Disable encryption in tests

internal/command/command_test.go

@@ -19,6 +19,9 @@ func init() {
 	// TODO(adamb): this can be changed. runme must be built
 	// in the test environment and put into the PATH.
 	EnvDumpCommand = "env -0"
+
+	// We don't have a way to test encryption using overriden [EnvDumpCommand].
+	envCollectorEnableEncryption = false
 }
 
 func testExecuteCommand(

internal/command/env_collector.go

@@ -80,17 +80,17 @@ func (f *envCollectorFactory) Build() (envCollector, error) {
 }
 
 func (f *envCollectorFactory) generateEncryptionKeyAndNonce() ([]byte, []byte, error) {
-	encKey, err := createEnvEncryptionKey()
+	key, err := createEnvEncryptionKey()
 	if err != nil {
 		return nil, nil, errors.WithMessage(err, "failed to create the encryption key")
 	}
 
-	encNonce, err := createEnvEncryptionKey()
+	nonce, err := createEnvEncryptionNonce()
 	if err != nil {
 		return nil, nil, errors.WithMessage(err, "failed to create the encryption nonce")
 	}
 
-	return encKey, encNonce, nil
+	return key, nonce, nil
 }
 
 type envCollector interface {
@@ -167,6 +167,9 @@ func (c *envCollectorFile) Diff() (changed []string, deleted []string, _ error)
 }
 
 func (c *envCollectorFile) ExtraEnv() []string {
+	if c.encKey == nil || c.encNonce == nil {
+		return nil
+	}
 	return []string{
 		envCollectorEncKeyEnvName + "=" + hex.EncodeToString(c.encKey),
 		envCollectorEncNonceEnvName + "=" + hex.EncodeToString(c.encNonce),

internal/command/env_collector_unix.go

@@ -79,6 +79,9 @@ func (c *envCollectorFifo) Diff() (changed []string, deleted []string, _ error)
 }
 
 func (c *envCollectorFifo) ExtraEnv() []string {
+	if c.encKey == nil || c.encNonce == nil {
+		return nil
+	}
 	return []string{
 		"RUNME_ENCRYPTION_KEY=" + hex.EncodeToString(c.encKey),
 		"RUNME_ENCRYPTION_NONCE=" + hex.EncodeToString(c.encNonce),