Normalize getent output in nss integration tests

nss/integration-tests/integration_test.go

@@ -5,6 +5,7 @@ import (
 	"log"
 	"os"
 	"path/filepath"
+	"strings"
 	"testing"
 
 	"github.com/stretchr/testify/require"
@@ -147,6 +148,18 @@ func TestIntegration(t *testing.T) {
 			got, status := getentOutputForLib(t, libPath, socketPath, rustCovEnv, tc.shouldPreCheck, cmds...)
 			require.Equal(t, tc.wantStatus, status, "Expected status %d, but got %d", tc.wantStatus, status)
 
+			if tc.shouldPreCheck && tc.db == "passwd" {
+				// When pre-checking, the `getent passwd` output contains a randomly generated UID.
+				// To make the test deterministic, we replace the UID with a placeholder.
+				// The output looks something like this:
+				//     user-pre-check:x:1776689191:0:gecos for user-pre-check:/home/user-pre-check:/usr/bin/bash\n
+				fields := strings.Split(got, ":")
+				require.Len(t, fields, 7, "Invalid number of fields in the output: %q", got)
+				// The UID is the third field.
+				fields[2] = "{{UID}}"
+				got = strings.Join(fields, ":")
+			}
+
 			// If the exit status is NotFound, there is no need to create an empty golden file.
 			// But we need to ensure that the output is indeed empty.
 			if tc.wantStatus == codeNotFound {

nss/integration-tests/testdata/TestIntegration/golden/check_user_with_broker_if_not_found_in_cache

@@ -1 +1 @@
-user-pre-check:x:1234:0:gecos for user-pre-check:/home/user-pre-check:/usr/bin/bash
+user-pre-check:x:{{UID}}:0:gecos for user-pre-check:/home/user-pre-check:/usr/bin/bash