Files
@ 8d272d91d3d2
Branch filter:
Location: majic-ansible-roles/roles/backup/molecule/default/tests/test_default.py - annotation
8d272d91d3d2
911 B
text/x-python
MAR-165: Deploy Diffie-Helman parameters for LDAP server in the ldap_server role:
- Not relevant for Debian Strech because of a bug in the OpenLDAP
version it ships with.
- This should allow use of DHE ciphers with LDAP server.
- Generated DH parameters only help pick one of the parameters from
RFC-7919 (based on the size of generated ones).
- Make the cipher test lists distro-specific due to differences
between supported algorithms in respective GnuTLS versions.
- Not relevant for Debian Strech because of a bug in the OpenLDAP
version it ships with.
- This should allow use of DHE ciphers with LDAP server.
- Generated DH parameters only help pick one of the parameters from
RFC-7919 (based on the size of generated ones).
- Make the cipher test lists distro-specific due to differences
between supported algorithms in respective GnuTLS versions.
19b29f0c7e7e 19b29f0c7e7e 6354365357f2 6354365357f2 e1dd478473a2 6354365357f2 d62b3adec462 6354365357f2 6354365357f2 d0293eece376 e1dd478473a2 e1dd478473a2 e1dd478473a2 e1dd478473a2 d0293eece376 e1dd478473a2 d0293eece376 e1dd478473a2 e1dd478473a2 e1dd478473a2 e1dd478473a2 e1dd478473a2 e1dd478473a2 e1dd478473a2 d0293eece376 e1dd478473a2 e1dd478473a2 e1dd478473a2 e1dd478473a2 d0293eece376 e1dd478473a2 d0293eece376 6354365357f2 e1dd478473a2 e1dd478473a2 e1dd478473a2 e1dd478473a2 | import os
import testinfra.utils.ansible_runner
testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
os.environ['MOLECULE_INVENTORY_FILE']).get_hosts('parameters-*')
def test_backup_patterns_file(host):
"""
Tests if deployed file with backup patterns has correct permissions.
"""
with host.sudo():
backup_pattern = host.file('/etc/duply/main/patterns/test')
assert backup_pattern.is_file
assert backup_pattern.user == 'root'
assert backup_pattern.group == 'root'
assert backup_pattern.mode == 0o600
def test_include_file(host):
"""
Tests if assembled include file has correct permissions.
"""
with host.sudo():
include = host.file('/etc/duply/main/include')
assert include.is_file
assert include.user == 'root'
assert include.group == 'root'
assert include.mode == 0o600
|