|
|
|
@ -15,9 +15,11 @@ info_box="[i]".decode("utf-8")
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_setupVars_are_sourced_to_global_scope(Pihole):
|
|
|
|
|
''' currently update_dialogs sources setupVars with a dot,
|
|
|
|
|
'''
|
|
|
|
|
currently update_dialogs sources setupVars with a dot,
|
|
|
|
|
then various other functions use the variables.
|
|
|
|
|
This confirms the sourced variables are in scope between functions '''
|
|
|
|
|
This confirms the sourced variables are in scope between functions
|
|
|
|
|
'''
|
|
|
|
|
setup_var_file = 'cat <<EOF> /etc/pihole/setupVars.conf\n'
|
|
|
|
|
for k,v in SETUPVARS.iteritems():
|
|
|
|
|
setup_var_file += "{}={}\n".format(k, v)
|
|
|
|
@ -49,8 +51,11 @@ def test_setupVars_are_sourced_to_global_scope(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_setupVars_saved_to_file(Pihole):
|
|
|
|
|
''' confirm saved settings are written to a file for future updates to re-use '''
|
|
|
|
|
set_setup_vars = '\n' # dedent works better with this and padding matching script below
|
|
|
|
|
'''
|
|
|
|
|
confirm saved settings are written to a file for future updates to re-use
|
|
|
|
|
'''
|
|
|
|
|
# dedent works better with this and padding matching script below
|
|
|
|
|
set_setup_vars = '\n'
|
|
|
|
|
for k,v in SETUPVARS.iteritems():
|
|
|
|
|
set_setup_vars += " {}={}\n".format(k, v)
|
|
|
|
|
Pihole.run(set_setup_vars).stdout
|
|
|
|
@ -74,7 +79,9 @@ def test_setupVars_saved_to_file(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_configureFirewall_firewalld_running_no_errors(Pihole):
|
|
|
|
|
''' confirms firewalld rules are applied when firewallD is running '''
|
|
|
|
|
'''
|
|
|
|
|
confirms firewalld rules are applied when firewallD is running
|
|
|
|
|
'''
|
|
|
|
|
# firewallD returns 'running' as status
|
|
|
|
|
mock_command('firewall-cmd', {'*': ('running', 0)}, Pihole)
|
|
|
|
|
# Whiptail dialog returns Ok for user prompt
|
|
|
|
@ -87,24 +94,33 @@ def test_configureFirewall_firewalld_running_no_errors(Pihole):
|
|
|
|
|
assert expected_stdout in configureFirewall.stdout
|
|
|
|
|
firewall_calls = Pihole.run('cat /var/log/firewall-cmd').stdout
|
|
|
|
|
assert 'firewall-cmd --state' in firewall_calls
|
|
|
|
|
assert 'firewall-cmd --permanent --add-service=http --add-service=dns' in firewall_calls
|
|
|
|
|
assert ('firewall-cmd '
|
|
|
|
|
'--permanent '
|
|
|
|
|
'--add-service=http '
|
|
|
|
|
'--add-service=dns') in firewall_calls
|
|
|
|
|
assert 'firewall-cmd --reload' in firewall_calls
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_configureFirewall_firewalld_disabled_no_errors(Pihole):
|
|
|
|
|
''' confirms firewalld rules are not applied when firewallD is not running '''
|
|
|
|
|
'''
|
|
|
|
|
confirms firewalld rules are not applied when firewallD is not running
|
|
|
|
|
'''
|
|
|
|
|
# firewallD returns non-running status
|
|
|
|
|
mock_command('firewall-cmd', {'*': ('not running', '1')}, Pihole)
|
|
|
|
|
configureFirewall = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
configureFirewall
|
|
|
|
|
''')
|
|
|
|
|
expected_stdout = 'No active firewall detected.. skipping firewall configuration'
|
|
|
|
|
expected_stdout = ('No active firewall detected.. '
|
|
|
|
|
'skipping firewall configuration')
|
|
|
|
|
assert expected_stdout in configureFirewall.stdout
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_configureFirewall_firewalld_enabled_declined_no_errors(Pihole):
|
|
|
|
|
''' confirms firewalld rules are not applied when firewallD is running, user declines ruleset '''
|
|
|
|
|
'''
|
|
|
|
|
confirms firewalld rules are not applied when firewallD is running, user
|
|
|
|
|
declines ruleset
|
|
|
|
|
'''
|
|
|
|
|
# firewallD returns running status
|
|
|
|
|
mock_command('firewall-cmd', {'*': ('running', 0)}, Pihole)
|
|
|
|
|
# Whiptail dialog returns Cancel for user prompt
|
|
|
|
@ -128,7 +144,10 @@ def test_configureFirewall_no_firewall(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_configureFirewall_IPTables_enabled_declined_no_errors(Pihole):
|
|
|
|
|
''' confirms IPTables rules are not applied when IPTables is running, user declines ruleset '''
|
|
|
|
|
'''
|
|
|
|
|
confirms IPTables rules are not applied when IPTables is running, user
|
|
|
|
|
declines ruleset
|
|
|
|
|
'''
|
|
|
|
|
# iptables command exists
|
|
|
|
|
mock_command('iptables', {'*': ('', '0')}, Pihole)
|
|
|
|
|
# modinfo returns always true (ip_tables module check)
|
|
|
|
@ -144,8 +163,12 @@ def test_configureFirewall_IPTables_enabled_declined_no_errors(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_configureFirewall_IPTables_enabled_rules_exist_no_errors(Pihole):
|
|
|
|
|
''' confirms IPTables rules are not applied when IPTables is running and rules exist '''
|
|
|
|
|
# iptables command exists and returns 0 on calls (should return 0 on iptables -C)
|
|
|
|
|
'''
|
|
|
|
|
confirms IPTables rules are not applied when IPTables is running and rules
|
|
|
|
|
exist
|
|
|
|
|
'''
|
|
|
|
|
# iptables command exists and returns 0 on calls
|
|
|
|
|
# (should return 0 on iptables -C)
|
|
|
|
|
mock_command('iptables', {'-S': ('-P INPUT DENY', '0')}, Pihole)
|
|
|
|
|
# modinfo returns always true (ip_tables module check)
|
|
|
|
|
mock_command('modinfo', {'*': ('', '0')}, Pihole)
|
|
|
|
@ -158,15 +181,38 @@ def test_configureFirewall_IPTables_enabled_rules_exist_no_errors(Pihole):
|
|
|
|
|
expected_stdout = 'Installing new IPTables firewall rulesets'
|
|
|
|
|
assert expected_stdout in configureFirewall.stdout
|
|
|
|
|
firewall_calls = Pihole.run('cat /var/log/iptables').stdout
|
|
|
|
|
assert 'iptables -I INPUT 1 -p tcp -m tcp --dport 80 -j ACCEPT' not in firewall_calls
|
|
|
|
|
assert 'iptables -I INPUT 1 -p tcp -m tcp --dport 53 -j ACCEPT' not in firewall_calls
|
|
|
|
|
assert 'iptables -I INPUT 1 -p udp -m udp --dport 53 -j ACCEPT' not in firewall_calls
|
|
|
|
|
iptables_line = 'iptables -I INPUT 1 -p tcp -m tcp --dport 80 -j ACCEPT'
|
|
|
|
|
assert iptables_line not in firewall_calls
|
|
|
|
|
iptables_line = 'iptables -I INPUT 1 -p tcp -m tcp --dport 53 -j ACCEPT'
|
|
|
|
|
assert iptables_line not in firewall_calls
|
|
|
|
|
iptables_line = 'iptables -I INPUT 1 -p udp -m udp --dport 53 -j ACCEPT'
|
|
|
|
|
assert iptables_line not in firewall_calls
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_configureFirewall_IPTables_enabled_not_exist_no_errors(Pihole):
|
|
|
|
|
''' confirms IPTables rules are applied when IPTables is running and rules do not exist '''
|
|
|
|
|
'''
|
|
|
|
|
confirms IPTables rules are applied when IPTables is running and rules do
|
|
|
|
|
not exist
|
|
|
|
|
'''
|
|
|
|
|
# iptables command and returns 0 on calls (should return 1 on iptables -C)
|
|
|
|
|
mock_command('iptables', {'-S': ('-P INPUT DENY', '0'), '-C': ('', 1), '-I': ('', 0)}, Pihole)
|
|
|
|
|
mock_command(
|
|
|
|
|
'iptables',
|
|
|
|
|
{
|
|
|
|
|
'-S': (
|
|
|
|
|
'-P INPUT DENY',
|
|
|
|
|
'0'
|
|
|
|
|
),
|
|
|
|
|
'-C': (
|
|
|
|
|
'',
|
|
|
|
|
1
|
|
|
|
|
),
|
|
|
|
|
'-I': (
|
|
|
|
|
'',
|
|
|
|
|
0
|
|
|
|
|
)
|
|
|
|
|
},
|
|
|
|
|
Pihole
|
|
|
|
|
)
|
|
|
|
|
# modinfo returns always true (ip_tables module check)
|
|
|
|
|
mock_command('modinfo', {'*': ('', '0')}, Pihole)
|
|
|
|
|
# Whiptail dialog returns Cancel for user prompt
|
|
|
|
@ -178,13 +224,18 @@ def test_configureFirewall_IPTables_enabled_not_exist_no_errors(Pihole):
|
|
|
|
|
expected_stdout = 'Installing new IPTables firewall rulesets'
|
|
|
|
|
assert expected_stdout in configureFirewall.stdout
|
|
|
|
|
firewall_calls = Pihole.run('cat /var/log/iptables').stdout
|
|
|
|
|
assert 'iptables -I INPUT 1 -p tcp -m tcp --dport 80 -j ACCEPT' in firewall_calls
|
|
|
|
|
assert 'iptables -I INPUT 1 -p tcp -m tcp --dport 53 -j ACCEPT' in firewall_calls
|
|
|
|
|
assert 'iptables -I INPUT 1 -p udp -m udp --dport 53 -j ACCEPT' in firewall_calls
|
|
|
|
|
iptables_line = 'iptables -I INPUT 1 -p tcp -m tcp --dport 80 -j ACCEPT'
|
|
|
|
|
assert iptables_line in firewall_calls
|
|
|
|
|
iptables_line = 'iptables -I INPUT 1 -p tcp -m tcp --dport 53 -j ACCEPT'
|
|
|
|
|
assert iptables_line in firewall_calls
|
|
|
|
|
iptables_line = 'iptables -I INPUT 1 -p udp -m udp --dport 53 -j ACCEPT'
|
|
|
|
|
assert iptables_line in firewall_calls
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_selinux_enforcing_default_exit(Pihole):
|
|
|
|
|
''' confirms installer prompts to exit when SELinux is Enforcing by default '''
|
|
|
|
|
'''
|
|
|
|
|
confirms installer prompts to exit when SELinux is Enforcing by default
|
|
|
|
|
'''
|
|
|
|
|
# getenforce returns the running state of SELinux
|
|
|
|
|
mock_command('getenforce', {'*': ('Enforcing', '0')}, Pihole)
|
|
|
|
|
# Whiptail dialog returns Cancel for user prompt
|
|
|
|
@ -193,13 +244,17 @@ def test_selinux_enforcing_default_exit(Pihole):
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
checkSelinux
|
|
|
|
|
''')
|
|
|
|
|
assert info_box + ' SELinux mode detected: Enforcing' in check_selinux.stdout
|
|
|
|
|
assert 'SELinux Enforcing detected, exiting installer' in check_selinux.stdout
|
|
|
|
|
expected_stdout = info_box + ' SELinux mode detected: Enforcing'
|
|
|
|
|
assert expected_stdout in check_selinux.stdout
|
|
|
|
|
expected_stdout = 'SELinux Enforcing detected, exiting installer'
|
|
|
|
|
assert expected_stdout in check_selinux.stdout
|
|
|
|
|
assert check_selinux.rc == 1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_selinux_enforcing_continue(Pihole):
|
|
|
|
|
''' confirms installer prompts to continue with custom policy warning '''
|
|
|
|
|
'''
|
|
|
|
|
confirms installer prompts to continue with custom policy warning
|
|
|
|
|
'''
|
|
|
|
|
# getenforce returns the running state of SELinux
|
|
|
|
|
mock_command('getenforce', {'*': ('Enforcing', '0')}, Pihole)
|
|
|
|
|
# Whiptail dialog returns Cancel for user prompt
|
|
|
|
@ -208,80 +263,117 @@ def test_selinux_enforcing_continue(Pihole):
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
checkSelinux
|
|
|
|
|
''')
|
|
|
|
|
assert info_box + ' SELinux mode detected: Enforcing' in check_selinux.stdout
|
|
|
|
|
assert info_box + ' Continuing installation with SELinux Enforcing' in check_selinux.stdout
|
|
|
|
|
assert info_box + ' Please refer to official SELinux documentation to create a custom policy' in check_selinux.stdout
|
|
|
|
|
expected_stdout = info_box + ' SELinux mode detected: Enforcing'
|
|
|
|
|
assert expected_stdout in check_selinux.stdout
|
|
|
|
|
expected_stdout = info_box + (' Continuing installation with SELinux '
|
|
|
|
|
'Enforcing')
|
|
|
|
|
assert expected_stdout in check_selinux.stdout
|
|
|
|
|
expected_stdout = info_box + (' Please refer to official SELinux '
|
|
|
|
|
'documentation to create a custom policy')
|
|
|
|
|
assert expected_stdout in check_selinux.stdout
|
|
|
|
|
assert check_selinux.rc == 0
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_selinux_permissive(Pihole):
|
|
|
|
|
''' confirms installer continues when SELinux is Permissive '''
|
|
|
|
|
'''
|
|
|
|
|
confirms installer continues when SELinux is Permissive
|
|
|
|
|
'''
|
|
|
|
|
# getenforce returns the running state of SELinux
|
|
|
|
|
mock_command('getenforce', {'*': ('Permissive', '0')}, Pihole)
|
|
|
|
|
check_selinux = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
checkSelinux
|
|
|
|
|
''')
|
|
|
|
|
assert info_box + ' SELinux mode detected: Permissive' in check_selinux.stdout
|
|
|
|
|
expected_stdout = info_box + ' SELinux mode detected: Permissive'
|
|
|
|
|
assert expected_stdout in check_selinux.stdout
|
|
|
|
|
assert check_selinux.rc == 0
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_selinux_disabled(Pihole):
|
|
|
|
|
''' confirms installer continues when SELinux is Disabled '''
|
|
|
|
|
'''
|
|
|
|
|
confirms installer continues when SELinux is Disabled
|
|
|
|
|
'''
|
|
|
|
|
mock_command('getenforce', {'*': ('Disabled', '0')}, Pihole)
|
|
|
|
|
check_selinux = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
checkSelinux
|
|
|
|
|
''')
|
|
|
|
|
assert info_box + ' SELinux mode detected: Disabled' in check_selinux.stdout
|
|
|
|
|
expected_stdout = info_box + ' SELinux mode detected: Disabled'
|
|
|
|
|
assert expected_stdout in check_selinux.stdout
|
|
|
|
|
assert check_selinux.rc == 0
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_installPiholeWeb_fresh_install_no_errors(Pihole):
|
|
|
|
|
''' confirms all web page assets from Core repo are installed on a fresh build '''
|
|
|
|
|
'''
|
|
|
|
|
confirms all web page assets from Core repo are installed on a fresh build
|
|
|
|
|
'''
|
|
|
|
|
installWeb = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
installPiholeWeb
|
|
|
|
|
''')
|
|
|
|
|
assert info_box + ' Installing blocking page...' in installWeb.stdout
|
|
|
|
|
assert tick_box + ' Creating directory for blocking page, and copying files' in installWeb.stdout
|
|
|
|
|
assert cross_box + ' Backing up index.lighttpd.html' in installWeb.stdout
|
|
|
|
|
assert 'No default index.lighttpd.html file found... not backing up' in installWeb.stdout
|
|
|
|
|
assert tick_box + ' Installing sudoer file' in installWeb.stdout
|
|
|
|
|
expected_stdout = info_box + ' Installing blocking page...'
|
|
|
|
|
assert expected_stdout in installWeb.stdout
|
|
|
|
|
expected_stdout = tick_box + (' Creating directory for blocking page, '
|
|
|
|
|
'and copying files')
|
|
|
|
|
assert expected_stdout in installWeb.stdout
|
|
|
|
|
expected_stdout = cross_box + ' Backing up index.lighttpd.html'
|
|
|
|
|
assert expected_stdout in installWeb.stdout
|
|
|
|
|
expected_stdout = ('No default index.lighttpd.html file found... '
|
|
|
|
|
'not backing up')
|
|
|
|
|
assert expected_stdout in installWeb.stdout
|
|
|
|
|
expected_stdout = tick_box + ' Installing sudoer file'
|
|
|
|
|
assert expected_stdout in installWeb.stdout
|
|
|
|
|
web_directory = Pihole.run('ls -r /var/www/html/pihole').stdout
|
|
|
|
|
assert 'index.php' in web_directory
|
|
|
|
|
assert 'blockingpage.css' in web_directory
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_update_package_cache_success_no_errors(Pihole):
|
|
|
|
|
''' confirms package cache was updated without any errors'''
|
|
|
|
|
'''
|
|
|
|
|
confirms package cache was updated without any errors
|
|
|
|
|
'''
|
|
|
|
|
updateCache = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
distro_check
|
|
|
|
|
update_package_cache
|
|
|
|
|
''')
|
|
|
|
|
assert tick_box + ' Update local cache of available packages' in updateCache.stdout
|
|
|
|
|
expected_stdout = tick_box + ' Update local cache of available packages'
|
|
|
|
|
assert expected_stdout in updateCache.stdout
|
|
|
|
|
assert 'Error: Unable to update package cache.' not in updateCache.stdout
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_update_package_cache_failure_no_errors(Pihole):
|
|
|
|
|
''' confirms package cache was not updated'''
|
|
|
|
|
'''
|
|
|
|
|
confirms package cache was not updated
|
|
|
|
|
'''
|
|
|
|
|
mock_command('apt-get', {'update': ('', '1')}, Pihole)
|
|
|
|
|
updateCache = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
distro_check
|
|
|
|
|
update_package_cache
|
|
|
|
|
''')
|
|
|
|
|
assert cross_box + ' Update local cache of available packages' in updateCache.stdout
|
|
|
|
|
expected_stdout = cross_box + ' Update local cache of available packages'
|
|
|
|
|
assert expected_stdout in updateCache.stdout
|
|
|
|
|
assert 'Error: Unable to update package cache.' in updateCache.stdout
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_FTL_detect_aarch64_no_errors(Pihole):
|
|
|
|
|
''' confirms only aarch64 package is downloaded for FTL engine '''
|
|
|
|
|
'''
|
|
|
|
|
confirms only aarch64 package is downloaded for FTL engine
|
|
|
|
|
'''
|
|
|
|
|
# mock uname to return aarch64 platform
|
|
|
|
|
mock_command('uname', {'-m': ('aarch64', '0')}, Pihole)
|
|
|
|
|
# mock ldd to respond with aarch64 shared library
|
|
|
|
|
mock_command('ldd', {'/bin/ls': ('/lib/ld-linux-aarch64.so.1', '0')}, Pihole)
|
|
|
|
|
mock_command(
|
|
|
|
|
'ldd',
|
|
|
|
|
{
|
|
|
|
|
'/bin/ls': (
|
|
|
|
|
'/lib/ld-linux-aarch64.so.1',
|
|
|
|
|
'0'
|
|
|
|
|
)
|
|
|
|
|
},
|
|
|
|
|
Pihole
|
|
|
|
|
)
|
|
|
|
|
detectPlatform = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
FTLdetect
|
|
|
|
@ -295,7 +387,9 @@ def test_FTL_detect_aarch64_no_errors(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_FTL_detect_armv6l_no_errors(Pihole):
|
|
|
|
|
''' confirms only armv6l package is downloaded for FTL engine '''
|
|
|
|
|
'''
|
|
|
|
|
confirms only armv6l package is downloaded for FTL engine
|
|
|
|
|
'''
|
|
|
|
|
# mock uname to return armv6l platform
|
|
|
|
|
mock_command('uname', {'-m': ('armv6l', '0')}, Pihole)
|
|
|
|
|
# mock ldd to respond with aarch64 shared library
|
|
|
|
@ -306,14 +400,17 @@ def test_FTL_detect_armv6l_no_errors(Pihole):
|
|
|
|
|
''')
|
|
|
|
|
expected_stdout = info_box + ' FTL Checks...'
|
|
|
|
|
assert expected_stdout in detectPlatform.stdout
|
|
|
|
|
expected_stdout = tick_box + ' Detected ARM-hf architecture (armv6 or lower)'
|
|
|
|
|
expected_stdout = tick_box + (' Detected ARM-hf architecture '
|
|
|
|
|
'(armv6 or lower)')
|
|
|
|
|
assert expected_stdout in detectPlatform.stdout
|
|
|
|
|
expected_stdout = tick_box + ' Downloading and Installing FTL'
|
|
|
|
|
assert expected_stdout in detectPlatform.stdout
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_FTL_detect_armv7l_no_errors(Pihole):
|
|
|
|
|
''' confirms only armv7l package is downloaded for FTL engine '''
|
|
|
|
|
'''
|
|
|
|
|
confirms only armv7l package is downloaded for FTL engine
|
|
|
|
|
'''
|
|
|
|
|
# mock uname to return armv7l platform
|
|
|
|
|
mock_command('uname', {'-m': ('armv7l', '0')}, Pihole)
|
|
|
|
|
# mock ldd to respond with aarch64 shared library
|
|
|
|
@ -331,7 +428,9 @@ def test_FTL_detect_armv7l_no_errors(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_FTL_detect_x86_64_no_errors(Pihole):
|
|
|
|
|
''' confirms only x86_64 package is downloaded for FTL engine '''
|
|
|
|
|
'''
|
|
|
|
|
confirms only x86_64 package is downloaded for FTL engine
|
|
|
|
|
'''
|
|
|
|
|
detectPlatform = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
FTLdetect
|
|
|
|
@ -357,7 +456,9 @@ def test_FTL_detect_unknown_no_errors(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_FTL_download_aarch64_no_errors(Pihole):
|
|
|
|
|
''' confirms only aarch64 package is downloaded for FTL engine '''
|
|
|
|
|
'''
|
|
|
|
|
confirms only aarch64 package is downloaded for FTL engine
|
|
|
|
|
'''
|
|
|
|
|
# mock uname to return generic platform
|
|
|
|
|
download_binary = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
@ -372,7 +473,9 @@ def test_FTL_download_aarch64_no_errors(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_FTL_download_unknown_fails_no_errors(Pihole):
|
|
|
|
|
''' confirms unknown binary is not downloaded for FTL engine '''
|
|
|
|
|
'''
|
|
|
|
|
confirms unknown binary is not downloaded for FTL engine
|
|
|
|
|
'''
|
|
|
|
|
# mock uname to return generic platform
|
|
|
|
|
download_binary = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
@ -385,7 +488,9 @@ def test_FTL_download_unknown_fails_no_errors(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_FTL_binary_installed_and_responsive_no_errors(Pihole):
|
|
|
|
|
''' confirms FTL binary is copied and functional in installed location '''
|
|
|
|
|
'''
|
|
|
|
|
confirms FTL binary is copied and functional in installed location
|
|
|
|
|
'''
|
|
|
|
|
installed_binary = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
FTLdetect
|
|
|
|
@ -396,7 +501,9 @@ def test_FTL_binary_installed_and_responsive_no_errors(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
# def test_FTL_support_files_installed(Pihole):
|
|
|
|
|
# ''' confirms FTL support files are installed '''
|
|
|
|
|
# '''
|
|
|
|
|
# confirms FTL support files are installed
|
|
|
|
|
# '''
|
|
|
|
|
# support_files = Pihole.run('''
|
|
|
|
|
# source /opt/pihole/basic-install.sh
|
|
|
|
|
# FTLdetect
|
|
|
|
@ -411,21 +518,44 @@ def test_FTL_binary_installed_and_responsive_no_errors(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_IPv6_only_link_local(Pihole):
|
|
|
|
|
''' confirms IPv6 blocking is disabled for Link-local address '''
|
|
|
|
|
'''
|
|
|
|
|
confirms IPv6 blocking is disabled for Link-local address
|
|
|
|
|
'''
|
|
|
|
|
# mock ip -6 address to return Link-local address
|
|
|
|
|
mock_command_2('ip', {'-6 address': ('inet6 fe80::d210:52fa:fe00:7ad7/64 scope link', '0')}, Pihole)
|
|
|
|
|
mock_command_2(
|
|
|
|
|
'ip',
|
|
|
|
|
{
|
|
|
|
|
'-6 address': (
|
|
|
|
|
'inet6 fe80::d210:52fa:fe00:7ad7/64 scope link',
|
|
|
|
|
'0'
|
|
|
|
|
)
|
|
|
|
|
},
|
|
|
|
|
Pihole
|
|
|
|
|
)
|
|
|
|
|
detectPlatform = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
useIPv6dialog
|
|
|
|
|
''')
|
|
|
|
|
expected_stdout = 'Unable to find IPv6 ULA/GUA address, IPv6 adblocking will not be enabled'
|
|
|
|
|
expected_stdout = ('Unable to find IPv6 ULA/GUA address, '
|
|
|
|
|
'IPv6 adblocking will not be enabled')
|
|
|
|
|
assert expected_stdout in detectPlatform.stdout
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_IPv6_only_ULA(Pihole):
|
|
|
|
|
''' confirms IPv6 blocking is enabled for ULA addresses '''
|
|
|
|
|
'''
|
|
|
|
|
confirms IPv6 blocking is enabled for ULA addresses
|
|
|
|
|
'''
|
|
|
|
|
# mock ip -6 address to return ULA address
|
|
|
|
|
mock_command_2('ip', {'-6 address': ('inet6 fda2:2001:5555:0:d210:52fa:fe00:7ad7/64 scope global', '0')}, Pihole)
|
|
|
|
|
mock_command_2(
|
|
|
|
|
'ip',
|
|
|
|
|
{
|
|
|
|
|
'-6 address': (
|
|
|
|
|
'inet6 fda2:2001:5555:0:d210:52fa:fe00:7ad7/64 scope global',
|
|
|
|
|
'0'
|
|
|
|
|
)
|
|
|
|
|
},
|
|
|
|
|
Pihole
|
|
|
|
|
)
|
|
|
|
|
detectPlatform = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
useIPv6dialog
|
|
|
|
@ -435,9 +565,20 @@ def test_IPv6_only_ULA(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_IPv6_only_GUA(Pihole):
|
|
|
|
|
''' confirms IPv6 blocking is enabled for GUA addresses '''
|
|
|
|
|
'''
|
|
|
|
|
confirms IPv6 blocking is enabled for GUA addresses
|
|
|
|
|
'''
|
|
|
|
|
# mock ip -6 address to return GUA address
|
|
|
|
|
mock_command_2('ip', {'-6 address': ('inet6 2003:12:1e43:301:d210:52fa:fe00:7ad7/64 scope global', '0')}, Pihole)
|
|
|
|
|
mock_command_2(
|
|
|
|
|
'ip',
|
|
|
|
|
{
|
|
|
|
|
'-6 address': (
|
|
|
|
|
'inet6 2003:12:1e43:301:d210:52fa:fe00:7ad7/64 scope global',
|
|
|
|
|
'0'
|
|
|
|
|
)
|
|
|
|
|
},
|
|
|
|
|
Pihole
|
|
|
|
|
)
|
|
|
|
|
detectPlatform = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
useIPv6dialog
|
|
|
|
@ -447,9 +588,21 @@ def test_IPv6_only_GUA(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_IPv6_GUA_ULA_test(Pihole):
|
|
|
|
|
''' confirms IPv6 blocking is enabled for GUA and ULA addresses '''
|
|
|
|
|
'''
|
|
|
|
|
confirms IPv6 blocking is enabled for GUA and ULA addresses
|
|
|
|
|
'''
|
|
|
|
|
# mock ip -6 address to return GUA and ULA addresses
|
|
|
|
|
mock_command_2('ip', {'-6 address': ('inet6 2003:12:1e43:301:d210:52fa:fe00:7ad7/64 scope global\ninet6 fda2:2001:5555:0:d210:52fa:fe00:7ad7/64 scope global', '0')}, Pihole)
|
|
|
|
|
mock_command_2(
|
|
|
|
|
'ip',
|
|
|
|
|
{
|
|
|
|
|
'-6 address': (
|
|
|
|
|
'inet6 2003:12:1e43:301:d210:52fa:fe00:7ad7/64 scope global\n'
|
|
|
|
|
'inet6 fda2:2001:5555:0:d210:52fa:fe00:7ad7/64 scope global',
|
|
|
|
|
'0'
|
|
|
|
|
)
|
|
|
|
|
},
|
|
|
|
|
Pihole
|
|
|
|
|
)
|
|
|
|
|
detectPlatform = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
useIPv6dialog
|
|
|
|
@ -459,9 +612,21 @@ def test_IPv6_GUA_ULA_test(Pihole):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_IPv6_ULA_GUA_test(Pihole):
|
|
|
|
|
''' confirms IPv6 blocking is enabled for GUA and ULA addresses '''
|
|
|
|
|
'''
|
|
|
|
|
confirms IPv6 blocking is enabled for GUA and ULA addresses
|
|
|
|
|
'''
|
|
|
|
|
# mock ip -6 address to return ULA and GUA addresses
|
|
|
|
|
mock_command_2('ip', {'-6 address': ('inet6 fda2:2001:5555:0:d210:52fa:fe00:7ad7/64 scope global\ninet6 2003:12:1e43:301:d210:52fa:fe00:7ad7/64 scope global', '0')}, Pihole)
|
|
|
|
|
mock_command_2(
|
|
|
|
|
'ip',
|
|
|
|
|
{
|
|
|
|
|
'-6 address': (
|
|
|
|
|
'inet6 fda2:2001:5555:0:d210:52fa:fe00:7ad7/64 scope global\n'
|
|
|
|
|
'inet6 2003:12:1e43:301:d210:52fa:fe00:7ad7/64 scope global',
|
|
|
|
|
'0'
|
|
|
|
|
)
|
|
|
|
|
},
|
|
|
|
|
Pihole
|
|
|
|
|
)
|
|
|
|
|
detectPlatform = Pihole.run('''
|
|
|
|
|
source /opt/pihole/basic-install.sh
|
|
|
|
|
useIPv6dialog
|
|
|
|
@ -472,7 +637,10 @@ def test_IPv6_ULA_GUA_test(Pihole):
|
|
|
|
|
|
|
|
|
|
# Helper functions
|
|
|
|
|
def mock_command(script, args, container):
|
|
|
|
|
''' Allows for setup of commands we don't really want to have to run for real in unit tests '''
|
|
|
|
|
'''
|
|
|
|
|
Allows for setup of commands we don't really want to have to run for real
|
|
|
|
|
in unit tests
|
|
|
|
|
'''
|
|
|
|
|
full_script_path = '/usr/local/bin/{}'.format(script)
|
|
|
|
|
mock_script = dedent('''\
|
|
|
|
|
#!/bin/bash -e
|
|
|
|
@ -490,11 +658,16 @@ def mock_command(script, args, container):
|
|
|
|
|
container.run('''
|
|
|
|
|
cat <<EOF> {script}\n{content}\nEOF
|
|
|
|
|
chmod +x {script}
|
|
|
|
|
rm -f /var/log/{scriptlog}'''.format(script=full_script_path, content=mock_script, scriptlog=script))
|
|
|
|
|
rm -f /var/log/{scriptlog}'''.format(script=full_script_path,
|
|
|
|
|
content=mock_script,
|
|
|
|
|
scriptlog=script))
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def mock_command_2(script, args, container):
|
|
|
|
|
''' Allows for setup of commands we don't really want to have to run for real in unit tests '''
|
|
|
|
|
'''
|
|
|
|
|
Allows for setup of commands we don't really want to have to run for real
|
|
|
|
|
in unit tests
|
|
|
|
|
'''
|
|
|
|
|
full_script_path = '/usr/local/bin/{}'.format(script)
|
|
|
|
|
mock_script = dedent('''\
|
|
|
|
|
#!/bin/bash -e
|
|
|
|
@ -512,7 +685,9 @@ def mock_command_2(script, args, container):
|
|
|
|
|
container.run('''
|
|
|
|
|
cat <<EOF> {script}\n{content}\nEOF
|
|
|
|
|
chmod +x {script}
|
|
|
|
|
rm -f /var/log/{scriptlog}'''.format(script=full_script_path, content=mock_script, scriptlog=script))
|
|
|
|
|
rm -f /var/log/{scriptlog}'''.format(script=full_script_path,
|
|
|
|
|
content=mock_script,
|
|
|
|
|
scriptlog=script))
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def run_script(Pihole, script):
|
|
|
|
|