core-admin/qubes/tests/vm/mix/net.py
Marek Marczykowski-Górecki 7a6e4b284f
vm/mix/net: prevent setting provides_network=false if qube is still used
Add symmetric check to the one in 'netvm' property.

Fixes QubesOS/qubes-issues#4552
2018-12-06 20:37:50 +01:00

157 lines
6.0 KiB
Python

# pylint: disable=protected-access
#
# The Qubes OS Project, https://www.qubes-os.org/
#
# Copyright (C) 2014-2016 Joanna Rutkowska <joanna@invisiblethingslab.com>
# Copyright (C) 2014-2016 Wojtek Porczyk <woju@invisiblethingslab.com>
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.
#
# This library is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public
# License along with this library; if not, see <https://www.gnu.org/licenses/>.
#
import ipaddress
import unittest
import qubes
import qubes.vm.qubesvm
import qubes.tests
import qubes.tests.vm.qubesvm
class TC_00_NetVMMixin(
qubes.tests.vm.qubesvm.QubesVMTestsMixin, qubes.tests.QubesTestCase):
def setUp(self):
super(TC_00_NetVMMixin, self).setUp()
self.app = qubes.tests.vm.TestApp()
self.app.vmm.offline_mode = True
def setup_netvms(self, vm):
# usage of QubesVM here means that those tests should be after
# testing properties used here
self.netvm1 = qubes.vm.qubesvm.QubesVM(self.app, None, qid=2,
name=qubes.tests.VMPREFIX + 'netvm1',
provides_network=True, netvm=None)
self.netvm2 = qubes.vm.qubesvm.QubesVM(self.app, None, qid=3,
name=qubes.tests.VMPREFIX + 'netvm2',
provides_network=True, netvm=None)
self.nonetvm = qubes.vm.qubesvm.QubesVM(self.app, None, qid=4,
name=qubes.tests.VMPREFIX + 'nonet')
self.app.domains = qubes.app.VMCollection(self.app)
for domain in (vm, self.netvm1, self.netvm2, self.nonetvm):
self.app.domains._dict[domain.qid] = domain
self.app.default_netvm = self.netvm1
self.app.default_fw_netvm = self.netvm1
self.addCleanup(self.cleanup_netvms)
def cleanup_netvms(self):
self.netvm1.close()
self.netvm2.close()
self.nonetvm.close()
try:
self.app.domains.close()
except AttributeError:
pass
del self.netvm1
del self.netvm2
del self.nonetvm
del self.app.default_netvm
del self.app.default_fw_netvm
@qubes.tests.skipUnlessDom0
def test_140_netvm(self):
vm = self.get_vm()
self.setup_netvms(vm)
self.assertPropertyDefaultValue(vm, 'netvm', self.app.default_netvm)
self.assertPropertyValue(vm, 'netvm', self.netvm2, self.netvm2,
self.netvm2.name)
del vm.netvm
self.assertPropertyDefaultValue(vm, 'netvm', self.app.default_netvm)
self.assertPropertyValue(vm, 'netvm', self.netvm2.name, self.netvm2,
self.netvm2.name)
self.assertPropertyValue(vm, 'netvm', None, None, '')
def test_141_netvm_invalid(self):
vm = self.get_vm()
self.setup_netvms(vm)
self.assertPropertyInvalidValue(vm, 'netvm', 'invalid')
self.assertPropertyInvalidValue(vm, 'netvm', 123)
def test_142_netvm_netvm(self):
vm = self.get_vm()
self.setup_netvms(vm)
self.assertPropertyInvalidValue(vm, 'netvm', self.nonetvm)
def test_143_netvm_loopback(self):
vm = self.get_vm()
self.app.domains = {1: vm, vm: vm}
self.addCleanup(self.app.domains.clear)
self.assertPropertyInvalidValue(vm, 'netvm', vm)
def test_144_netvm_loopback2(self):
vm = self.get_vm()
self.setup_netvms(vm)
vm.netvm = None
self.netvm2.netvm = self.netvm1
vm.provides_network = True
self.netvm1.netvm = vm
self.assertPropertyInvalidValue(vm, 'netvm', self.netvm2)
def test_150_ip(self):
vm = self.get_vm()
self.setup_netvms(vm)
self.assertPropertyDefaultValue(vm, 'ip',
ipaddress.IPv4Address('10.137.0.' + str(vm.qid)))
vm.ip = '192.168.1.1'
self.assertEqual(vm.ip, ipaddress.IPv4Address('192.168.1.1'))
def test_151_ip_invalid(self):
vm = self.get_vm()
self.setup_netvms(vm)
self.assertPropertyInvalidValue(vm, 'ip', 'abcd')
self.assertPropertyInvalidValue(vm, 'ip', 'a.b.c.d')
self.assertPropertyInvalidValue(vm, 'ip', '1111.2222.3333.4444')
# TODO: implement and add here: 0.0.0.0, 333.333.333.333
def test_160_ip6(self):
vm = self.get_vm()
self.setup_netvms(vm)
self.assertPropertyDefaultValue(vm, 'ip6', None)
vm.netvm.features['ipv6'] = True
self.assertPropertyDefaultValue(vm, 'ip6',
ipaddress.IPv6Address('{}::a89:{:x}'.format(
qubes.config.qubes_ipv6_prefix, vm.qid)))
vm.ip6 = 'abcd:efff::1'
self.assertEqual(vm.ip6, ipaddress.IPv6Address('abcd:efff::1'))
def test_161_ip6_invalid(self):
vm = self.get_vm()
self.setup_netvms(vm)
vm.netvm.features['ipv6'] = True
self.assertPropertyInvalidValue(vm, 'ip', 'zzzz')
self.assertPropertyInvalidValue(vm, 'ip',
'1:2:3:4:5:6:7:8:0:a:b:c:d:e:f:0')
def test_170_provides_network_netvm(self):
vm = self.get_vm()
vm2 = self.get_vm('test2', qid=3)
self.assertPropertyDefaultValue(vm, 'provides_network', False)
self.assertPropertyInvalidValue(vm2, 'netvm', vm)
self.assertPropertyValue(vm, 'provides_network', True, True, 'True')
self.assertPropertyValue(vm2, 'netvm', vm, vm, 'test-inst-test')
# used by other vm
self.assertPropertyInvalidValue(vm, 'provides_network', False)
self.assertPropertyValue(vm2, 'netvm', None, None, '')
self.assertPropertyValue(vm2, 'netvm', '', None, '')
self.assertPropertyValue(vm, 'provides_network', False, False, 'False')