71 lines
2.1 KiB
Nix
71 lines
2.1 KiB
Nix
import ./make-test-python.nix (
|
|
{ lib, pkgs, ... }:
|
|
{
|
|
name = "endlessh-go";
|
|
meta.maintainers = with lib.maintainers; [ azahi ];
|
|
|
|
nodes = {
|
|
server =
|
|
{ ... }:
|
|
{
|
|
services.endlessh-go = {
|
|
enable = true;
|
|
prometheus.enable = true;
|
|
openFirewall = true;
|
|
};
|
|
|
|
specialisation = {
|
|
unprivileged.configuration = {
|
|
services.endlessh-go = {
|
|
port = 2222;
|
|
prometheus.port = 9229;
|
|
};
|
|
};
|
|
|
|
privileged.configuration = {
|
|
services.endlessh-go = {
|
|
port = 22;
|
|
prometheus.port = 92;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
client =
|
|
{ pkgs, ... }:
|
|
{
|
|
environment.systemPackages = with pkgs; [
|
|
curl
|
|
netcat
|
|
];
|
|
};
|
|
};
|
|
|
|
testScript = ''
|
|
def activate_specialisation(name: str):
|
|
server.succeed(f"/run/booted-system/specialisation/{name}/bin/switch-to-configuration test >&2")
|
|
|
|
start_all()
|
|
|
|
with subtest("Unprivileged"):
|
|
activate_specialisation("unprivileged")
|
|
server.wait_for_unit("endlessh-go.service")
|
|
server.wait_for_open_port(2222)
|
|
server.wait_for_open_port(9229)
|
|
server.fail("curl -sSf server:9229/metrics | grep -q endlessh_client_closed_count_total")
|
|
client.succeed("nc -dvW5 server 2222")
|
|
server.succeed("curl -sSf server:9229/metrics | grep -q endlessh_client_closed_count_total")
|
|
client.fail("curl -sSfm 5 server:9229/metrics")
|
|
|
|
with subtest("Privileged"):
|
|
activate_specialisation("privileged")
|
|
server.wait_for_unit("endlessh-go.service")
|
|
server.wait_for_open_port(22)
|
|
server.wait_for_open_port(92)
|
|
server.fail("curl -sSf server:92/metrics | grep -q endlessh_client_closed_count_total")
|
|
client.succeed("nc -dvW5 server 22")
|
|
server.succeed("curl -sSf server:92/metrics | grep -q endlessh_client_closed_count_total")
|
|
client.fail("curl -sSfm 5 server:92/metrics")
|
|
'';
|
|
}
|
|
)
|