127 lines
No EOL
6 KiB
Bash
127 lines
No EOL
6 KiB
Bash
#!/usr/bin/env bash
|
|
# test/destructive.sh — tests that modify system state
|
|
# Sourced by test.command.sh — do not execute directly.
|
|
# Requires run_cmd / run_cmd_fails from integration.sh to be sourced first.
|
|
|
|
function cmd::test::section_destructive() {
|
|
test::section "Destructive (modifying state)"
|
|
|
|
# Cleanup from any previous failed run
|
|
"$WGCTL_BINARY" remove --name phone-testunit --force > /dev/null 2>&1 || true
|
|
"$WGCTL_BINARY" remove --name laptop-testunit2 --force > /dev/null 2>&1 || true
|
|
"$WGCTL_BINARY" remove --name laptop-testunit2b --force > /dev/null 2>&1 || true
|
|
"$WGCTL_BINARY" group remove --name testgroup --force > /dev/null 2>&1 || true
|
|
"$WGCTL_BINARY" group remove --name testgroup2 --force > /dev/null 2>&1 || true
|
|
"$WGCTL_BINARY" net rm --name test-block-svc --force > /dev/null 2>&1 || true
|
|
"$WGCTL_BINARY" unblock --name phone-testunit > /dev/null 2>&1 || true
|
|
|
|
cmd::test::_destructive_peer
|
|
cmd::test::_destructive_block_unblock
|
|
cmd::test::_destructive_service_block
|
|
cmd::test::_destructive_rule
|
|
cmd::test::_destructive_groups
|
|
cmd::test::_destructive_identity
|
|
cmd::test::_destructive_cleanup
|
|
}
|
|
|
|
function cmd::test::_destructive_peer() {
|
|
cmd::test::run_cmd "add phone peer" "added" \
|
|
add --name testunit --type phone
|
|
}
|
|
|
|
function cmd::test::_destructive_block_unblock() {
|
|
cmd::test::run_cmd "block peer" "blocked" block --name phone-testunit
|
|
cmd::test::run_cmd "list shows blocked" "phone-testunit" list --blocked
|
|
cmd::test::run_cmd "unblock peer" "unblocked" unblock --name phone-testunit
|
|
|
|
cmd::test::run_cmd "block peer --ip" "blocked for" \
|
|
block --name phone-testunit --ip 10.0.0.99
|
|
cmd::test::run_cmd "list shows restricted" "restricted" \
|
|
list --name phone-testunit
|
|
cmd::test::run_cmd "unblock peer --ip" "unblocked" \
|
|
unblock --name phone-testunit --ip 10.0.0.99
|
|
}
|
|
|
|
function cmd::test::_destructive_service_block() {
|
|
"$WGCTL_BINARY" net add --name test-block-svc \
|
|
--ip 10.0.0.99 > /dev/null 2>&1
|
|
"$WGCTL_BINARY" net add --name test-block-svc:web \
|
|
--port 9999:tcp > /dev/null 2>&1
|
|
|
|
cmd::test::run_cmd "block peer --service (ip)" "blocked" block --name phone-testunit --service test-block-svc
|
|
cmd::test::run_cmd "block already blocked service" "already" block --name phone-testunit --service test-block-svc
|
|
cmd::test::run_cmd "unblock peer --service (ip)" "unblocked" unblock --name phone-testunit --service test-block-svc
|
|
cmd::test::run_cmd "unblock not blocked service" "not blocked" unblock --name phone-testunit --service test-block-svc
|
|
cmd::test::run_cmd "block peer --service (port)" "blocked" block --name phone-testunit --service test-block-svc:web
|
|
cmd::test::run_cmd "unblock peer --service (port)" "unblocked" unblock --name phone-testunit --service test-block-svc:web
|
|
|
|
"$WGCTL_BINARY" net rm --name test-block-svc --force > /dev/null 2>&1 || true
|
|
}
|
|
|
|
function cmd::test::_destructive_rule() {
|
|
cmd::test::run_cmd "rule assign" "Assigned" rule assign --name user --peer phone-testunit
|
|
cmd::test::run_cmd "rule unassign" "Unassigned" rule unassign --peer phone-testunit
|
|
"$WGCTL_BINARY" rule assign --name user --peer phone-testunit > /dev/null 2>&1 || true
|
|
}
|
|
|
|
function cmd::test::_destructive_groups() {
|
|
cmd::test::run_cmd "group add" "created" group add --name testgroup --desc "Test group"
|
|
cmd::test::run_cmd "group peer add" "Added" group peer add --name testgroup --peer phone-testunit
|
|
cmd::test::run_cmd "group block" "blocked" group block --name testgroup
|
|
cmd::test::run_cmd "group unblock" "unblocked" group unblock --name testgroup
|
|
|
|
"$WGCTL_BINARY" group add --name testgroup2 --desc "Test group 2" > /dev/null 2>&1
|
|
"$WGCTL_BINARY" group peer add --name testgroup2 --peer phone-testunit > /dev/null 2>&1
|
|
|
|
cmd::test::run_cmd "group block first" "blocked" group block --name testgroup
|
|
cmd::test::run_cmd "group block second" "blocked" group block --name testgroup2
|
|
|
|
"$WGCTL_BINARY" group unblock --name testgroup > /dev/null 2>&1
|
|
cmd::test::run_cmd "peer stays blocked after partial unblock" "phone-testunit" list --blocked
|
|
|
|
"$WGCTL_BINARY" group unblock --name testgroup2 > /dev/null 2>&1
|
|
cmd::test::run_cmd "peer unblocked after all groups unblock" "phone-testunit" list --allowed
|
|
|
|
"$WGCTL_BINARY" group block --name testgroup > /dev/null 2>&1
|
|
cmd::test::run_cmd "direct unblock overrides group block" "unblocked" unblock --name phone-testunit
|
|
|
|
cmd::test::run_cmd "group remove" "removed" group remove --name testgroup --force
|
|
"$WGCTL_BINARY" group remove --name testgroup2 --force > /dev/null 2>&1 || true
|
|
}
|
|
|
|
function cmd::test::_destructive_identity() {
|
|
test::section "Destructive: identity auto-attach/detach"
|
|
|
|
# Cleanup from any previous failed run
|
|
"$WGCTL_BINARY" remove --name laptop-testunit2 --force > /dev/null 2>&1 || true
|
|
"$WGCTL_BINARY" remove --name laptop-testunit2b --force > /dev/null 2>&1 || true
|
|
|
|
# Add — verify auto-attach to identity "testunit2"
|
|
cmd::test::run_cmd "add attaches to identity" "added" \
|
|
add --name testunit2 --type laptop
|
|
|
|
cmd::test::run_cmd "identity created for testunit2" "laptop-testunit2" \
|
|
identity show --name testunit2
|
|
|
|
# Rename — verify identity::rename_peer moves peer to new identity "testunit2b"
|
|
cmd::test::run_cmd "rename peer" "renamed" \
|
|
rename --name laptop-testunit2 --new-name laptop-testunit2b
|
|
|
|
cmd::test::run_cmd "identity reflects rename (new identity)" "laptop-testunit2b" \
|
|
identity show --name testunit2b
|
|
|
|
cmd::test::run_cmd_fails "old identity gone after rename" \
|
|
identity show --name testunit2
|
|
|
|
# Remove — verify auto-detach cleans up identity file
|
|
cmd::test::run_cmd "remove detaches from identity" "removed" \
|
|
remove --name laptop-testunit2b --force
|
|
|
|
cmd::test::run_cmd_fails "identity cleaned up after remove" \
|
|
identity show --name testunit2b
|
|
}
|
|
|
|
function cmd::test::_destructive_cleanup() {
|
|
cmd::test::run_cmd "remove phone peer" "removed" \
|
|
remove --name phone-testunit --force
|
|
} |