project init

.gitattributes

@@ -0,0 +1,8 @@
+# Normalize line endings: LF in repository
+* text=auto eol=lf
+
+# Shell scripts: LF always
+*.sh text eol=lf
+
+# PowerShell scripts: CRLF on checkout
+*.ps1 text eol=crlf

.github/workflows/test.yml

@@ -0,0 +1,63 @@
+name: Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  schedule:
+    - cron: "0 2 1 * *"
+
+jobs:
+  # ── Linux / Bash ─────────────────────────────────────────────────────────────
+  test-bash:
+    name: BATS (Linux - ${{ matrix.distro }})
+    runs-on: ubuntu-latest
+    if: ${{ github.event_name != 'schedule' || github.ref == 'refs/heads/main' }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - distro: ubuntu
+            dockerfile: tests/Dockerfile.ubuntu
+            tag: install-ca-bats-ubuntu:ci
+          - distro: debian
+            dockerfile: tests/Dockerfile.debian
+            tag: install-ca-bats-debian:ci
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build test image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: ${{ matrix.dockerfile }}
+          load: true
+          tags: ${{ matrix.tag }}
+          cache-from: type=gha,scope=bats-${{ matrix.distro }}
+          cache-to: type=gha,scope=bats-${{ matrix.distro }},mode=max
+
+      - name: Run BATS tests
+        run: docker run --rm ${{ matrix.tag }}
+
+  # ── Windows / Native ────────────────────────────────────────────────────────
+  test-windows:
+    name: Pester (Windows)
+    runs-on: windows-latest
+    if: ${{ github.event_name != 'schedule' || github.ref == 'refs/heads/main' }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Pester
+        shell: powershell
+        run: Install-Module -Name Pester -MinimumVersion 5.0 -Force -Scope CurrentUser
+
+      - name: Run Windows tests
+        shell: powershell
+        run: Invoke-Pester tests/windows.ps1 -Output Detailed -CI

.vscode/launch.json

@@ -0,0 +1,74 @@
+{
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Test: Linux All",
+      "type": "node-terminal",
+      "request": "launch",
+      "command": "bash tests/run-tests.sh",
+      "cwd": "${workspaceFolder}",
+      "presentation": {
+        "group": "linux",
+        "order": 1
+      }
+    },
+    {
+      "name": "Test: Linux Ubuntu",
+      "type": "node-terminal",
+      "request": "launch",
+      "command": "bash tests/run-tests.sh linux-ubuntu",
+      "cwd": "${workspaceFolder}",
+      "presentation": {
+        "group": "linux",
+        "order": 2
+      }
+    },
+    {
+      "name": "Test: Linux Debian",
+      "type": "node-terminal",
+      "request": "launch",
+      "command": "bash tests/run-tests.sh linux-debian",
+      "cwd": "${workspaceFolder}",
+      "presentation": {
+        "group": "linux",
+        "order": 3
+      }
+    },
+    {
+      "name": "Debug: install-ca.sh",
+      "type": "node-terminal",
+      "request": "launch",
+      "command": "bash install-ca.sh",
+      "cwd": "${workspaceFolder}",
+      "console": "integratedTerminal",
+      "presentation": {
+        "group": "linux",
+        "order": 4
+      }
+    },
+    {
+      "name": "Test: Windows",
+      "type": "node-terminal",
+      "request": "launch",
+      "command": "powershell -NoProfile -ExecutionPolicy Bypass -Command \"Invoke-Pester '${workspaceFolder}/tests/windows.ps1' -Output Detailed\"",
+      "cwd": "${workspaceFolder}",
+      "presentation": {
+        "group": "windows",
+        "order": 1
+      }
+    },
+    {
+      "name": "Debug: install-ca.ps1",
+      "type": "PowerShell",
+      "request": "launch",
+      "script": "${workspaceFolder}/install-ca.ps1",
+      "args": [],
+      "cwd": "${workspaceFolder}",
+      "console": "integratedTerminal",
+      "presentation": {
+        "group": "---",
+        "order": 2
+      }
+    }
+  ]
+}

.vscode/tasks.json

@@ -0,0 +1,74 @@
+{
+  "version": "2.0.0",
+  "tasks": [
+    {
+      "label": "Test: Linux Ubuntu",
+      "type": "shell",
+      "command": "bash tests/run-tests.sh linux-ubuntu",
+      "group": "test",
+      "presentation": {
+        "echo": true,
+        "reveal": "always",
+        "focus": false,
+        "panel": "dedicated",
+        "showReuseMessage": false,
+        "clear": true
+      },
+      "problemMatcher": []
+    },
+    {
+      "label": "Test: Linux Debian",
+      "type": "shell",
+      "command": "bash tests/run-tests.sh linux-debian",
+      "group": "test",
+      "presentation": {
+        "echo": true,
+        "reveal": "always",
+        "focus": false,
+        "panel": "dedicated",
+        "showReuseMessage": false,
+        "clear": true
+      },
+      "problemMatcher": []
+    },
+    {
+      "label": "Test: Linux All",
+      "type": "shell",
+      "command": "bash tests/run-tests.sh",
+      "group": {
+        "kind": "test",
+        "isDefault": true
+      },
+      "presentation": {
+        "echo": true,
+        "reveal": "always",
+        "focus": false,
+        "panel": "dedicated",
+        "showReuseMessage": false,
+        "clear": true
+      },
+      "problemMatcher": []
+    },
+    {
+      "label": "Test: Windows",
+      "type": "shell",
+      "command": "Invoke-Pester tests/windows.ps1 -Output Detailed",
+      "options": {
+        "shell": {
+          "executable": "powershell",
+          "args": ["-NoProfile", "-ExecutionPolicy", "Bypass", "-Command"]
+        }
+      },
+      "group": "test",
+      "presentation": {
+        "echo": true,
+        "reveal": "always",
+        "focus": false,
+        "panel": "dedicated",
+        "showReuseMessage": false,
+        "clear": true
+      },
+      "problemMatcher": []
+    }
+  ]
+}

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ilmars Kluss
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.