tests: dom0 update
This commit is contained in:
Marek Marczykowski-Górecki
parent
48fd2669cb
commit
f9b2636c73
@ -17,6 +17,8 @@ endif
|
||||
cp backupcompatibility.py[co] $(DESTDIR)$(PYTHON_TESTSPATH)
|
||||
cp basic.py $(DESTDIR)$(PYTHON_TESTSPATH)
|
||||
cp basic.py[co] $(DESTDIR)$(PYTHON_TESTSPATH)
|
||||
cp dom0_update.py $(DESTDIR)$(PYTHON_TESTSPATH)
|
||||
cp dom0_update.py[co] $(DESTDIR)$(PYTHON_TESTSPATH)
|
||||
cp network.py $(DESTDIR)$(PYTHON_TESTSPATH)
|
||||
cp network.py[co] $(DESTDIR)$(PYTHON_TESTSPATH)
|
||||
cp vm_qrexec_gui.py $(DESTDIR)$(PYTHON_TESTSPATH)
|
||||
|
||||
297
tests/dom0_update.py
Normal file
297
tests/dom0_update.py
Normal file
@ -0,0 +1,297 @@
|
||||
#!/usr/bin/python
|
||||
# -*- coding: utf-8 -*-
|
||||
#
|
||||
# The Qubes OS Project, http://www.qubes-os.org
|
||||
#
|
||||
# Copyright (C) 2015 Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or
|
||||
# modify it under the terms of the GNU General Public License
|
||||
# as published by the Free Software Foundation; either version 2
|
||||
# of the License, or (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301,
|
||||
# USA.
|
||||
#
|
||||
import os
|
||||
import shutil
|
||||
import subprocess
|
||||
import tempfile
|
||||
import unittest
|
||||
from qubes.qubes import QubesVmCollection
|
||||
|
||||
VM_PREFIX = "test-"
|
||||
|
||||
@unittest.skipUnless(os.path.exists('/usr/bin/rpmsign') and
|
||||
os.path.exists('/usr/bin/rpmbuild'),
|
||||
'rpm-sign and/or rpm-buid not installed')
|
||||
class TC_00_Dom0Upgrade(unittest.TestCase):
|
||||
cleanup_paths = []
|
||||
pkg_name = 'qubes-test-pkg'
|
||||
dom0_update_common_opts = ['--disablerepo=*', '--enablerepo=test',
|
||||
'--setopt=test.copy_local=1']
|
||||
|
||||
@classmethod
|
||||
def generate_key(cls, keydir):
|
||||
gpg_opts = ['gpg', '--quiet', '--no-default-keyring',
|
||||
'--homedir', keydir]
|
||||
p = subprocess.Popen(gpg_opts + ['--gen-key', '--batch'],
|
||||
stdin=subprocess.PIPE,
|
||||
stderr=open(os.devnull, 'w'))
|
||||
p.stdin.write('''
|
||||
Key-Type: RSA
|
||||
Key-Length: 1024
|
||||
Key-Usage: sign
|
||||
Name-Real: Qubes test
|
||||
Expire-Date: 0
|
||||
%commit
|
||||
'''.format(keydir=keydir))
|
||||
p.stdin.close()
|
||||
p.wait()
|
||||
|
||||
subprocess.check_call(gpg_opts + ['-a', '--export',
|
||||
'--output', os.path.join(keydir, 'pubkey.asc')])
|
||||
p = subprocess.Popen(gpg_opts + ['--with-colons', '--list-keys'],
|
||||
stdout=subprocess.PIPE)
|
||||
for line in p.stdout.readlines():
|
||||
fields = line.split(':')
|
||||
if fields[0] == 'pub':
|
||||
return fields[4][-8:].lower()
|
||||
raise RuntimeError
|
||||
|
||||
@classmethod
|
||||
def setUpClass(cls):
|
||||
super(TC_00_Dom0Upgrade, cls).setUpClass()
|
||||
|
||||
cls.tmpdir = tempfile.mkdtemp()
|
||||
cls.cleanup_paths += [cls.tmpdir]
|
||||
|
||||
cls.keyid = cls.generate_key(cls.tmpdir)
|
||||
|
||||
p = subprocess.Popen(['sudo', 'dd',
|
||||
'status=none', 'of=/etc/yum.repos.d/test.repo'],
|
||||
stdin=subprocess.PIPE)
|
||||
p.stdin.write('''
|
||||
[test]
|
||||
name = Test
|
||||
baseurl = file:///tmp/repo
|
||||
enabled = 1
|
||||
''')
|
||||
p.stdin.close()
|
||||
p.wait()
|
||||
|
||||
|
||||
@classmethod
|
||||
def tearDownClass(cls):
|
||||
subprocess.check_call(['sudo', 'rm', '-f',
|
||||
'/etc/yum.repos.d/test.repo'])
|
||||
|
||||
for dir in cls.cleanup_paths:
|
||||
shutil.rmtree(dir)
|
||||
cls.cleanup_paths = []
|
||||
|
||||
def setUp(self):
|
||||
self.qc = QubesVmCollection()
|
||||
self.qc.lock_db_for_writing()
|
||||
self.qc.load()
|
||||
self.updatevm = self.qc.add_new_vm("QubesProxyVm",
|
||||
name="%supdatevm" % VM_PREFIX,
|
||||
template=self.qc.get_default_template())
|
||||
self.updatevm.create_on_disk(verbose=False)
|
||||
self.saved_updatevm = self.qc.get_updatevm_vm()
|
||||
self.qc.set_updatevm_vm(self.updatevm)
|
||||
self.qc.save()
|
||||
self.qc.unlock_db()
|
||||
subprocess.call(['sudo', 'rpm', '-e', self.pkg_name],
|
||||
stderr=open(os.devnull, 'w'))
|
||||
subprocess.check_call(['sudo', 'rpm', '--import',
|
||||
os.path.join(self.tmpdir, 'pubkey.asc')])
|
||||
self.updatevm.start()
|
||||
|
||||
|
||||
def remove_vms(self, vms):
|
||||
self.qc.lock_db_for_writing()
|
||||
self.qc.load()
|
||||
|
||||
self.qc.set_updatevm_vm(self.qc[self.saved_updatevm.qid])
|
||||
|
||||
for vm in vms:
|
||||
if isinstance(vm, str):
|
||||
vm = self.qc.get_vm_by_name(vm)
|
||||
else:
|
||||
vm = self.qc[vm.qid]
|
||||
if vm.is_running():
|
||||
try:
|
||||
vm.force_shutdown()
|
||||
except:
|
||||
pass
|
||||
try:
|
||||
vm.remove_from_disk()
|
||||
except OSError:
|
||||
pass
|
||||
self.qc.pop(vm.qid)
|
||||
self.qc.save()
|
||||
self.qc.unlock_db()
|
||||
|
||||
def tearDown(self):
|
||||
vmlist = [vm for vm in self.qc.values() if vm.name.startswith(
|
||||
VM_PREFIX)]
|
||||
self.remove_vms(vmlist)
|
||||
|
||||
subprocess.call(['sudo', 'rpm', '-e', self.pkg_name], stderr=open(
|
||||
os.devnull, 'w'))
|
||||
subprocess.call(['sudo', 'rpm', '-e', 'gpg-pubkey-{}'.format(
|
||||
self.keyid)], stderr=open(os.devnull, 'w'))
|
||||
|
||||
for pkg in os.listdir(self.tmpdir):
|
||||
if pkg.endswith('.rpm'):
|
||||
os.unlink(pkg)
|
||||
|
||||
def create_pkg(self, dir, name, version):
|
||||
spec_path = os.path.join(dir, name+'.spec')
|
||||
spec = open(spec_path, 'w')
|
||||
spec.write(
|
||||
'''
|
||||
Name: {name}
|
||||
Summary: Test Package
|
||||
Version: {version}
|
||||
Release: 1
|
||||
Vendor: Invisible Things Lab
|
||||
License: GPL
|
||||
Group: Qubes
|
||||
URL: http://www.qubes-os.org
|
||||
|
||||
%description
|
||||
Test package
|
||||
|
||||
%install
|
||||
|
||||
%files
|
||||
'''.format(name=name, version=version)
|
||||
)
|
||||
spec.close()
|
||||
subprocess.check_call(
|
||||
['rpmbuild', '--quiet', '-bb', '--define', '_rpmdir {}'.format(dir),
|
||||
spec_path])
|
||||
pkg_path = os.path.join(dir, 'x86_64',
|
||||
'{}-{}-1.x86_64.rpm'.format(name, version))
|
||||
subprocess.check_call(['sudo', 'chmod', 'go-rw', '/dev/tty'])
|
||||
subprocess.check_call(
|
||||
['rpm', '--quiet', '--define=_gpg_path {}'.format(dir),
|
||||
'--define=_gpg_name {}'.format("Qubes test"),
|
||||
'--addsign', pkg_path],
|
||||
stdin=open(os.devnull),
|
||||
stdout=open(os.devnull, 'w'),
|
||||
stderr=subprocess.STDOUT)
|
||||
subprocess.check_call(['sudo', 'chmod', 'go+rw', '/dev/tty'])
|
||||
return pkg_path
|
||||
|
||||
def send_pkg(self, filename):
|
||||
p = self.updatevm.run('mkdir -p /tmp/repo; cat > /tmp/repo/{}'.format(
|
||||
os.path.basename(
|
||||
filename)), passio_popen=True)
|
||||
p.stdin.write(open(filename).read())
|
||||
p.stdin.close()
|
||||
p.wait()
|
||||
self.updatevm.run('cd /tmp/repo; createrepo .', wait=True)
|
||||
|
||||
def test_000_update(self):
|
||||
filename = self.create_pkg(self.tmpdir, self.pkg_name, '1.0')
|
||||
subprocess.check_call(['sudo', 'rpm', '-i', filename])
|
||||
filename = self.create_pkg(self.tmpdir, self.pkg_name, '2.0')
|
||||
self.send_pkg(filename)
|
||||
|
||||
logpath = os.path.join(self.tmpdir, 'dom0-update-output.txt')
|
||||
try:
|
||||
subprocess.check_call(['sudo', 'qubes-dom0-update', '-y'] +
|
||||
self.dom0_update_common_opts,
|
||||
stdout=open(logpath, 'w'),
|
||||
stderr=subprocess.STDOUT)
|
||||
except subprocess.CalledProcessError:
|
||||
self.fail("qubes-dom0-update failed: " + open(
|
||||
logpath).read())
|
||||
|
||||
retcode = subprocess.call(['rpm', '-q', '{}-1.0'.format(
|
||||
self.pkg_name)], stdout=open(os.devnull, 'w'))
|
||||
self.assertEqual(retcode, 1, 'Package {}-1.0 still installed after '
|
||||
'update'.format(self.pkg_name))
|
||||
retcode = subprocess.call(['rpm', '-q', '{}-2.0'.format(
|
||||
self.pkg_name)], stdout=open(os.devnull, 'w'))
|
||||
self.assertEqual(retcode, 0, 'Package {}-2.0 not installed after '
|
||||
'update'.format(self.pkg_name))
|
||||
|
||||
def test_010_instal(self):
|
||||
filename = self.create_pkg(self.tmpdir, self.pkg_name, '1.0')
|
||||
self.send_pkg(filename)
|
||||
|
||||
logpath = os.path.join(self.tmpdir, 'dom0-update-output.txt')
|
||||
try:
|
||||
subprocess.check_call(['sudo', 'qubes-dom0-update', '-y'] +
|
||||
self.dom0_update_common_opts + [
|
||||
self.pkg_name],
|
||||
stdout=open(logpath, 'w'),
|
||||
stderr=subprocess.STDOUT)
|
||||
except subprocess.CalledProcessError:
|
||||
self.fail("qubes-dom0-update failed: " + open(
|
||||
logpath).read())
|
||||
|
||||
retcode = subprocess.call(['rpm', '-q', '{}-1.0'.format(
|
||||
self.pkg_name)], stdout=open('/dev/null', 'w'))
|
||||
self.assertEqual(retcode, 0, 'Package {}-1.0 not installed'.format(
|
||||
self.pkg_name))
|
||||
|
||||
def test_020_install_wrong_sign(self):
|
||||
subprocess.call(['sudo', 'rpm', '-e', 'gpg-pubkey-{}'.format(
|
||||
self.keyid)])
|
||||
filename = self.create_pkg(self.tmpdir, self.pkg_name, '1.0')
|
||||
self.send_pkg(filename)
|
||||
|
||||
logpath = os.path.join(self.tmpdir, 'dom0-update-output.txt')
|
||||
try:
|
||||
subprocess.check_call(['sudo', 'qubes-dom0-update', '-y'] +
|
||||
self.dom0_update_common_opts + [
|
||||
self.pkg_name],
|
||||
stdout=open(logpath, 'w'),
|
||||
stderr=subprocess.STDOUT)
|
||||
self.fail("qubes-dom0-update unexpectedly succeeded: " + open(
|
||||
logpath).read())
|
||||
except subprocess.CalledProcessError:
|
||||
pass
|
||||
|
||||
retcode = subprocess.call(['rpm', '-q', '{}-1.0'.format(
|
||||
self.pkg_name)], stdout=open('/dev/null', 'w'))
|
||||
self.assertEqual(retcode, 1,
|
||||
'Package {}-1.0 installed although '
|
||||
'signature is invalid'.format(self.pkg_name))
|
||||
|
||||
def test_030_install_unsigned(self):
|
||||
filename = self.create_pkg(self.tmpdir, self.pkg_name, '1.0')
|
||||
subprocess.check_call(['rpm', '--delsign', filename],
|
||||
stdout=open(os.devnull, 'w'),
|
||||
stderr=subprocess.STDOUT)
|
||||
self.send_pkg(filename)
|
||||
|
||||
logpath = os.path.join(self.tmpdir, 'dom0-update-output.txt')
|
||||
try:
|
||||
subprocess.check_call(['sudo', 'qubes-dom0-update', '-y'] +
|
||||
self.dom0_update_common_opts +
|
||||
[self.pkg_name],
|
||||
stdout=open(logpath, 'w'),
|
||||
stderr=subprocess.STDOUT
|
||||
)
|
||||
self.fail("qubes-dom0-update unexpectedly succeeded: " + open(
|
||||
logpath).read())
|
||||
except subprocess.CalledProcessError:
|
||||
pass
|
||||
|
||||
retcode = subprocess.call(['rpm', '-q', '{}-1.0'.format(
|
||||
self.pkg_name)], stdout=open('/dev/null', 'w'))
|
||||
self.assertEqual(retcode, 1,
|
||||
'UNSIGNED package {}-1.0 installed'.format(self.pkg_name))
|
||||
Loading…
Reference in New Issue
Block a user