t_tcpip.sh revision 272343
1272343Sngie# $NetBSD: t_tcpip.sh,v 1.13 2014/01/03 13:18:00 pooka Exp $ 2272343Sngie# 3272343Sngie# Copyright (c) 2011 The NetBSD Foundation, Inc. 4272343Sngie# All rights reserved. 5272343Sngie# 6272343Sngie# Redistribution and use in source and binary forms, with or without 7272343Sngie# modification, are permitted provided that the following conditions 8272343Sngie# are met: 9272343Sngie# 1. Redistributions of source code must retain the above copyright 10272343Sngie# notice, this list of conditions and the following disclaimer. 11272343Sngie# 2. Redistributions in binary form must reproduce the above copyright 12272343Sngie# notice, this list of conditions and the following disclaimer in the 13272343Sngie# documentation and/or other materials provided with the distribution. 14272343Sngie# 15272343Sngie# THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 16272343Sngie# ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 17272343Sngie# TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 18272343Sngie# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 19272343Sngie# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 20272343Sngie# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 21272343Sngie# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 22272343Sngie# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 23272343Sngie# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 24272343Sngie# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 25272343Sngie# POSSIBILITY OF SUCH DAMAGE. 26272343Sngie# 27272343Sngie 28272343Sngierumpnetsrv='rump_server -lrumpnet -lrumpnet_net -lrumpnet_netinet' 29272343Sngieexport RUMP_SERVER=unix://csock 30272343Sngie 31272343Sngieatf_test_case http cleanup 32272343Sngiehttp_head() 33272343Sngie{ 34272343Sngie atf_set "descr" "Start hijacked httpd and get webpage from it" 35272343Sngie} 36272343Sngie 37272343Sngiehttp_body() 38272343Sngie{ 39272343Sngie 40272343Sngie atf_check -s exit:0 ${rumpnetsrv} -lrumpnet_netinet6 ${RUMP_SERVER} 41272343Sngie 42272343Sngie # start bozo in daemon mode 43272343Sngie atf_check -s exit:0 env LD_PRELOAD=/usr/lib/librumphijack.so \ 44272343Sngie /usr/libexec/httpd -P ./httpd.pid -b -s $(atf_get_srcdir) 45272343Sngie 46272343Sngie atf_check -s exit:0 -o file:"$(atf_get_srcdir)/netstat.expout" \ 47272343Sngie rump.netstat -a 48272343Sngie 49272343Sngie # get the webpage 50272343Sngie atf_check -s exit:0 env LD_PRELOAD=/usr/lib/librumphijack.so \ 51272343Sngie $(atf_get_srcdir)/h_netget 127.0.0.1 80 webfile 52272343Sngie 53272343Sngie # check that we got what we wanted 54272343Sngie atf_check -o match:'HTTP/1.0 200 OK' cat webfile 55272343Sngie atf_check -o match:'Content-Length: 95' cat webfile 56272343Sngie atf_check -o file:"$(atf_get_srcdir)/index.html" \ 57272343Sngie sed -n '1,/^$/!p' webfile 58272343Sngie} 59272343Sngie 60272343Sngiehttp_cleanup() 61272343Sngie{ 62272343Sngie if [ -f httpd.pid ]; then 63272343Sngie kill -9 "$(cat httpd.pid)" 64272343Sngie rm -f httpd.pid 65272343Sngie fi 66272343Sngie 67272343Sngie rump.halt 68272343Sngie} 69272343Sngie 70272343Sngie# 71272343Sngie# Starts a SSH server and sets up the client to access it. 72272343Sngie# Authentication is allowed and done using an RSA key exclusively, which 73272343Sngie# is generated on the fly as part of the test case. 74272343Sngie# XXX: Ideally, all the tests in this test program should be able to share 75272343Sngie# the generated key, because creating it can be a very slow process on some 76272343Sngie# machines. 77272343Sngie# 78272343Sngie# XXX2: copypasted from jmmv's sshd thingamob in the psshfs test. 79272343Sngie# ideally code (and keys, like jmmv notes above) could be shared 80272343Sngie# 81272343Sngiestart_sshd() { 82272343Sngie echo "Setting up SSH server configuration" 83272343Sngie sed -e "s,@SRCDIR@,$(atf_get_srcdir),g" -e "s,@WORKDIR@,$(pwd),g" \ 84272343Sngie $(atf_get_srcdir)/sshd_config.in >sshd_config || \ 85272343Sngie atf_fail "Failed to create sshd_config" 86272343Sngie atf_check -s ignore -o empty -e ignore \ 87272343Sngie cp $(atf_get_srcdir)/ssh_host_key . 88272343Sngie atf_check -s ignore -o empty -e ignore \ 89272343Sngie cp $(atf_get_srcdir)/ssh_host_key.pub . 90272343Sngie atf_check -s eq:0 -o empty -e empty chmod 400 ssh_host_key 91272343Sngie atf_check -s eq:0 -o empty -e empty chmod 444 ssh_host_key.pub 92272343Sngie 93272343Sngie env LD_PRELOAD=/usr/lib/librumphijack.so \ 94272343Sngie /usr/sbin/sshd -e -f ./sshd_config 95272343Sngie while [ ! -f sshd.pid ]; do 96272343Sngie sleep 0.01 97272343Sngie done 98272343Sngie echo "SSH server started (pid $(cat sshd.pid))" 99272343Sngie 100272343Sngie echo "Setting up SSH client configuration" 101272343Sngie atf_check -s eq:0 -o empty -e empty \ 102272343Sngie ssh-keygen -f ssh_user_key -t rsa -b 1024 -N "" -q 103 atf_check -s eq:0 -o empty -e empty \ 104 cp ssh_user_key.pub authorized_keys 105 echo "127.0.0.1,localhost,::1 " \ 106 "$(cat $(atf_get_srcdir)/ssh_host_key.pub)" >known_hosts || \ 107 atf_fail "Failed to create known_hosts" 108 atf_check -s eq:0 -o empty -e empty chmod 600 authorized_keys 109 sed -e "s,@SRCDIR@,$(atf_get_srcdir),g" -e "s,@WORKDIR@,$(pwd),g" \ 110 $(atf_get_srcdir)/ssh_config.in >ssh_config || \ 111 atf_fail "Failed to create ssh_config" 112 113 echo "sshd running" 114} 115 116atf_test_case ssh cleanup 117ssh_head() 118{ 119 atf_set "descr" "Test that hijacked ssh/sshd works" 120} 121 122ssh_body() 123{ 124 125 atf_check -s exit:0 ${rumpnetsrv} ${RUMP_SERVER} 126 # make sure clients die after we nuke the server 127 export RUMPHIJACK_RETRYCONNECT='die' 128 129 start_sshd 130 131 # create some sort of directory for us to "ls" 132 mkdir testdir 133 cd testdir 134 jot 11 | xargs touch 135 jot 11 12 | xargs mkdir 136 cd .. 137 138 atf_check -s exit:0 -o save:ssh.out \ 139 env LD_PRELOAD=/usr/lib/librumphijack.so \ 140 ssh -T -F ssh_config 127.0.0.1 env BLOCKSIZE=512 \ 141 ls -li $(pwd)/testdir 142 atf_check -s exit:0 -o file:ssh.out env BLOCKSIZE=512 \ 143 ls -li $(pwd)/testdir 144} 145 146ssh_cleanup() 147{ 148 rump.halt 149 # sshd dies due to RUMPHIJACK_RETRYCONNECT=1d6 150} 151 152test_nfs() 153{ 154 155 magicstr='wind in my hair' 156 # create ffs file system we'll be serving from 157 atf_check -s exit:0 -o ignore newfs -F -s 10000 ffs.img 158 159 # start nfs kernel server. this is a mouthful 160 export RUMP_SERVER=unix://serversock 161 atf_check -s exit:0 rump_server $* ${RUMP_SERVER} 162 163 atf_check -s exit:0 rump.ifconfig shmif0 create 164 atf_check -s exit:0 rump.ifconfig shmif0 linkstr shmbus 165 atf_check -s exit:0 rump.ifconfig shmif0 inet 10.1.1.1 166 167 export RUMPHIJACK_RETRYCONNECT=die 168 export LD_PRELOAD=/usr/lib/librumphijack.so 169 170 atf_check -s exit:0 mkdir -p /rump/var/run 171 atf_check -s exit:0 mkdir -p /rump/var/db 172 atf_check -s exit:0 touch /rump/var/db/mountdtab 173 atf_check -s exit:0 mkdir /rump/etc 174 atf_check -s exit:0 mkdir /rump/export 175 176 atf_check -s exit:0 -x \ 177 'echo "/export -noresvport -noresvmnt 10.1.1.100" | \ 178 dd of=/rump/etc/exports 2> /dev/null' 179 180 atf_check -s exit:0 -e ignore mount_ffs /dk /rump/export 181 atf_check -s exit:0 -x "echo ${magicstr} > /rump/export/im_alive" 182 183 # start rpcbind. we want /var/run/rpcbind.sock 184 export RUMPHIJACK='blanket=/var/run,socket=all' 185 atf_check -s exit:0 rpcbind 186 187 # ok, then we want mountd in the similar fashion 188 export RUMPHIJACK='blanket=/var/run:/var/db:/export,socket=all,path=/rump,vfs=all' 189 atf_check -s exit:0 mountd /rump/etc/exports 190 191 # finally, le nfschuck 192 export RUMPHIJACK='blanket=/var/run,socket=all,vfs=all' 193 atf_check -s exit:0 nfsd 194 195 # 196 # now, time for the client server and associated madness. 197 # 198 199 export RUMP_SERVER=unix://clientsock 200 unset RUMPHIJACK 201 unset LD_PRELOAD 202 203 # at least the kernel server is easier 204 atf_check -s exit:0 rump_server -lrumpvfs -lrumpnet \ 205 -lrumpnet_net -lrumpnet_netinet -lrumpnet_shmif -lrumpfs_nfs\ 206 ${RUMP_SERVER} 207 208 atf_check -s exit:0 rump.ifconfig shmif0 create 209 atf_check -s exit:0 rump.ifconfig shmif0 linkstr shmbus 210 atf_check -s exit:0 rump.ifconfig shmif0 inet 10.1.1.100 211 212 export LD_PRELOAD=/usr/lib/librumphijack.so 213 214 atf_check -s exit:0 mkdir /rump/mnt 215 atf_check -s exit:0 mount_nfs 10.1.1.1:/export /rump/mnt 216 217 atf_check -s exit:0 -o inline:"${magicstr}\n" cat /rump/mnt/im_alive 218 atf_check -s exit:0 -o match:'.*im_alive$' ls -l /rump/mnt/im_alive 219} 220 221 222atf_test_case nfs cleanup 223nfs_head() 224{ 225 atf_set "descr" "Test hijacked nfsd and mount_nfs" 226} 227 228nfs_body() 229{ 230 test_nfs -lrumpvfs -lrumpdev -lrumpnet -lrumpnet_net \ 231 -lrumpnet_netinet -lrumpnet_local -lrumpnet_shmif \ 232 -lrumpdev_disk -lrumpfs_ffs -lrumpfs_nfs -lrumpfs_nfsserver \ 233 -d key=/dk,hostpath=ffs.img,size=host 234} 235 236nfs_cleanup() 237{ 238 RUMP_SERVER=unix://serversock rump.halt 2> /dev/null 239 RUMP_SERVER=unix://clientsock rump.halt 2> /dev/null 240 : 241} 242 243atf_test_case nfs_autoload cleanup 244nfs_autoload_head() 245{ 246 atf_set "descr" "Test hijacked nfsd with autoload from /stand" 247} 248 249nfs_autoload_body() 250{ 251 [ `uname -m` = "i386" ] || atf_skip "test currently valid only on i386" 252 test_nfs -lrumpvfs -lrumpdev -lrumpnet -lrumpnet_net \ 253 -lrumpnet_netinet -lrumpnet_local -lrumpnet_shmif \ 254 -lrumpdev_disk -d key=/dk,hostpath=ffs.img,size=host 255} 256 257nfs_autoload_cleanup() 258{ 259 nfs_cleanup 260} 261 262atf_init_test_cases() 263{ 264 atf_add_test_case http 265 atf_add_test_case ssh 266 atf_add_test_case nfs 267 atf_add_test_case nfs_autoload 268} 269