# GNU Guix --- Functional package management for GNU
# Copyright © 2023 Maxim Cournoyer <maxim@guixotic.coop>
# Copyright © 2023-2024, 2026 Ludovic Courtès <ludo@gnu.org>
#
# This file is part of GNU Guix.
#
# GNU Guix is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or (at
# your option) any later version.
#
# GNU Guix is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

#
# Test the 'guix time-machine' command-line utility.
#

channels_file="channels-test-$$.scm"
log_file="log-test-$$.log"
trap "rm -f $channels_file $log_file" EXIT

cat > "$channels_file" <<EOF
(system "echo rm -rf /")
%default-channels
EOF

# This must fail: 'system' is not among the available bindings in the
# evaluation sandbox.
guix time-machine -C "$channels_file" && false

cat > "$channels_file" <<EOF
(use-modules (system foreign))
%default-channels
EOF

# Likewise, 'use-modules' is not available.
guix time-machine -C "$channels_file" && false

# Get 'time-machine' to download a channel file with an untrusted channel.
# Check that this fails with a "'guix' is not trusted" message.
cat > "$channels_file" <<EOF
(use-modules (guix tests http)
             (guix diagnostics)
             (guix scripts time-machine))

(define channels
  '(list (channel
           (name 'guix)
           (url "https://example.org/evil/guix.git")
           (branch "devel")
           (commit "cabba9e900d2350aef42e65643de78500b2aad06")
           (introduction
            (make-channel-introduction
             "badcafef1d5c170db68aa4bbfb77024fdc468ed3"
             (openpgp-fingerprint
              "CABB A9EE 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5"))))))

(with-http-server (list (list 200 (object->string channels)))
  (let ((error (open-output-string)))
    (catch 'quit
      (lambda ()
        (parameterize ((guix-warning-port error))
          (guix-time-machine "-C" (%local-url) "--" "describe")
          (primitive-exit 1)))
      (lambda _
        (exit (->bool (string-contains (get-output-string error)
                                       "'guix' is not trusted")))))))
EOF
guix repl -- "$channels_file"

# Check that using 'time-machine' and 'downloaded-channels' with '#:append'
# correctly verifies if the appended channels are untrusted.  Check that this
# fails with a "'guix' is not trusted" message.
cat > "$channels_file" <<EOF
(use-modules (guix tests http)
             (guix diagnostics)
             (guix scripts time-machine))

(define channels
  '(list))

(with-http-server (list (list 200 (object->string channels)))
  (let* ((error (open-output-string))
         (port (mkstemp "guix-channels-XXXXXX"))
         (file (port-filename port)))
    (write (quasiquote
            (downloaded-channels
             ,(%local-url)
             #:append
             (list
              (channel
                (name 'guix) ;; this is an untrusted channel
                (url ,(%local-url)) ;; url doesn't matter
                (branch "devel")
                (commit "cabba9e900d2350aef42e65643de78500b2aad06")
                (introduction
                 (make-channel-introduction
                  "badcafef1d5c170db68aa4bbfb77024fdc468ed3"
                  (openpgp-fingerprint
                   "CABB A9EE 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5"))))))) port)
    (close-port port)
    (catch 'quit
      (lambda ()
        (parameterize ((guix-warning-port error))
          (guix-time-machine "--allow-untrusted-channels=no" "-C" file "--" "describe")
          (primitive-exit 1)))
      (lambda _
        (delete-file file)
        (exit (->bool (string-contains (get-output-string error)
                                       "'guix' is not trusted")))))))
EOF
guix repl -- "$channels_file"

# Check '--max-indirections' and 'downloaded-channels'.
cat > "$channels_file" <<EOF
(downloaded-channels "https://example.org/channels.scm")
EOF

guix time-machine -C "$channels_file" --max-indirections=0 2> "$log_file" && false
grep "too many channel indirections" "$log_file"

# Get 'time-machine' to download a channel file without an introduction, this
# time via 'downloaded-channels'.  Check that this fails with an appropriate
# error message.
cat > "$channels_file" <<EOF
(use-modules (guix tests http)
             (guix diagnostics)
             (guix scripts time-machine))

(define channels
  '(list (channel       ;this channel lacks an introduction
           (name 'guix)
           (url "https://example.org/evil/guix.git")
           (commit "cabba9e900d2350aef42e65643de78500b2aad06"))))

(with-http-server (list (list 200 (object->string channels)))
  (let* ((error (open-output-string))
         (port (mkstemp "guix-channels-XXXXXX"))
         (file (port-filename port)))
    (write (quasiquote (downloaded-channels ,(%local-url))) port)
    (close-port port)
    (catch 'quit
      (lambda ()
        (parameterize ((guix-warning-port error))
          (guix-time-machine "-C" file "--" "describe")
          (primitive-exit 1)))
      (lambda _
        (delete-file file)
        (exit (->bool (string-contains (get-output-string error)
                                       "cannot be authenticated")))))))
EOF
guix repl -- "$channels_file"

cat > "$channels_file" <<EOF
%default-channels
EOF

# Ensure there are zero trusted channels
mkdir -p "$XDG_CACHE_HOME/dot-config/guix"
cat > "$XDG_CACHE_HOME/dot-config/guix/trusted-channels.scm" <<EOF
(list)
EOF

# Ignore the user's ~/.config/guix/trusted-channels.scm and ensure this
# command fails.
XDG_CONFIG_HOME="$XDG_CACHE_HOME/dot-config" \
guix time-machine -C "$channels_file" --allow-untrusted-channels=no 2> "$log_file" && false
grep "'guix' is not trusted" "$log_file"

if guile -c '(getaddrinfo "www.gnu.org" "80" AI_NUMERICSERV)' 2> /dev/null
then
    # Ignore the user's ~/.config/guix/trusted-channels.scm.  We've ensured
    # there are no trusted channels so the following command must fail.
    XDG_CONFIG_HOME="$XDG_CACHE_HOME/dot-config"		\
    guix time-machine						\
	 -C swh:1:cnt:003e1e0c1b9b358082201332c926ae54e9549002	\
         2> "$log_file"						\
	&& false
    grep "'guix' is not trusted" "$log_file"
fi

if [ -d "$abs_top_srcdir/.git" ] \
   || guile -c '(getaddrinfo "www.gnu.org" "80" AI_NUMERICSERV)' 2> /dev/null
then
    guix time-machine --version
else
    echo "This test requires networking or a local Git checkout; skipping." >&2
    exit 77
fi

if [ -d "$abs_top_srcdir/.git" ]
then
    # Note: No "file://" prefix because that makes cloning much more expensive
    # for some reason.
    EXTRA_OPTIONS="--url=$abs_top_srcdir"
else
    EXTRA_OPTIONS=""
fi

# Visiting a commit older than v0.16.0 must fail (this test is expensive
# because it clones the whole repository).
guix time-machine -q --commit=v0.15.0 $EXTRA_OPTIONS -- describe && false

true