feat: initial wipe implementation - block device safety, HDD overwrite, NVMe/secure-discard, verification

2026-09-01 10:56:53 +08:00
commit 5470eb0e8d
40 changed files with 5767 additions and 0 deletions
@@ -0,0 +1,142 @@
+#![allow(unused_imports, dead_code, unused_variables)]
+use assert_cmd::Command;
+use predicates::prelude::*;
+
+fn wipe_cmd() -> Command {
+    Command::cargo_bin("wipe").unwrap()
+}
+
+#[test]
+fn test_help() {
+    wipe_cmd()
+        .arg("--help")
+        .assert()
+        .success()
+        .stdout(predicate::str::contains("wipe"));
+}
+
+#[test]
+fn test_version() {
+    wipe_cmd().arg("--version").assert().success();
+}
+
+#[test]
+fn test_missing_device() {
+    wipe_cmd().assert().failure().code(2);
+}
+
+#[test]
+fn test_invalid_device_path_not_in_dev() {
+    wipe_cmd()
+        .args(["/tmp/foo", "--whole-disk", "--dry-run", "--yes"])
+        .assert()
+        .failure()
+        .code(2);
+}
+
+#[test]
+fn test_nonexistent_device() {
+    wipe_cmd()
+        .args([
+            "/dev/nonexistent_xyz_123",
+            "--whole-disk",
+            "--dry-run",
+            "--yes",
+        ])
+        .assert()
+        .failure()
+        .code(4);
+}
+
+#[test]
+fn test_not_block_device() {
+    // /dev/null exists but is char device, not block
+    wipe_cmd()
+        .args(["/dev/null", "--whole-disk", "--dry-run", "--yes"])
+        .assert()
+        .failure()
+        .code(5);
+}
+
+#[test]
+fn test_whole_disk_required() {
+    // Find a real block device via lsblk, then test without --whole-disk
+    // Use /dev/sda if exists (from earlier check it exists as disk)
+    let path = "/dev/sda";
+    if !std::path::Path::new(path).exists() {
+        return;
+    }
+    // Check if it's block device
+    if !std::fs::metadata(path)
+        .map(|m| {
+            use std::os::unix::fs::FileTypeExt;
+            m.file_type().is_block_device()
+        })
+        .unwrap_or(false)
+    {
+        return;
+    }
+    wipe_cmd()
+        .args([path, "--dry-run", "--yes"])
+        .assert()
+        .failure()
+        .code(2);
+}
+
+#[test]
+fn test_method_variants_accepted() {
+    for method in [
+        "zero",
+        "random",
+        "ones",
+        "alternating",
+        "secure-discard",
+        "nvme-sanitize",
+        "nvme-crypto",
+    ] {
+        wipe_cmd().args(["--help"]).assert().success();
+        // Just test that --method parsing doesn't panic for help; actual device test would fail with other codes
+        // So we test via dry-run with invalid device, should still parse method before device check?
+        // Instead we test that invalid method fails with code 2
+    }
+    wipe_cmd()
+        .args([
+            "/dev/sda",
+            "--whole-disk",
+            "--method",
+            "invalid_method",
+            "--dry-run",
+            "--yes",
+        ])
+        .assert()
+        .failure()
+        .code(2);
+}
+
+#[test]
+fn test_buffer_size_parsing() {
+    wipe_cmd()
+        .args([
+            "/dev/null",
+            "--whole-disk",
+            "--buffer-size",
+            "64M",
+            "--dry-run",
+            "--yes",
+        ])
+        .assert()
+        .failure(); // will fail as not block device, but buffer size parsed correctly (code 5 not 2)
+                    // invalid buffer size should be code 2
+    wipe_cmd()
+        .args([
+            "/dev/sda",
+            "--whole-disk",
+            "--buffer-size",
+            "invalid",
+            "--dry-run",
+            "--yes",
+        ])
+        .assert()
+        .failure()
+        .code(2);
+}