ${UNINSTALL_SCRIPT}" >&2
+  exit 1
+fi
+
+# shellcheck disable=SC1090
+source "${UNINSTALL_SCRIPT}"
+
+failures=0
+
+assert_success() {
+  local desc="$1"
+  shift
+  if "$@"; then
+    echo "[PASS] ${desc}"
+    return 0
+  else
+    echo "[FAIL] ${desc}" >&2
+    ((failures++))
+    return 1
+  fi
+}
+
+test_remove_managed_keys_from_authorized_keys_file_resolves_symlink_target() {
+  local tmpdir
+  tmpdir="$(mktemp -d)"
+  local real_auth="${tmpdir}/real_authorized_keys"
+  local linked_auth="${tmpdir}/authorized_keys"
+
+  cat > "${real_auth}" <<'EOF'
+ssh-ed25519 AAAAkeep keep
+command="sensors -j" ssh-ed25519 AAAAmanaged # pulse-managed-key
+command="sensors -j" ssh-ed25519 AAAAproxy # pulse-proxy-key
+EOF
+  ln -s "${real_auth}" "${linked_auth}"
+
+  remove_managed_keys_from_authorized_keys_file "$(resolve_path "${linked_auth}")"
+
+  if [[ "$(cat "${real_auth}")" != "ssh-ed25519 AAAAkeep keep" ]]; then
+    rm -rf "${tmpdir}"
+    return 1
+  fi
+
+  rm -rf "${tmpdir}"
+}
+
+test_cleanup_sensor_proxy_lines_in_conf_preserves_snapshot_sections() {
+  local tmpdir
+  tmpdir="$(mktemp -d)"
+  local conf="${tmpdir}/101.conf"
+
+  cat > "${conf}" <<'EOF'
+arch: amd64
+mp0: /run/pulse-sensor-proxy,mp=/mnt/pulse-proxy
+lxc.mount.entry: /run/pulse-sensor-proxy mnt/pulse-proxy none bind,create=dir 0 0
+rootfs: local-lvm:vm-101-disk-0,size=8G
+[snapshot]
+mp0: /run/pulse-sensor-proxy,mp=/mnt/pulse-proxy
+lxc.mount.entry: /run/pulse-sensor-proxy mnt/pulse-proxy none bind,create=dir 0 0
+EOF
+
+  cleanup_sensor_proxy_lines_in_conf "${conf}" "$(main_section_snapshot_line "${conf}")"
+
+  if awk 'BEGIN{snapshot=0} /^\[snapshot\]$/{snapshot=1} !snapshot {print}' "${conf}" | grep -q '^mp0: /run/pulse-sensor-proxy'; then
+    rm -rf "${tmpdir}"
+    return 1
+  fi
+  if awk 'BEGIN{snapshot=0} /^\[snapshot\]$/{snapshot=1} !snapshot {print}' "${conf}" | grep -q '^lxc\.mount\.entry: /run/pulse-sensor-proxy'; then
+    rm -rf "${tmpdir}"
+    return 1
+  fi
+  if ! awk 'f{print} /^\[snapshot\]$/{f=1}' "${conf}" | grep -q '^mp0: /run/pulse-sensor-proxy'; then
+    rm -rf "${tmpdir}"
+    return 1
+  fi
+  if ! awk 'f{print} /^\[snapshot\]$/{f=1}' "${conf}" | grep -q '^lxc\.mount\.entry: /run/pulse-sensor-proxy'; then
+    rm -rf "${tmpdir}"
+    return 1
+  fi
+
+  rm -rf "${tmpdir}"
+}
+
+main() {
+  assert_success "managed SSH key cleanup follows symlink targets" test_remove_managed_keys_from_authorized_keys_file_resolves_symlink_target
+  assert_success "config cleanup keeps snapshot-only sensor-proxy entries intact" test_cleanup_sensor_proxy_lines_in_conf_preserves_snapshot_sections
+
+  if (( failures > 0 )); then
+    echo "Total failures: ${failures}" >&2
+    return 1
+  fi
+
+  echo "All uninstall-sensor-proxy smoke tests passed."
+}
+
+main "$@"