commit f2915c1616294aa28c2ad5ec53f27e0afc8eae14 · pyrox.dev/nixpkgs

+99 -60
nixos/tests/rspamd.nix
···

       3
       3
        
         pkgs ? import ../.. { inherit system config; }

     

       4
       4
        
       }:

     

       5
       5
        
       

     

       6
       6
       -
       with import ../lib/testing.nix { inherit system pkgs; };

     

       6
       6
       +
       with import ../lib/testing-python.nix { inherit system pkgs; };

     

       7
       7
        
       with pkgs.lib;

     

       8
       8
        
       

     

       9
       9
        
       let

     

       10
       10
        
         initMachine = ''

     

       11
       11
       -
           startAll

     

       12
       12
       -
           $machine->waitForUnit("rspamd.service");

     

       13
       13
       -
           $machine->succeed("id \"rspamd\" >/dev/null");

     

       11
       11
       +
           start_all()

     

       12
       12
       +
           machine.wait_for_unit("rspamd.service")

     

       13
       13
       +
           machine.succeed("id rspamd >/dev/null")

     

       14
       14
        
         '';

     

       15
       15
        
         checkSocket = socket: user: group: mode: ''

     

       16
       16
       -
           $machine->succeed("ls ${socket} >/dev/null");

     

       17
       17
       -
           $machine->succeed("[[ \"\$(stat -c %U ${socket})\" == \"${user}\" ]]");

     

       18
       18
       -
           $machine->succeed("[[ \"\$(stat -c %G ${socket})\" == \"${group}\" ]]");

     

       19
       19
       -
           $machine->succeed("[[ \"\$(stat -c %a ${socket})\" == \"${mode}\" ]]");

     

       16
       16
       +
           machine.succeed("ls ${socket} >/dev/null")

     

       17
       17
       +
           machine.succeed('[[ "$(stat -c %U ${socket})" == "${user}" ]]')

     

       18
       18
       +
           machine.succeed('[[ "$(stat -c %G ${socket})" == "${group}" ]]')

     

       19
       19
       +
           machine.succeed('[[ "$(stat -c %a ${socket})" == "${mode}" ]]')

     

       20
       20
        
         '';

     

       21
       21
        
         simple = name: enableIPv6: makeTest {

     

       22
       22
        
           name = "rspamd-${name}";

     
···

       25
       25
        
             networking.enableIPv6 = enableIPv6;

     

       26
       26
        
           };

     

       27
       27
        
           testScript = ''

     

       28
       28
       -
             startAll

     

       29
       29
       -
             $machine->waitForUnit("multi-user.target");

     

       30
       30
       -
             $machine->waitForOpenPort(11334);

     

       31
       31
       -
             $machine->waitForUnit("rspamd.service");

     

       32
       32
       -
             $machine->succeed("id \"rspamd\" >/dev/null");

     

       28
       28
       +
             start_all()

     

       29
       29
       +
             machine.wait_for_unit("multi-user.target")

     

       30
       30
       +
             machine.wait_for_open_port(11334)

     

       31
       31
       +
             machine.wait_for_unit("rspamd.service")

     

       32
       32
       +
             machine.succeed("id rspamd >/dev/null")

     

       33
       33
        
             ${checkSocket "/run/rspamd/rspamd.sock" "rspamd" "rspamd" "660" }

     

       34
       34
       -
             sleep 10;

     

       35
       35
       -
             $machine->log($machine->succeed("cat /etc/rspamd/rspamd.conf"));

     

       36
       36
       -
             $machine->log($machine->succeed("grep 'CONFDIR/worker-controller.inc' /etc/rspamd/rspamd.conf"));

     

       37
       37
       -
             $machine->log($machine->succeed("grep 'CONFDIR/worker-normal.inc' /etc/rspamd/rspamd.conf"));

     

       38
       38
       -
             $machine->log($machine->succeed("systemctl cat rspamd.service"));

     

       39
       39
       -
             $machine->log($machine->succeed("curl http://localhost:11334/auth"));

     

       40
       40
       -
             $machine->log($machine->succeed("curl http://127.0.0.1:11334/auth"));

     

       41
       41
       -
             ${optionalString enableIPv6 ''

     

       42
       42
       -
               $machine->log($machine->succeed("curl http://[::1]:11334/auth"));

     

       43
       43
       -
             ''}

     

       34
       34
       +
             machine.sleep(10)

     

       35
       35
       +
             machine.log(machine.succeed("cat /etc/rspamd/rspamd.conf"))

     

       36
       36
       +
             machine.log(

     

       37
       37
       +
                 machine.succeed("grep 'CONFDIR/worker-controller.inc' /etc/rspamd/rspamd.conf")

     

       38
       38
       +
             )

     

       39
       39
       +
             machine.log(machine.succeed("grep 'CONFDIR/worker-normal.inc' /etc/rspamd/rspamd.conf"))

     

       40
       40
       +
             machine.log(machine.succeed("systemctl cat rspamd.service"))

     

       41
       41
       +
             machine.log(machine.succeed("curl http://localhost:11334/auth"))

     

       42
       42
       +
             machine.log(machine.succeed("curl http://127.0.0.1:11334/auth"))

     

       43
       43
       +
             ${optionalString enableIPv6 ''machine.log(machine.succeed("curl http://[::1]:11334/auth"))''}

     

       44
       44
       +
             # would not reformat

     

       44
       45
        
           '';

     

       45
       46
        
         };

     

       46
       47
        
       in

     
···

       69
       70
        
       

     

       70
       71
        
           testScript = ''

     

       71
       72
        
             ${initMachine}

     

       72
       72
       -
             $machine->waitForFile("/run/rspamd.sock");

     

       73
       73
       +
             machine.wait_for_file("/run/rspamd.sock")

     

       73
       74
        
             ${checkSocket "/run/rspamd.sock" "root" "root" "600" }

     

       74
       75
        
             ${checkSocket "/run/rspamd-worker.sock" "root" "root" "666" }

     

       75
       75
       -
             $machine->log($machine->succeed("cat /etc/rspamd/rspamd.conf"));

     

       76
       76
       -
             $machine->log($machine->succeed("grep 'CONFDIR/worker-controller.inc' /etc/rspamd/rspamd.conf"));

     

       77
       77
       -
             $machine->log($machine->succeed("grep 'CONFDIR/worker-normal.inc' /etc/rspamd/rspamd.conf"));

     

       78
       78
       -
             $machine->log($machine->succeed("rspamc -h /run/rspamd-worker.sock stat"));

     

       79
       79
       -
             $machine->log($machine->succeed("curl --unix-socket /run/rspamd-worker.sock http://localhost/ping"));

     

       76
       76
       +
             machine.log(machine.succeed("cat /etc/rspamd/rspamd.conf"))

     

       77
       77
       +
             machine.log(

     

       78
       78
       +
                 machine.succeed("grep 'CONFDIR/worker-controller.inc' /etc/rspamd/rspamd.conf")

     

       79
       79
       +
             )

     

       80
       80
       +
             machine.log(machine.succeed("grep 'CONFDIR/worker-normal.inc' /etc/rspamd/rspamd.conf"))

     

       81
       81
       +
             machine.log(machine.succeed("rspamc -h /run/rspamd-worker.sock stat"))

     

       82
       82
       +
             machine.log(

     

       83
       83
       +
                 machine.succeed("curl --unix-socket /run/rspamd-worker.sock http://localhost/ping")

     

       84
       84
       +
             )

     

       80
       85
        
           '';

     

       81
       86
        
         };

     

       82
       87
        
       

     
···

       111
       116
        
       

     

       112
       117
        
           testScript = ''

     

       113
       118
        
             ${initMachine}

     

       114
       114
       -
             $machine->waitForFile("/run/rspamd.sock");

     

       119
       119
       +
             machine.wait_for_file("/run/rspamd.sock")

     

       115
       120
        
             ${checkSocket "/run/rspamd.sock" "root" "root" "600" }

     

       116
       121
        
             ${checkSocket "/run/rspamd-worker.sock" "root" "root" "666" }

     

       117
       117
       -
             $machine->log($machine->succeed("cat /etc/rspamd/rspamd.conf"));

     

       118
       118
       -
             $machine->log($machine->succeed("grep 'CONFDIR/worker-controller.inc' /etc/rspamd/rspamd.conf"));

     

       119
       119
       -
             $machine->log($machine->succeed("grep 'CONFDIR/worker-normal.inc' /etc/rspamd/rspamd.conf"));

     

       120
       120
       -
             $machine->log($machine->succeed("grep 'LOCAL_CONFDIR/override.d/worker-controller2.inc' /etc/rspamd/rspamd.conf"));

     

       121
       121
       -
             $machine->log($machine->succeed("grep 'verysecretpassword' /etc/rspamd/override.d/worker-controller2.inc"));

     

       122
       122
       -
             $machine->waitUntilSucceeds("journalctl -u rspamd | grep -i 'starting controller process' >&2");

     

       123
       123
       -
             $machine->log($machine->succeed("rspamc -h /run/rspamd-worker.sock stat"));

     

       124
       124
       -
             $machine->log($machine->succeed("curl --unix-socket /run/rspamd-worker.sock http://localhost/ping"));

     

       125
       125
       -
             $machine->log($machine->succeed("curl http://localhost:11335/ping"));

     

       122
       122
       +
             machine.log(machine.succeed("cat /etc/rspamd/rspamd.conf"))

     

       123
       123
       +
             machine.log(

     

       124
       124
       +
                 machine.succeed("grep 'CONFDIR/worker-controller.inc' /etc/rspamd/rspamd.conf")

     

       125
       125
       +
             )

     

       126
       126
       +
             machine.log(machine.succeed("grep 'CONFDIR/worker-normal.inc' /etc/rspamd/rspamd.conf"))

     

       127
       127
       +
             machine.log(

     

       128
       128
       +
                 machine.succeed(

     

       129
       129
       +
                     "grep 'LOCAL_CONFDIR/override.d/worker-controller2.inc' /etc/rspamd/rspamd.conf"

     

       130
       130
       +
                 )

     

       131
       131
       +
             )

     

       132
       132
       +
             machine.log(

     

       133
       133
       +
                 machine.succeed(

     

       134
       134
       +
                     "grep 'verysecretpassword' /etc/rspamd/override.d/worker-controller2.inc"

     

       135
       135
       +
                 )

     

       136
       136
       +
             )

     

       137
       137
       +
             machine.wait_until_succeeds(

     

       138
       138
       +
                 "journalctl -u rspamd | grep -i 'starting controller process' >&2"

     

       139
       139
       +
             )

     

       140
       140
       +
             machine.log(machine.succeed("rspamc -h /run/rspamd-worker.sock stat"))

     

       141
       141
       +
             machine.log(

     

       142
       142
       +
                 machine.succeed("curl --unix-socket /run/rspamd-worker.sock http://localhost/ping")

     

       143
       143
       +
             )

     

       144
       144
       +
             machine.log(machine.succeed("curl http://localhost:11335/ping"))

     

       126
       145
        
           '';

     

       127
       146
        
         };

     

       128
       147
        
         customLuaRules = makeTest {

     
···

       199
       218
        
           };

     

       200
       219
        
           testScript = ''

     

       201
       220
        
             ${initMachine}

     

       202
       202
       -
             $machine->waitForOpenPort(11334);

     

       203
       203
       -
             $machine->log($machine->succeed("cat /etc/rspamd/rspamd.conf"));

     

       204
       204
       -
             $machine->log($machine->succeed("cat /etc/rspamd/rspamd.local.lua"));

     

       205
       205
       -
             $machine->log($machine->succeed("cat /etc/rspamd/local.d/groups.conf"));

     

       221
       221
       +
             machine.wait_for_open_port(11334)

     

       222
       222
       +
             machine.log(machine.succeed("cat /etc/rspamd/rspamd.conf"))

     

       223
       223
       +
             machine.log(machine.succeed("cat /etc/rspamd/rspamd.local.lua"))

     

       224
       224
       +
             machine.log(machine.succeed("cat /etc/rspamd/local.d/groups.conf"))

     

       206
       225
        
             # Verify that redis.conf was not written

     

       207
       207
       -
             $machine->fail("cat /etc/rspamd/local.d/redis.conf >&2");

     

       226
       226
       +
             machine.fail("cat /etc/rspamd/local.d/redis.conf >&2")

     

       208
       227
        
             # Verify that antivirus.conf was not written

     

       209
       209
       -
             $machine->fail("cat /etc/rspamd/local.d/antivirus.conf >&2");

     

       228
       228
       +
             machine.fail("cat /etc/rspamd/local.d/antivirus.conf >&2")

     

       210
       229
        
             ${checkSocket "/run/rspamd/rspamd.sock" "rspamd" "rspamd" "660" }

     

       211
       211
       -
             $machine->log($machine->succeed("curl --unix-socket /run/rspamd/rspamd.sock http://localhost/ping"));

     

       212
       212
       -
             $machine->log($machine->succeed("rspamc -h 127.0.0.1:11334 stat"));

     

       213
       213
       -
             $machine->log($machine->succeed("cat /etc/tests/no-muh.eml | rspamc -h 127.0.0.1:11334"));

     

       214
       214
       -
             $machine->log($machine->succeed("cat /etc/tests/muh.eml | rspamc -h 127.0.0.1:11334 symbols"));

     

       215
       215
       -
             $machine->waitUntilSucceeds("journalctl -u rspamd | grep -i muh >&2");

     

       216
       216
       -
             $machine->log($machine->fail("cat /etc/tests/no-muh.eml | rspamc -h 127.0.0.1:11334 symbols | grep NO_MUH"));

     

       217
       217
       -
             $machine->log($machine->succeed("cat /etc/tests/muh.eml | rspamc -h 127.0.0.1:11334 symbols | grep NO_MUH"));

     

       230
       230
       +
             machine.log(

     

       231
       231
       +
                 machine.succeed("curl --unix-socket /run/rspamd/rspamd.sock http://localhost/ping")

     

       232
       232
       +
             )

     

       233
       233
       +
             machine.log(machine.succeed("rspamc -h 127.0.0.1:11334 stat"))

     

       234
       234
       +
             machine.log(machine.succeed("cat /etc/tests/no-muh.eml | rspamc -h 127.0.0.1:11334"))

     

       235
       235
       +
             machine.log(

     

       236
       236
       +
                 machine.succeed("cat /etc/tests/muh.eml | rspamc -h 127.0.0.1:11334 symbols")

     

       237
       237
       +
             )

     

       238
       238
       +
             machine.wait_until_succeeds("journalctl -u rspamd | grep -i muh >&2")

     

       239
       239
       +
             machine.log(

     

       240
       240
       +
                 machine.fail(

     

       241
       241
       +
                     "cat /etc/tests/no-muh.eml | rspamc -h 127.0.0.1:11334 symbols | grep NO_MUH"

     

       242
       242
       +
                 )

     

       243
       243
       +
             )

     

       244
       244
       +
             machine.log(

     

       245
       245
       +
                 machine.succeed(

     

       246
       246
       +
                     "cat /etc/tests/muh.eml | rspamc -h 127.0.0.1:11334 symbols | grep NO_MUH"

     

       247
       247
       +
                 )

     

       248
       248
       +
             )

     

       218
       249
        
           '';

     

       219
       250
        
         };

     

       220
       251
        
         postfixIntegration = makeTest {

     
···

       250
       281
        
           };

     

       251
       282
        
           testScript = ''

     

       252
       283
        
             ${initMachine}

     

       253
       253
       -
             $machine->waitForOpenPort(11334);

     

       254
       254
       -
             $machine->waitForOpenPort(25);

     

       284
       284
       +
             machine.wait_for_open_port(11334)

     

       285
       285
       +
             machine.wait_for_open_port(25)

     

       255
       286
        
             ${checkSocket "/run/rspamd/rspamd-milter.sock" "rspamd" "postfix" "660" }

     

       256
       256
       -
             $machine->log($machine->succeed("rspamc -h 127.0.0.1:11334 stat"));

     

       257
       257
       -
             $machine->log($machine->succeed("msmtp --host=localhost -t --read-envelope-from < /etc/tests/example.eml"));

     

       258
       258
       -
             $machine->log($machine->fail("msmtp --host=localhost -t --read-envelope-from < /etc/tests/gtube.eml"));

     

       287
       287
       +
             machine.log(machine.succeed("rspamc -h 127.0.0.1:11334 stat"))

     

       288
       288
       +
             machine.log(

     

       289
       289
       +
                 machine.succeed(

     

       290
       290
       +
                     "msmtp --host=localhost -t --read-envelope-from < /etc/tests/example.eml"

     

       291
       291
       +
                 )

     

       292
       292
       +
             )

     

       293
       293
       +
             machine.log(

     

       294
       294
       +
                 machine.fail(

     

       295
       295
       +
                     "msmtp --host=localhost -t --read-envelope-from < /etc/tests/gtube.eml"

     

       296
       296
       +
                 )

     

       297
       297
       +
             )

     

       259
       298
        
       

     

       260
       260
       -
             $machine->waitUntilFails('[ "$(postqueue -p)" != "Mail queue is empty" ]');

     

       261
       261
       -
             $machine->fail("journalctl -u postfix | grep -i error >&2");

     

       262
       262
       -
             $machine->fail("journalctl -u postfix | grep -i warning >&2");

     

       299
       299
       +
             machine.wait_until_fails('[ "$(postqueue -p)" != "Mail queue is empty" ]')

     

       300
       300
       +
             machine.fail("journalctl -u postfix | grep -i error >&2")

     

       301
       301
       +
             machine.fail("journalctl -u postfix | grep -i warning >&2")

     

       263
       302
        
           '';

     

       264
       303
        
         };

     

       265
       304
        
       }