The test here is a bit ugly, but it should work. Better ideas
welcome =)
Run the test, check it works (and maybe hack it up
a bit and check it fails properly too, it worked first time for
me which is always suspicious)
| Automatic diff as part of commit; lint not applicable. |
| Automatic diff as part of commit; unit tests not applicable. |
| Path | Packages | |||
|---|---|---|---|---|
| M | templates (21 lines) | |||
| A | M | tests/server_firewall_default_postinstall.pm (29 lines) |
| Commit | Tree | Parents | Author | Summary | Date |
|---|---|---|---|---|---|
| 043cc922df35 | 6720c9261fba | 802c9298fd58 | Adam Williamson | add a server default firewall test (Show More…) | May 27 2016, 9:09 PM |
| Show First 20 Lines • Show All 827 Lines • ▼ Show 20 Line(s) | 826 | product => { | |||
|---|---|---|---|---|---|
| 828 | distri => "fedora", | 828 | distri => "fedora", | ||
| 829 | flavor => "universal", | 829 | flavor => "universal", | ||
| 830 | version => "*", | 830 | version => "*", | ||
| 831 | }, | 831 | }, | ||
| 832 | test_suite => { name => "install_kickstart_firewall_configured" }, | 832 | test_suite => { name => "install_kickstart_firewall_configured" }, | ||
| 833 | }, | 833 | }, | ||
| 834 | { | 834 | { | ||
| 835 | machine => { name => "64bit" }, | 835 | machine => { name => "64bit" }, | ||
| 836 | prio => 40, | ||||
| 837 | product => { | ||||
| 838 | arch => "x86_64", | ||||
| 839 | distri => "fedora", | ||||
| 840 | flavor => "Server-dvd-iso", | ||||
| 841 | version => "*", | ||||
| 842 | }, | ||||
| 843 | test_suite => { name => "server_firewall_default" }, | ||||
| 844 | }, | ||||
| 845 | { | ||||
| 846 | machine => { name => "64bit" }, | ||||
| 836 | prio => 11, | 847 | prio => 11, | ||
| 837 | product => { | 848 | product => { | ||
| 838 | arch => "i386", | 849 | arch => "i386", | ||
| 839 | distri => "fedora", | 850 | distri => "fedora", | ||
| 840 | flavor => "Workstation-live-iso", | 851 | flavor => "Workstation-live-iso", | ||
| 841 | version => "*", | 852 | version => "*", | ||
| 842 | }, | 853 | }, | ||
| 843 | test_suite => { name => "install_default" }, | 854 | test_suite => { name => "install_default" }, | ||
| ▲ Show 20 Lines • Show All 760 Lines • ▼ Show 20 Line(s) | 1614 | settings => [ | |||
| 1604 | { key => "KICKSTART", value => "1" }, | 1615 | { key => "KICKSTART", value => "1" }, | ||
| 1605 | { key => "GRUB", value => "inst.ks=http://fedorapeople.org/groups/qa/kickstarts/firewall-configured-net.ks" }, | 1616 | { key => "GRUB", value => "inst.ks=http://fedorapeople.org/groups/qa/kickstarts/firewall-configured-net.ks" }, | ||
| 1606 | { key => "POSTINSTALL", value => "firewall_configured" }, | 1617 | { key => "POSTINSTALL", value => "firewall_configured" }, | ||
| 1607 | { key => "ROOT_PASSWORD", value => "anaconda" }, | 1618 | { key => "ROOT_PASSWORD", value => "anaconda" }, | ||
| 1608 | { key => "USER_LOGIN", value => "false" }, | 1619 | { key => "USER_LOGIN", value => "false" }, | ||
| 1609 | ], | 1620 | ], | ||
| 1610 | }, | 1621 | }, | ||
| 1611 | { | 1622 | { | ||
| 1623 | name => "server_firewall_default", | ||||
| 1624 | settings => [ | ||||
| 1625 | { key => "POSTINSTALL", value => "server_firewall_default" }, | ||||
| 1626 | { key => "USER_LOGIN", value => "false" }, | ||||
| 1627 | { key => "START_AFTER_TEST", value => "install_default_upload" }, | ||||
| 1628 | { key => "BOOTFROM", value => "c" }, | ||||
| 1629 | { key => "HDD_1", value => "disk_%FLAVOR%_%MACHINE%.qcow2" }, | ||||
| 1630 | ], | ||||
| 1631 | }, | ||||
| 1632 | { | ||||
| 1612 | name => "server_role_deploy_domain_controller", | 1633 | name => "server_role_deploy_domain_controller", | ||
| 1613 | settings => [ | 1634 | settings => [ | ||
| 1614 | { key => "ENTRYPOINT", value => "role_deploy_domain_controller" }, | 1635 | { key => "ENTRYPOINT", value => "role_deploy_domain_controller" }, | ||
| 1615 | { key => "START_AFTER_TEST", value => "install_default_upload" }, | 1636 | { key => "START_AFTER_TEST", value => "install_default_upload" }, | ||
| 1616 | { key => "BOOTFROM", value => "c" }, | 1637 | { key => "BOOTFROM", value => "c" }, | ||
| 1617 | { key => "HDD_1", value => "disk_%FLAVOR%_%MACHINE%.qcow2" }, | 1638 | { key => "HDD_1", value => "disk_%FLAVOR%_%MACHINE%.qcow2" }, | ||
| 1618 | { key => "GRUB", value => "net.ifnames=0 biosdevname=0" }, | 1639 | { key => "GRUB", value => "net.ifnames=0 biosdevname=0" }, | ||
| 1619 | { key => "NICTYPE", value => "tap" }, | 1640 | { key => "NICTYPE", value => "tap" }, | ||
| Show All 30 Lines | |||||
| 1 | use base "installedtest"; | ||||
|---|---|---|---|---|---|
| 2 | use strict; | ||||
| 3 | use testapi; | ||||
| 4 | | ||||
| 5 | sub run { | ||||
| 6 | my $self=shift; | ||||
| 7 | if (not( check_screen "root_console", 0)) { | ||||
| 8 | $self->root_console(tty=>3); | ||||
| 9 | } | ||||
| 10 | # this only succeeds if the firewall is running | ||||
| 11 | assert_script_run 'firewall-cmd --state'; | ||||
| 12 | # we need to check that exactly these three services and no others | ||||
| 13 | # are allowed...but the displayed order is arbitrary. | ||||
| 14 | validate_script_output 'firewall-cmd --list-services', sub { m/^(cockpit dhcpv6-client ssh|cockpit ssh dhcpv6-client|dhcpv6-client cockpit ssh|dhcpv6-client ssh cockpit|ssh cockpit dhcpv6-client|ssh dhcpv6-client cockpit)$/ }; | ||||
| 15 | validate_script_output 'firewall-cmd --list-ports', sub { m/^$/ }; | ||||
| 16 | validate_script_output 'firewall-cmd --list-protocols', sub { m/^$/ }; | ||||
| 17 | } | ||||
| 18 | | ||||
| 19 | sub test_flags { | ||||
| 20 | # without anything - rollback to 'lastgood' snapshot if failed | ||||
| 21 | # 'fatal' - whole test suite is in danger if this fails | ||||
| 22 | # 'milestone' - after this test succeeds, update 'lastgood' | ||||
| 23 | # 'important' - if this fails, set the overall state to 'fail' | ||||
| 24 | return { fatal => 1 }; | ||||
| 25 | } | ||||
| 26 | | ||||
| 27 | 1; | ||||
| 28 | | ||||
| 29 | # vim: set sw=4 et: | ||||