poc2_worked

tests/test_single_volume_layout.py

@@ -0,0 +1,23 @@
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+
+
+def test_entrypoint_folds_mutable_suricata_state_under_data():
+    script = (ROOT / "scripts" / "entrypoint.sh").read_text()
+    assert '${PERSIST_ROOT}/logs/suricata' in script
+    assert '${PERSIST_ROOT}/lib/suricata' in script
+    assert 'ln -s "$PERSIST_LOG_DIR" /var/log/suricata' not in script
+    assert 'ln -s "$PERSIST_LIB_DIR" /var/lib/suricata' not in script
+
+
+def test_eve_default_is_persistent():
+    config = (ROOT / "app" / "config.py").read_text()
+    assert '/data/logs/suricata/eve.json' in config
+
+
+def test_rule_updater_uses_persistent_suricata_data_dir():
+    script = (ROOT / "scripts" / "update-rules.sh").read_text()
+    assert 'PERSIST_LIB_DIR="${SURICATA_PERSIST_LIB_DIR:-/data/lib/suricata}"' in script
+    assert '-D "$PERSIST_LIB_DIR"' in script
+    assert 'default-rule-path=$PERSIST_LIB_DIR/rules' in script