Makefile revision 1.6 
1#	$OpenBSD: Makefile,v 1.6 2020/01/15 20:47:13 bluhm Exp $
2
3# Copyright (c) 2017-2020 Alexander Bluhm <bluhm@openbsd.org>
4#
5# Permission to use, copy, modify, and distribute this software for any
6# purpose with or without fee is hereby granted, provided that the above
7# copyright notice and this permission notice appear in all copies.
8#
9# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16
17# The following ports must be installed:
18#
19# scapy               powerful interactive packet manipulation in python
20
21.include <bsd.own.mk>
22
23.if ! (make(clean) || make(cleandir) || make(obj))
24
25.if ! exists(/usr/local/bin/scapy)
26regress:
27	@echo Install scapy package to run this regress.
28	@echo SKIPPED
29.endif
30
31# PERL_REQUIRE set in ../Makefile.inc
32.if ! empty (PERL_REQUIRE)
33regress:
34	@echo perl require: "${PERL_REQUIRE}"
35	@echo install these perl packages for additional tests
36.endif
37
38PF_STATUS !=	${SUDO} pfctl -si | sed -n 's/^Status: \([^ ]*\) .*/\1/p'
39PF_ANCHOR !=	${SUDO} pfctl -sr | sed -n 's/^anchor "\([^"]*\)" all$$/\1/p'
40.if ! empty(PF_STATUS:MEnabled) && empty(PF_ANCHOR:Mregress)
41regress:
42	@echo pf status: "${PF_STATUS}"
43	@echo pf anchor: "${PF_ANCHOR}"
44	@echo This regress cannot run with pf filtering packets on localhost.
45	@echo Either disable pf or add a line 'anchor "regress"' to pf.conf.
46	@echo There the test will add a stateless rule that passes all packets.
47	@echo SKIPPED
48.endif
49
50.endif
51
52# This test needs a manual setup of two machines
53# Set up machines: LOCAL REMOTE
54# LOCAL is the machine where this makefile is running.
55# REMOTE is running OpenBSD with echo server to test PMTU
56# FAKE is an non existing machine in a non existing network.
57# REMOTE_SSH is the hostname to log in on the REMOTE machine.
58
59# Configure Addresses on the machines.
60# Adapt interface and addresse variables to your local setup.
61#
62LOCAL_IF ?=
63REMOTE_SSH ?=
64
65LOCAL_ADDR ?=
66REMOTE_ADDR ?=
67FAKE_NET ?=
68FAKE_NET_ADDR ?=
69
70.if empty (LOCAL_IF) || empty (REMOTE_SSH) || \
71    empty (LOCAL_ADDR) || \
72    empty (REMOTE_ADDR) || \
73    empty (FAKE_NET) || \
74    empty (FAKE_NET_ADDR)
75.BEGIN:
76	@true
77regress:
78	@echo This tests needs a remote machine to operate on
79	@echo LOCAL_IF REMOTE_SSH LOCAL_ADDR REMOTE_ADDR FAKE_NET FAKE_NET_ADDR
80	@echo are empty.  Fill out these variables for additional tests.
81	@echo SKIPPED
82.endif
83
84.MAIN: all
85
86.if make (regress) || make (all)
87.BEGIN:
88	@echo
89	${SUDO} true
90	ssh -t ${REMOTE_SSH} true
91.endif
92
93# Create python include file containing the addresses.
94addr.py: Makefile
95	rm -f $@ $@.tmp
96	echo 'LOCAL_IF = "${LOCAL_IF}"' >>$@.tmp
97.for var in LOCAL REMOTE FAKE_NET
98	echo '${var}_ADDR = "${${var}_ADDR}"' >>$@.tmp
99.endfor
100	echo 'FAKE_NET = "${FAKE_NET}"' >>$@.tmp
101	mv $@.tmp $@
102
103# load the pf rules into the kernel of the REMOTE and LOCAL machine
104REGRESS_SETUP +=	stamp-pfctl
105stamp-pfctl:
106.if ! empty(PF_ANCHOR:Mregress)
107	echo 'pass on ${LOCAL_IF} no state' | ${SUDO} pfctl -a regress -f -
108.endif
109	@date >$@
110
111SCAPYS !=		cd ${.CURDIR} && ls scapy-*.py
112TARGETS =
113
114# Set variables so that make runs with and without obj directory.
115# Only do that if necessary to keep visible output short.
116.if ${.CURDIR} == ${.OBJDIR}
117PYTHON =	python2.7 -u
118SCAPYPATH =
119.else
120PYTHON =	PYTHONPATH=${.OBJDIR} python2.7 -u
121SCAPYPATH =	${.CURDIR}/
122.endif
123
124.for s in ${SCAPYS}
125REGRESS_TARGETS +=	run-$s
126run-$s: $s addr.py
127	@echo '\n======== $@ ========'
128	time SUDO=${SUDO} PYTHON="${PYTHON}" perl ${PERLINC} ${PERLPATH}scapy.pl splice ${FAKE_NET_ADDR} ${REMOTE_ADDR} ${REMOTE_SSH} ${SCAPYPATH}$s
129.endfor
130
131.if ! empty(PF_ANCHOR:Mregress)
132REGRESS_CLEANUP +=	cleanup
133cleanup:
134	@echo '\n======== $@ ========'
135	${SUDO} pfctl -a regress -Fr
136	rm -f stamp-pfctl
137.endif
138
139CLEANFILES +=		addr.py *.pyc *.log stamp-*
140
141.PHONY: check-setup check-setup-local check-setup-remote
142
143# Check wether the address, route and remote setup is correct
144check-setup: check-setup-local check-setup-remote
145
146check-setup-local:
147	@echo '\n======== $@ ========'
148	ping -n -c 1 ${LOCAL_ADDR}  # LOCAL_ADDR
149	route -n get -inet ${LOCAL_ADDR} | grep -q 'flags: .*LOCAL'  # LOCAL_ADDR
150	ping -n -c 1 ${REMOTE_ADDR}  # REMOTE_ADDR
151	route -n get -inet ${REMOTE_ADDR} | fgrep -q 'interface: ${LOCAL_IF}'  # REMOTE_ADDR LOCAL_IF
152	! ping -n -c 1 -w 1 ${FAKE_NET_ADDR}  # FAKE_NET_ADDR
153.for ip in FAKE_NET FAKE_NET_ADDR
154	route -n get -inet ${${ip}} | grep -q 'flags: .*BLACKHOLE'  # ${ip}
155.endfor
156
157check-setup-remote:
158	@echo '\n======== $@ ========'
159	ssh ${REMOTE_SSH} ping -n -c 1 ${REMOTE_ADDR}  # REMOTE_ADDR
160	ssh ${REMOTE_SSH} route -n get -inet ${REMOTE_ADDR} | grep -q 'flags: .*LOCAL'  # REMOTE_ADDR
161	ssh ${REMOTE_SSH} ping -n -c 1 ${LOCAL_ADDR}  # LOCAL_ADDR
162.for ip in FAKE_NET FAKE_NET_ADDR
163	ssh ${REMOTE_SSH} route -n get -inet ${${ip}} | fgrep -q 'gateway: ${LOCAL_ADDR}'  # ${ip} LOCAL_ADDR
164.endfor
165
166.include <bsd.regress.mk>
167