kitchen.yml

---
driver:
  name: vagrant

provisioner:
  name: chef_infra
  product_name: <%= ENV['CHEF_PRODUCT_NAME'] || 'chef' %>
  chef_license: accept-no-persist
  multiple_converge: 2
  enforce_idempotency: true
  deprecations_as_errors: true
  product_version: <%= ENV['CHEF_VERSION'] || 'latest' %>
  log_level: <%= ENV['CHEF_LOG_LEVEL'] || 'auto' %>
  # Allow reboots
  max_retries: 60
  wait_for_retry: 180
  root_path: /var/tmp/kitchen

verifier:
  name: inspec

platforms:
  - name: almalinux-8
  - name: almalinux-9
  - name: amazonlinux-2
  - name: amazonlinux-2023
  - name: centos-stream-9
  - name: debian-11
  - name: debian-12
  - name: fedora-latest
  - name: oracle-8
  - name: oracle-9
  - name: rockylinux-8
  - name: rockylinux-9
  - name: ubuntu-20.04
  - name: ubuntu-22.04
  - name: ubuntu-24.04

suites:
  - name: enforcing
    run_list:
      - recipe[selinux_test::install]
      - recipe[selinux_test::enforcing]
      - recipe[selinux_test::debian_enforcing_prepare]
      - recipe[selinux_test::module_create]
      - recipe[selinux_test::module_remove]
      - recipe[selinux_test::boolean]
    provisioner:
      # not idempotent on debian/ubuntu due to debian_enforcing_prepare & module_create/remove
      multiple_converge: 1
      enforce_idempotency: false
  - name: permissive
    run_list:
      - recipe[selinux_test::install]
      - recipe[selinux::permissive]
      - recipe[selinux_test::module_create]
      - recipe[selinux_test::boolean]
  - name: disabled
    run_list:
      - recipe[selinux_test::install]
      - recipe[selinux::disabled]
  - name: port
    run_list:
      - recipe[selinux_test::install]
      - recipe[selinux::permissive]
      - recipe[selinux_test::port]
  - name: fcontext
    run_list:
      - recipe[selinux_test::install]
      - recipe[selinux::permissive]
      - recipe[selinux_test::fcontext]
  - name: permissive_resource
    run_list:
      - recipe[selinux_test::install]
      - recipe[selinux::permissive]
      - recipe[selinux_test::permissive_resource]
  - name: user_login_mapping
    run_list:
      - recipe[selinux_test::install]
      - recipe[selinux::permissive]
      - recipe[selinux_test::user]
      - recipe[selinux_test::login]