63 lines
2 KiB
Nix
63 lines
2 KiB
Nix
|
# This test runs PowerDNS authoritative server with the
|
||
|
|
# generic MySQL backend (gmysql) to connect to a
|
||
|
|
# MariaDB server using UNIX sockets authentication.
|
||
|
|
|
||
|
|
import ./make-test-python.nix ({ pkgs, lib, ... }: {
|
||
|
|
name = "powerdns";
|
||
|
|
|
||
|
|
nodes.server = { ... }: {
|
||
|
|
services.powerdns.enable = true;
|
||
|
|
services.powerdns.extraConfig = ''
|
||
|
|
launch=gmysql
|
||
|
|
gmysql-user=pdns
|
||
|
|
zone-cache-refresh-interval=0
|
||
|
|
'';
|
||
|
|
|
||
|
|
services.mysql = {
|
||
|
|
enable = true;
|
||
|
|
package = pkgs.mariadb;
|
||
|
|
ensureDatabases = [ "powerdns" ];
|
||
|
|
ensureUsers = lib.singleton
|
||
|
|
{ name = "pdns";
|
||
|
|
ensurePermissions = { "powerdns.*" = "ALL PRIVILEGES"; };
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
environment.systemPackages = with pkgs;
|
||
|
|
[ dnsutils powerdns mariadb ];
|
||
|
|
};
|
||
|
|
|
||
|
|
testScript = ''
|
||
|
|
with subtest("PowerDNS database exists"):
|
||
|
|
server.wait_for_unit("mysql")
|
||
|
|
server.succeed("echo 'SHOW DATABASES;' | sudo -u pdns mysql -u pdns >&2")
|
||
|
|
|
||
|
|
with subtest("Loading the MySQL schema works"):
|
||
|
|
server.succeed(
|
||
|
|
"sudo -u pdns mysql -u pdns -D powerdns <"
|
||
|
|
"${pkgs.powerdns}/share/doc/pdns/schema.mysql.sql"
|
||
|
|
)
|
||
|
|
|
||
|
|
with subtest("PowerDNS server starts"):
|
||
|
|
server.wait_for_unit("pdns")
|
||
|
|
server.succeed("dig version.bind txt chaos @127.0.0.1 >&2")
|
||
|
|
|
||
|
|
with subtest("Adding an example zone works"):
|
||
|
|
# Extract configuration file needed by pdnsutil
|
||
|
|
pdnsutil = "sudo -u pdns pdnsutil "
|
||
|
|
server.succeed(f"{pdnsutil} create-zone example.com ns1.example.com")
|
||
|
|
server.succeed(f"{pdnsutil} add-record example.com ns1 A 192.168.1.2")
|
||
|
|
|
||
|
|
with subtest("Querying the example zone works"):
|
||
|
|
reply = server.succeed("dig +noall +answer ns1.example.com @127.0.0.1")
|
||
|
|
assert (
|
||
|
|
"192.168.1.2" in reply
|
||
|
|
), f""""
|
||
|
|
The reply does not contain the expected IP address:
|
||
|
|
Expected:
|
||
|
|
ns1.example.com. 3600 IN A 192.168.1.2
|
||
|
|
Reply:
|
||
|
|
{reply}"""
|
||
|
|
'';
|
||
|
|
})
|