lighthouse-pulse/lighthouse/tests/account_manager.rs

use account_manager::{
    validator::{
        create::*,
        import::{self, CMD as IMPORT_CMD},
        modify::{ALL, CMD as MODIFY_CMD, DISABLE, ENABLE, PUBKEY_FLAG},
        CMD as VALIDATOR_CMD,
    },
    wallet::{
        create::{CMD as CREATE_CMD, *},
        list::CMD as LIST_CMD,
        CMD as WALLET_CMD,
    },
    CMD as ACCOUNT_CMD, WALLETS_DIR_FLAG, *,
};
use account_utils::{
    eth2_keystore::KeystoreBuilder,
    validator_definitions::{SigningDefinition, ValidatorDefinition, ValidatorDefinitions},
    ZeroizeString,
};
use slashing_protection::{SlashingDatabase, SLASHING_PROTECTION_FILENAME};
use std::env;
use std::fs::{self, File};
use std::io::{BufRead, BufReader, Write};
use std::path::{Path, PathBuf};
use std::process::{Child, Command, Output, Stdio};
use std::str::from_utf8;
use tempfile::{tempdir, TempDir};
use types::{Keypair, PublicKey};
use validator_dir::ValidatorDir;

// TODO: create tests for the `lighthouse account validator deposit` command. This involves getting
// access to an IPC endpoint during testing or adding support for deposit submission via HTTP and
// using ganache.

/// Returns the `lighthouse account` command.
fn account_cmd() -> Command {
    let lighthouse_bin = env!("CARGO_BIN_EXE_lighthouse");
    let path = lighthouse_bin
        .parse::<PathBuf>()
        .expect("should parse CARGO_TARGET_DIR");

    let mut cmd = Command::new(path);
    cmd.arg(ACCOUNT_CMD);
    cmd
}

/// Returns the `lighthouse account wallet` command.
fn wallet_cmd() -> Command {
    let mut cmd = account_cmd();
    cmd.arg(WALLET_CMD);
    cmd
}

/// Executes a `Command`, returning a `Result` based upon the success exit code of the command.
fn output_result(cmd: &mut Command) -> Result<Output, String> {
    let output = cmd.output().expect("should run command");

    if output.status.success() {
        Ok(output)
    } else {
        Err(from_utf8(&output.stderr)
            .expect("stderr is not utf8")
            .to_string())
    }
}

/// Returns the number of nodes in a directory.
fn dir_child_count<P: AsRef<Path>>(dir: P) -> usize {
    fs::read_dir(dir).expect("should read dir").count()
}

/// Returns the number of 0x-prefixed children in a directory
/// i.e. validators in the validators dir.
fn dir_validator_count<P: AsRef<Path>>(dir: P) -> usize {
    fs::read_dir(dir)
        .unwrap()
        .filter(|c| {
            c.as_ref()
                .unwrap()
                .path()
                .file_name()
                .unwrap()
                .to_string_lossy()
                .starts_with("0x")
        })
        .count()
}

/// Uses `lighthouse account wallet list` to list all wallets.
fn list_wallets<P: AsRef<Path>>(base_dir: P) -> Vec<String> {
    let output = output_result(
        wallet_cmd()
            .arg(format!("--{}", WALLETS_DIR_FLAG))
            .arg(base_dir.as_ref().as_os_str())
            .arg(LIST_CMD),
    )
    .unwrap();
    let stdout = from_utf8(&output.stdout)
        .expect("stdout is not utf8")
        .to_string();

    stdout[..stdout.len() - 1]
        .split("\n")
        .map(Into::into)
        .collect()
}

/// Create a wallet using the lighthouse CLI.
fn create_wallet<P: AsRef<Path>>(
    name: &str,
    base_dir: P,
    password: P,
    mnemonic: P,
) -> Result<Output, String> {
    output_result(
        wallet_cmd()
            .arg(format!("--{}", WALLETS_DIR_FLAG))
            .arg(base_dir.as_ref().as_os_str())
            .arg(CREATE_CMD)
            .arg(format!("--{}", NAME_FLAG))
            .arg(&name)
            .arg(format!("--{}", PASSWORD_FLAG))
            .arg(password.as_ref().as_os_str())
            .arg(format!("--{}", MNEMONIC_FLAG))
            .arg(mnemonic.as_ref().as_os_str()),
    )
}

/// Helper struct for testing wallets.
struct TestWallet {
    base_dir: PathBuf,
    password_dir: TempDir,
    mnemonic_dir: TempDir,
    name: String,
}

impl TestWallet {
    /// Creates a new wallet tester, without _actually_ creating it via the CLI.
    pub fn new<P: AsRef<Path>>(base_dir: P, name: &str) -> Self {
        Self {
            base_dir: base_dir.as_ref().into(),
            password_dir: tempdir().unwrap(),
            mnemonic_dir: tempdir().unwrap(),
            name: name.into(),
        }
    }

    pub fn base_dir(&self) -> PathBuf {
        self.base_dir.clone()
    }

    pub fn password_path(&self) -> PathBuf {
        self.password_dir.path().join("password.pass")
    }

    pub fn mnemonic_path(&self) -> PathBuf {
        self.mnemonic_dir.path().join("mnemonic")
    }

    /// Actually create the wallet using the lighthouse CLI.
    pub fn create(&self) -> Result<Output, String> {
        create_wallet(
            &self.name,
            self.base_dir(),
            self.password_path(),
            self.mnemonic_path(),
        )
    }

    /// Create a wallet, expecting it to succeed.
    pub fn create_expect_success(&self) {
        self.create().unwrap();
        assert!(self.password_path().exists(), "{} password", self.name);
        assert!(self.mnemonic_path().exists(), "{} mnemonic", self.name);
        assert!(list_wallets(self.base_dir()).contains(&self.name));
    }
}

#[test]
fn without_pass_extension() {
    let base_dir = tempdir().unwrap();
    let password_dir = tempdir().unwrap();
    let mnemonic_dir = tempdir().unwrap();

    let err = create_wallet(
        "bad_extension",
        base_dir.path(),
        &password_dir.path().join("password"),
        &mnemonic_dir.path().join("mnemonic"),
    )
    .unwrap_err();

    assert!(err.contains("ends in .pass"));
}

#[test]
fn wallet_create_and_list() {
    let base_temp_dir = tempdir().unwrap();
    let base_dir: PathBuf = base_temp_dir.path().into();

    let wally = TestWallet::new(&base_dir, "wally");

    assert_eq!(dir_child_count(&base_dir), 0);

    wally.create_expect_success();

    assert_eq!(dir_child_count(&base_dir), 1);
    assert!(wally.password_path().exists());
    assert!(wally.mnemonic_path().exists());

    // Should not create a wallet with a duplicate name.
    wally.create().unwrap_err();

    assert_eq!(list_wallets(wally.base_dir()).len(), 1);

    let wally2 = TestWallet::new(&base_dir, "wally2");
    wally2.create_expect_success();

    assert_eq!(list_wallets(wally.base_dir()).len(), 2);
}

/// Returns the `lighthouse account validator` command.
fn validator_cmd() -> Command {
    let mut cmd = account_cmd();
    cmd.arg(VALIDATOR_CMD);
    cmd
}

/// Helper struct for testing wallets.
struct TestValidator {
    wallet: TestWallet,
    validator_dir: PathBuf,
    secrets_dir: PathBuf,
}

impl TestValidator {
    pub fn new<P: AsRef<Path>>(validator_dir: P, secrets_dir: P, wallet: TestWallet) -> Self {
        Self {
            wallet,
            validator_dir: validator_dir.as_ref().into(),
            secrets_dir: secrets_dir.as_ref().into(),
        }
    }

    /// Create validators, returning a list of validator pubkeys on success.
    pub fn create(
        &self,
        quantity_flag: &str,
        quantity: usize,
        store_withdrawal_key: bool,
    ) -> Result<Vec<String>, String> {
        let mut cmd = validator_cmd();
        cmd.arg(format!("--{}", VALIDATOR_DIR_FLAG))
            .arg(self.validator_dir.clone().into_os_string())
            .arg(CREATE_CMD)
            .arg(format!("--{}", WALLETS_DIR_FLAG))
            .arg(self.wallet.base_dir().into_os_string())
            .arg(format!("--{}", WALLET_NAME_FLAG))
            .arg(&self.wallet.name)
            .arg(format!("--{}", WALLET_PASSWORD_FLAG))
            .arg(self.wallet.password_path().into_os_string())
            .arg(format!("--{}", SECRETS_DIR_FLAG))
            .arg(self.secrets_dir.clone().into_os_string())
            .arg(format!("--{}", DEPOSIT_GWEI_FLAG))
            .arg("32000000000")
            .arg(format!("--{}", quantity_flag))
            .arg(format!("{}", quantity));

        let output = if store_withdrawal_key {
            output_result(cmd.arg(format!("--{}", STORE_WITHDRAW_FLAG))).unwrap()
        } else {
            output_result(&mut cmd).unwrap()
        };

        let stdout = from_utf8(&output.stdout)
            .expect("stdout is not utf8")
            .to_string();

        if stdout == "" {
            return Ok(vec![]);
        }

        let pubkeys = stdout[..stdout.len() - 1]
            .split("\n")
            .filter_map(|line| {
                let tab = line.find("\t").expect("line must have tab");
                let (_, pubkey) = line.split_at(tab + 1);
                Some(pubkey.to_string())
            })
            .collect::<Vec<_>>();

        Ok(pubkeys)
    }

    /// Create a validators, expecting success.
    pub fn create_expect_success(
        &self,
        quantity_flag: &str,
        quantity: usize,
        store_withdrawal_key: bool,
    ) -> Vec<ValidatorDir> {
        let pubkeys = self
            .create(quantity_flag, quantity, store_withdrawal_key)
            .unwrap();

        pubkeys
            .into_iter()
            .map(|pk| {
                // Password should have been created.
                assert!(self.secrets_dir.join(&pk).exists(), "password exists");

                // Should have created a validator directory.
                let dir = ValidatorDir::open(self.validator_dir.join(&pk))
                    .expect("should open validator dir");

                // Validator dir should have a voting keypair.
                let voting_keypair = dir.voting_keypair(&self.secrets_dir).unwrap();

                // Validator dir should *not* have a withdrawal keypair.
                let withdrawal_result = dir.withdrawal_keypair(&self.secrets_dir);
                if store_withdrawal_key {
                    let withdrawal_keypair = withdrawal_result.unwrap();
                    assert_ne!(voting_keypair.pk, withdrawal_keypair.pk);
                } else {
                    withdrawal_result.err().unwrap();
                }

                // Deposit tx file should not exist yet.
                assert!(!dir.eth1_deposit_tx_hash_exists(), "deposit tx");

                // Should have created a valid deposit data file.
                dir.eth1_deposit_data().unwrap().unwrap();
                dir
            })
            .collect()
    }
}

#[test]
fn validator_create() {
    let base_dir = tempdir().unwrap();
    let validator_dir = tempdir().unwrap();
    let secrets_dir = tempdir().unwrap();

    let wallet = TestWallet::new(base_dir.path(), "wally");
    wallet.create_expect_success();

    assert_eq!(dir_validator_count(validator_dir.path()), 0);

    let validator = TestValidator::new(validator_dir.path(), secrets_dir.path(), wallet);

    // Create a validator _without_ storing the withdraw key.
    let created_validators = validator.create_expect_success(COUNT_FLAG, 1, false);

    // Validator should be registered with slashing protection.
    check_slashing_protection(
        &validator_dir,
        created_validators
            .iter()
            .map(|v| v.voting_keypair(&secrets_dir).unwrap().pk),
    );
    drop(created_validators);

    // Number of dir entries should be #validators + 1 for the slashing protection DB
    assert_eq!(dir_validator_count(validator_dir.path()), 1);
    assert_eq!(dir_child_count(validator_dir.path()), 2);

    // Create a validator storing the withdraw key.
    validator.create_expect_success(COUNT_FLAG, 1, true);

    assert_eq!(dir_validator_count(validator_dir.path()), 2);

    // Use the at-most flag with less validators then are in the directory.
    assert_eq!(
        validator.create_expect_success(AT_MOST_FLAG, 1, true).len(),
        0
    );

    assert_eq!(dir_validator_count(validator_dir.path()), 2);

    // Use the at-most flag with the same number of validators that are in the directory.
    assert_eq!(
        validator.create_expect_success(AT_MOST_FLAG, 2, true).len(),
        0
    );

    assert_eq!(dir_validator_count(validator_dir.path()), 2);

    // Use the at-most flag with two more number of validators than are in the directory.
    assert_eq!(
        validator.create_expect_success(AT_MOST_FLAG, 4, true).len(),
        2
    );

    assert_eq!(dir_validator_count(validator_dir.path()), 4);

    // Create multiple validators with the count flag.
    assert_eq!(
        validator.create_expect_success(COUNT_FLAG, 2, true).len(),
        2
    );

    assert_eq!(dir_validator_count(validator_dir.path()), 6);
}

#[test]
fn validator_import_launchpad() {
    const PASSWORD: &str = "cats";
    const KEYSTORE_NAME: &str = "keystore-m_12381_3600_0_0_0-1595406747.json";
    const NOT_KEYSTORE_NAME: &str = "keystore-m_12381_3600_0_0-1595406747.json";

    let src_dir = tempdir().unwrap();
    let dst_dir = tempdir().unwrap();

    let keypair = Keypair::random();
    let keystore = KeystoreBuilder::new(&keypair, PASSWORD.as_bytes(), "".into())
        .unwrap()
        .build()
        .unwrap();

    let dst_keystore_dir = dst_dir.path().join(format!("0x{}", keystore.pubkey()));

    // Create a keystore in the src dir.
    File::create(src_dir.path().join(KEYSTORE_NAME))
        .map(|mut file| keystore.to_json_writer(&mut file).unwrap())
        .unwrap();

    // Create a not-keystore file in the src dir.
    File::create(src_dir.path().join(NOT_KEYSTORE_NAME)).unwrap();

    let mut child = validator_cmd()
        .arg(format!("--{}", VALIDATOR_DIR_FLAG))
        .arg(dst_dir.path().as_os_str())
        .arg(IMPORT_CMD)
        .arg(format!("--{}", STDIN_INPUTS_FLAG)) // Using tty does not work well with tests.
        .arg(format!("--{}", import::DIR_FLAG))
        .arg(src_dir.path().as_os_str())
        .stderr(Stdio::piped())
        .stdin(Stdio::piped())
        .spawn()
        .unwrap();

    let mut stderr = child.stderr.as_mut().map(BufReader::new).unwrap().lines();
    let stdin = child.stdin.as_mut().unwrap();

    loop {
        if stderr.next().unwrap().unwrap() == import::PASSWORD_PROMPT {
            break;
        }
    }

    stdin.write(format!("{}\n", PASSWORD).as_bytes()).unwrap();

    child.wait().unwrap();

    assert!(
        src_dir.path().join(KEYSTORE_NAME).exists(),
        "keystore should not be removed from src dir"
    );
    assert!(
        src_dir.path().join(NOT_KEYSTORE_NAME).exists(),
        "not-keystore should not be removed from src dir."
    );

    let voting_keystore_path = dst_keystore_dir.join(KEYSTORE_NAME);

    assert!(
        voting_keystore_path.exists(),
        "keystore should be present in dst dir"
    );
    assert!(
        !dst_dir.path().join(NOT_KEYSTORE_NAME).exists(),
        "not-keystore should not be present in dst dir"
    );

    // Validator should be registered with slashing protection.
    check_slashing_protection(&dst_dir, std::iter::once(keystore.public_key().unwrap()));

    // Disable all the validators in validator_definition.
    output_result(
        validator_cmd()
            .arg(format!("--{}", VALIDATOR_DIR_FLAG))
            .arg(dst_dir.path().as_os_str())
            .arg(MODIFY_CMD)
            .arg(DISABLE)
            .arg(format!("--{}", ALL)),
    )
    .unwrap();

    let defs = ValidatorDefinitions::open(&dst_dir).unwrap();

    let mut expected_def = ValidatorDefinition {
        enabled: false,
        description: "".into(),
        graffiti: None,
        suggested_fee_recipient: None,
        gas_limit: None,
        builder_proposals: None,
        voting_public_key: keystore.public_key().unwrap(),
        signing_definition: SigningDefinition::LocalKeystore {
            voting_keystore_path,
            voting_keystore_password_path: None,
            voting_keystore_password: Some(ZeroizeString::from(PASSWORD.to_string())),
        },
    };

    assert!(
        defs.as_slice() == &[expected_def.clone()],
        "validator defs file should be accurate"
    );

    // Enable keystore validator again
    output_result(
        validator_cmd()
            .arg(format!("--{}", VALIDATOR_DIR_FLAG))
            .arg(dst_dir.path().as_os_str())
            .arg(MODIFY_CMD)
            .arg(ENABLE)
            .arg(format!("--{}", PUBKEY_FLAG))
            .arg(format!("{}", keystore.public_key().unwrap())),
    )
    .unwrap();

    let defs = ValidatorDefinitions::open(&dst_dir).unwrap();

    expected_def.enabled = true;

    assert!(
        defs.as_slice() == &[expected_def.clone()],
        "validator defs file should be accurate"
    );
}

#[test]
fn validator_import_launchpad_no_password_then_add_password() {
    const PASSWORD: &str = "cats";
    const KEYSTORE_NAME: &str = "keystore-m_12381_3600_0_0_0-1595406747.json";
    const NOT_KEYSTORE_NAME: &str = "keystore-m_12381_3600_0_0-1595406747.json";

    let src_dir = tempdir().unwrap();
    let dst_dir = tempdir().unwrap();

    let keypair = Keypair::random();
    let keystore = KeystoreBuilder::new(&keypair, PASSWORD.as_bytes(), "".into())
        .unwrap()
        .build()
        .unwrap();

    let dst_keystore_dir = dst_dir.path().join(format!("0x{}", keystore.pubkey()));

    // Create a keystore in the src dir.
    File::create(src_dir.path().join(KEYSTORE_NAME))
        .map(|mut file| keystore.to_json_writer(&mut file).unwrap())
        .unwrap();

    // Create a not-keystore file in the src dir.
    File::create(src_dir.path().join(NOT_KEYSTORE_NAME)).unwrap();

    let validator_import_key_cmd = || {
        validator_cmd()
            .arg(format!("--{}", VALIDATOR_DIR_FLAG))
            .arg(dst_dir.path().as_os_str())
            .arg(IMPORT_CMD)
            .arg(format!("--{}", STDIN_INPUTS_FLAG)) // Using tty does not work well with tests.
            .arg(format!("--{}", import::DIR_FLAG))
            .arg(src_dir.path().as_os_str())
            .stderr(Stdio::piped())
            .stdin(Stdio::piped())
            .spawn()
            .unwrap()
    };

    let wait_for_password_prompt = |child: &mut Child| {
        let mut stderr = child.stderr.as_mut().map(BufReader::new).unwrap().lines();

        loop {
            if stderr.next().unwrap().unwrap() == import::PASSWORD_PROMPT {
                break;
            }
        }
    };

    let mut child = validator_import_key_cmd();
    wait_for_password_prompt(&mut child);
    let stdin = child.stdin.as_mut().unwrap();
    stdin.write("\n".as_bytes()).unwrap();
    child.wait().unwrap();

    assert!(
        src_dir.path().join(KEYSTORE_NAME).exists(),
        "keystore should not be removed from src dir"
    );
    assert!(
        src_dir.path().join(NOT_KEYSTORE_NAME).exists(),
        "not-keystore should not be removed from src dir."
    );

    let voting_keystore_path = dst_keystore_dir.join(KEYSTORE_NAME);

    assert!(
        voting_keystore_path.exists(),
        "keystore should be present in dst dir"
    );
    assert!(
        !dst_dir.path().join(NOT_KEYSTORE_NAME).exists(),
        "not-keystore should not be present in dst dir"
    );

    // Validator should be registered with slashing protection.
    check_slashing_protection(&dst_dir, std::iter::once(keystore.public_key().unwrap()));

    let defs = ValidatorDefinitions::open(&dst_dir).unwrap();

    let expected_def = ValidatorDefinition {
        enabled: true,
        description: "".into(),
        graffiti: None,
        suggested_fee_recipient: None,
        gas_limit: None,
        builder_proposals: None,
        voting_public_key: keystore.public_key().unwrap(),
        signing_definition: SigningDefinition::LocalKeystore {
            voting_keystore_path,
            voting_keystore_password_path: None,
            voting_keystore_password: None,
        },
    };

    assert!(
        defs.as_slice() == &[expected_def.clone()],
        "validator defs file should be accurate"
    );

    let mut child = validator_import_key_cmd();
    wait_for_password_prompt(&mut child);
    let stdin = child.stdin.as_mut().unwrap();
    stdin.write(format!("{}\n", PASSWORD).as_bytes()).unwrap();
    child.wait().unwrap();

    let expected_def = ValidatorDefinition {
        enabled: true,
        description: "".into(),
        graffiti: None,
        suggested_fee_recipient: None,
        gas_limit: None,
        builder_proposals: None,
        voting_public_key: keystore.public_key().unwrap(),
        signing_definition: SigningDefinition::LocalKeystore {
            voting_keystore_path: dst_keystore_dir.join(KEYSTORE_NAME),
            voting_keystore_password_path: None,
            voting_keystore_password: Some(ZeroizeString::from(PASSWORD.to_string())),
        },
    };

    let defs = ValidatorDefinitions::open(&dst_dir).unwrap();
    assert!(
        defs.as_slice() == &[expected_def.clone()],
        "validator defs file should be accurate"
    );
}

#[test]
fn validator_import_launchpad_password_file() {
    const PASSWORD: &str = "cats";
    const PASSWORD_FILE_NAME: &str = "pw_is_cats.txt";
    const KEYSTORE_NAME: &str = "keystore-m_12381_3600_0_0_0-1595406747.json";
    const NOT_KEYSTORE_NAME: &str = "keystore-m_12381_3600_0_0-1595406747.json";

    let src_dir = tempdir().unwrap();
    let dst_dir = tempdir().unwrap();

    let keypair = Keypair::random();
    let keystore = KeystoreBuilder::new(&keypair, PASSWORD.as_bytes(), "".into())
        .unwrap()
        .build()
        .unwrap();

    let dst_keystore_dir = dst_dir.path().join(format!("0x{}", keystore.pubkey()));

    // Create a keystore in the src dir.
    File::create(src_dir.path().join(KEYSTORE_NAME))
        .map(|mut file| keystore.to_json_writer(&mut file).unwrap())
        .unwrap();

    // Create a not-keystore file in the src dir.
    File::create(src_dir.path().join(NOT_KEYSTORE_NAME)).unwrap();

    // Create a password file in the src dir.
    File::create(src_dir.path().join(PASSWORD_FILE_NAME))
        .map(|mut file| file.write(PASSWORD.as_ref()))
        .unwrap()
        .unwrap();

    let mut child = validator_cmd()
        .arg(format!("--{}", VALIDATOR_DIR_FLAG))
        .arg(dst_dir.path().as_os_str())
        .arg(IMPORT_CMD)
        .arg(format!("--{}", import::DIR_FLAG))
        .arg(src_dir.path().as_os_str())
        .arg(format!("--{}", import::REUSE_PASSWORD_FLAG))
        .arg(format!("--{}", PASSWORD_FLAG))
        .arg(src_dir.path().join(PASSWORD_FILE_NAME).as_os_str())
        .spawn()
        .unwrap();

    child.wait().unwrap();

    assert!(
        src_dir.path().join(KEYSTORE_NAME).exists(),
        "keystore should not be removed from src dir"
    );
    assert!(
        src_dir.path().join(NOT_KEYSTORE_NAME).exists(),
        "not-keystore should not be removed from src dir."
    );
    assert!(
        src_dir.path().join(PASSWORD_FILE_NAME).exists(),
        "password file should not be removed from src dir."
    );

    let voting_keystore_path = dst_keystore_dir.join(KEYSTORE_NAME);

    assert!(
        voting_keystore_path.exists(),
        "keystore should be present in dst dir"
    );
    assert!(
        !dst_dir.path().join(NOT_KEYSTORE_NAME).exists(),
        "not-keystore should not be present in dst dir"
    );
    assert!(
        !dst_dir.path().join(PASSWORD_FILE_NAME).exists(),
        "password file should not be present in dst dir"
    );

    // Validator should be registered with slashing protection.
    check_slashing_protection(&dst_dir, std::iter::once(keystore.public_key().unwrap()));

    let defs = ValidatorDefinitions::open(&dst_dir).unwrap();

    let expected_def = ValidatorDefinition {
        enabled: true,
        description: "".into(),
        voting_public_key: keystore.public_key().unwrap(),
        graffiti: None,
        suggested_fee_recipient: None,
        gas_limit: None,
        builder_proposals: None,
        signing_definition: SigningDefinition::LocalKeystore {
            voting_keystore_path,
            voting_keystore_password_path: None,
            voting_keystore_password: Some(ZeroizeString::from(PASSWORD.to_string())),
        },
    };

    assert!(
        defs.as_slice() == &[expected_def],
        "validator defs file should be accurate"
    );
}

/// Check that all of the given pubkeys have been registered with slashing protection.
fn check_slashing_protection(validator_dir: &TempDir, pubkeys: impl Iterator<Item = PublicKey>) {
    let slashing_db_path = validator_dir.path().join(SLASHING_PROTECTION_FILENAME);
    let slashing_db = SlashingDatabase::open(&slashing_db_path).unwrap();
    for validator_pk in pubkeys {
        slashing_db
            .get_validator_id(&validator_pk.compress())
            .unwrap();
    }
}