majic-ansible-roles Files · roles/mail_forwarder/molecule/default/tests/test_connectivity_from

Files @ 770551dc8c6f

Branch filter:

Location: majic-ansible-roles/roles/mail_forwarder/molecule/default/tests/test_connectivity_from_client.py

770551dc8c6f 1.3 KiB text/x-python Show Annotation Show as Raw Download as Raw

branko

MAR-148: Improve the SSH connectivity tests in backup_server role to be more reliable:

- Introduce a session-level fixture for setting permissions for client
SSH private keys (fixes errors related to SSH requesting tighter
permissions).
- Add assertions for the tests that verify the backup clients cannot
connect to the regular SSH server in case the SSH private keys do
not have correct permissions (just in case).

import os

import testinfra.utils.ansible_runner


testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
    os.environ['MOLECULE_INVENTORY_FILE']).get_hosts('client1')


def test_connectivity_from_client(host):
    """
    Tests connectivity towards mail forwarder servers from client
    (non-relay). Connectivity should fail for both.
    """

    with host.sudo():

        ping = host.run('hping3 -S -p 25 -c 1 parameters-mandatory-jessie64')
        assert ping.rc != 0
        assert "100% packet loss" in ping.stderr

        ping = host.run('hping3 -S -p 25 -c 1 parameters-optional-jessie64')
        assert ping.rc != 0
        assert "100% packet loss" in ping.stderr

        ping = host.run('hping3 -S -p 25 -c 1 parameters-no-incoming-jessie64')
        assert "100% packet loss" in ping.stderr
        assert ping.rc != 0

        ping = host.run('hping3 -S -p 25 -c 1 parameters-mandatory-stretch64')
        assert ping.rc != 0
        assert "100% packet loss" in ping.stderr

        ping = host.run('hping3 -S -p 25 -c 1 parameters-optional-stretch64')
        assert ping.rc != 0
        assert "100% packet loss" in ping.stderr

        ping = host.run('hping3 -S -p 25 -c 1 parameters-no-incoming-stretch64')
        assert "100% packet loss" in ping.stderr
        assert ping.rc != 0