Orchestrata Ultimate › Tests › Reference › scripts › test_check_incus_not_docker
Tests reference — tests/scripts/test_check_incus_not_docker.py
Module of tests/scripts, split out because the directory page would be too large.
Prose pending.
tests/scripts/test_check_incus_not_docker.py
source · 36 tests · 767 lines
Tests for scripts/check_incus_not_docker.py — the RUL-004 gate ("Incus
| Kind | Name | Line | Description |
|---|---|---|---|
| function | test_clean_tree_passes |
78 | |
| function | test_systemd_execstart_docker_compose_fails |
95 | The design's PRIMARY violation example, verbatim. |
| function | test_systemd_execstartpre_shell_string_fails |
113 | |
| function | test_shell_docker_run_fails |
128 | |
| function | test_docker_nested_through_incus_exec_still_fails |
142 | incus exec c -- docker compose up is NOT an escape hatch. |
| function | test_shell_comments_and_heredoc_bodies_are_stripped |
157 | |
| function | test_echoed_prose_in_shell_is_silent_but_chained_command_is_not |
175 | |
| function | test_docker_dependency_probe_fails |
195 | |
| function | test_incus_invocation_is_never_flagged |
212 | |
| function | test_subprocess_argv_docker_fails |
232 | The design's SECONDARY example — the rtm pattern crossing into scope. |
| function | test_subprocess_shell_string_and_aliased_import_fail |
252 | |
| function | test_docker_inside_bash_c_argv_element_fails |
268 | |
| function | test_asyncio_create_subprocess_exec_docker_fails |
284 | |
| function | test_docker_sdk_import_fails |
300 | |
| function | test_docker_detection_predicates_fail |
312 | |
| function | test_orchestrata_tools_is_exempt_from_detection_predicates_only |
334 | The one named, reasoned exemption: that package DESCRIBES foreign |
| function | test_unparseable_python_that_could_have_mattered_is_disclosed |
368 | A file the gate cannot grade is disclosed, never silently passed. |
| function | test_python_comment_docstring_and_prose_literal_are_silent |
384 | The three classes a naive regex gets wrong, isolated from the repo. |
| function | test_docker_host_and_socket_in_config_fail |
435 | |
| function | test_commented_out_docker_host_is_silent |
458 | |
| function | test_docker_io_image_reference_in_terraform_fails |
471 | |
| function | test_docker_dependency_in_pyproject_fails |
485 | |
| function | test_compose_or_dockerfile_introduced_in_scope_fails |
505 | |
| function | test_repo_root_dockerfile_is_flagged |
518 | |
| function | test_allowlisted_trees_are_silent |
533 | |
| function | test_allowlist_protects_files_never_invocations_from_live_code |
554 | The seam that stops the allowlist becoming an evasion route. |
| function | test_every_allowlist_entry_carries_a_justification_and_source |
570 | |
| function | test_quarantine_is_reported_without_blocking |
582 | |
| function | test_quarantine_absent_when_the_files_are_gone |
609 | |
| function | test_cli_exits_nonzero_and_prints_quarantine |
621 | |
| function | test_cli_json_publishes_the_auditable_allowlist |
645 | |
| function | test_script_satisfies_the_rulings_lint_gate_grammar |
664 | - gate scripts/check_incus_not_docker.py RUL-004 must pass |
| function | test_prefilter_never_swallows_a_violation |
680 | The speed prefilter is a NECESSARY CONDITION, not a detection rule. |
| function | test_live_repository_is_clean |
715 | |
| function | test_live_control_files_are_never_flagged |
724 | Each of these is a distinct false-positive class with a live instance. |
| function | test_live_allowlisted_trees_resolve_to_an_entry |
745 |