100 lines
3.5 KiB
Python
100 lines
3.5 KiB
Python
|
import os, re
|
||
|
|
import testinfra.utils.ansible_runner
|
||
|
|
|
||
|
|
def test_packages(host):
|
||
|
|
for package_name in ['bind9', 'cron']:
|
||
|
|
package = host.package(package_name)
|
||
|
|
assert package.is_installed
|
||
|
|
|
||
|
|
def test_cron_file(host):
|
||
|
|
config = host.file('/etc/cron.weekly/dnssec')
|
||
|
|
assert config.exists
|
||
|
|
assert config.is_file
|
||
|
|
assert config.user == 'root'
|
||
|
|
assert config.group == 'root'
|
||
|
|
assert config.mode == 0o700
|
||
|
|
assert config.contains('test.local')
|
||
|
|
|
||
|
|
def test_local_file(host):
|
||
|
|
config = host.file('/etc/bind/named.conf.local')
|
||
|
|
assert config.exists
|
||
|
|
assert config.is_file
|
||
|
|
assert config.user == 'root'
|
||
|
|
assert config.group == 'root'
|
||
|
|
assert config.mode == 0o644
|
||
|
|
assert config.contains('4.2.2.4')
|
||
|
|
assert config.contains('inline-signing yes;')
|
||
|
|
|
||
|
|
def test_options_file(host):
|
||
|
|
config = host.file('/etc/bind/named.conf.options')
|
||
|
|
assert config.exists
|
||
|
|
assert config.is_file
|
||
|
|
assert config.user == 'root'
|
||
|
|
assert config.group == 'root'
|
||
|
|
assert config.mode == 0o644
|
||
|
|
assert config.contains('listen-on { any; };')
|
||
|
|
assert config.contains('listen-on-v6 { none; };')
|
||
|
|
assert config.contains('server-id "1";')
|
||
|
|
|
||
|
|
def test_db_file(host):
|
||
|
|
for zone in ['test.local', 'hello.local', 'disabled.local']:
|
||
|
|
directory = host.file('/etc/bind/zones/%s' % (zone))
|
||
|
|
assert directory.exists
|
||
|
|
assert directory.is_directory
|
||
|
|
assert directory.user == 'bind'
|
||
|
|
assert directory.group == 'bind'
|
||
|
|
assert directory.mode == 0o755
|
||
|
|
|
||
|
|
config = host.file('/etc/bind/zones/%s/db' % (zone))
|
||
|
|
assert config.exists
|
||
|
|
assert config.is_file
|
||
|
|
assert config.user == 'root'
|
||
|
|
assert config.group == 'root'
|
||
|
|
assert config.mode == 0o644
|
||
|
|
|
||
|
|
def test_db_signed_file(host):
|
||
|
|
config = host.file('/etc/bind/zones/test.local/db.signed')
|
||
|
|
assert config.exists
|
||
|
|
assert config.is_file
|
||
|
|
assert config.user == 'root'
|
||
|
|
assert config.group == 'root'
|
||
|
|
assert config.mode == 0o644
|
||
|
|
|
||
|
|
def test_service(host):
|
||
|
|
service = host.service('bind9')
|
||
|
|
assert service.is_running
|
||
|
|
assert service.is_enabled
|
||
|
|
|
||
|
|
def test_socket(host):
|
||
|
|
socket = host.socket('tcp://127.0.0.1:53')
|
||
|
|
assert socket.is_listening
|
||
|
|
|
||
|
|
socket = host.socket('udp://127.0.0.1:53')
|
||
|
|
assert socket.is_listening
|
||
|
|
|
||
|
|
def test_dns_a(host):
|
||
|
|
result = host.check_output('dig +nocmd +noall +answer hello.hello.local @127.0.0.1')
|
||
|
|
assert re.search(r'hello\.hello\.local\.\s+3600\s+IN\s+A\s+4\.3\.2\.1', result)
|
||
|
|
|
||
|
|
def test_dns_a_signed(host):
|
||
|
|
result = host.check_output('dig +nocmd +noall +answer +dnssec hello.test.local @127.0.0.1')
|
||
|
|
assert re.search(r'hello\.test\.local\.\s+300\s+IN\s+A\s+1\.2\.3\.4', result)
|
||
|
|
assert re.search(r'hello\.test\.local\.\s+300\s+IN\s+RRSIG\s+A ', result)
|
||
|
|
|
||
|
|
def test_dns_mx(host):
|
||
|
|
result = host.check_output('dig +nocmd +noall +answer -t mx test.local @127.0.0.1')
|
||
|
|
assert re.search(r'test\.local\.\s+3600\s+IN\s+MX\s+20 mail\.test\.local\.', result)
|
||
|
|
|
||
|
|
def test_dns_srv(host):
|
||
|
|
result = host.check_output('dig +nocmd +noall +answer -t srv hello.test.local @127.0.0.1')
|
||
|
|
assert re.search(r'hello\.test\.local\.\s+3600\s+IN\s+SRV\s+0\s+5\s+80\s+www\.test\.local\.$', result)
|
||
|
|
|
||
|
|
def test_dns_caa(host):
|
||
|
|
result = host.check_output('dig +nocmd +noall +answer -t caa hello.test.local @127.0.0.1')
|
||
|
|
assert re.search(r'hello\.test\.local\.\s+3600\s+IN\s+CAA\s+0 issue "letsencrypt\.org', result)
|
||
|
|
assert re.search(r'hello\.test\.local\.\s+3600\s+IN\s+CAA\s+0 iodef "mailto:root@test\.local"', result)
|
||
|
|
|
||
|
|
def test_dns_dnssec(host):
|
||
|
|
result = host.check_output('dig +nocmd +noall +answer -t txt hello.local @127.0.0.1')
|
||
|
|
assert re.search(r'"0L4M99yv8ZLptmS2GP6goHXZgTdFIyYCdfziQgoENcloUI3KshDscsoh6H6I2LA"', result)
|