1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
|
"""Tests for SSH connectivity between client and server"""
import pytest
testinfra_hosts = ['borg-client', 'borg-client-2', 'borg-client-multi', 'borg-client-multi-keys']
def get_borg_rsh(host, repo_name):
hostname = host.backend.get_hostname()
if hostname != 'borg-client-multi-keys':
return ''
sanitized_repo_name = repo_name.replace('-', '_')
return (
'BORG_RSH="ssh -i '
f'/root/.ssh/id_ed25519_borgbackup_borg_server_{sanitized_repo_name}"'
)
def test_ssh_connection_to_server(host):
c = host.run('ssh -o BatchMode=yes -o ConnectTimeout=5 borg@borg-server echo test')
assert c.rc == 0 or 'Connection refused' not in c.stderr
def test_no_password_prompt_on_connect(host):
hostname = host.backend.get_hostname()
if hostname == 'borg-client-multi-keys':
c = host.run(
'ssh -i /root/.ssh/id_ed25519_borgbackup_borg_server_configs_keys '
'-o BatchMode=yes -o PreferredAuthentications=publickey '
'borg@borg-server exit'
)
else:
c = host.run(
'ssh -o BatchMode=yes -o PreferredAuthentications=publickey '
'borg@borg-server exit'
)
assert c.rc == 0
def test_known_hosts_has_correct_entry(host):
known_hosts = host.file('/root/.ssh/known_hosts')
content = known_hosts.content_string
assert 'borg-server' in content
assert 'ssh-' in content
def test_borg_can_connect_to_server(host):
hostname = host.backend.get_hostname()
if hostname == 'borg-client-multi':
c = host.run('borg list borg@borg-server:/opt/borg/configs')
assert c.rc == 0, 'Should be able to connect to configs repo'
elif hostname == 'borg-client-multi-keys':
c = host.run(
f'{get_borg_rsh(host, "configs-keys")} '
'borg list borg@borg-server:/opt/borg/configs-keys'
)
assert c.rc == 0, 'Should be able to connect to configs-keys repo'
elif hostname == 'borg-client':
c = host.run('borg list borg@borg-server:/opt/borg/borg-client')
assert c.rc == 0
elif hostname == 'borg-client-2':
c = host.run('borg list borg@borg-server:/opt/borg/borg-client-2')
assert c.rc == 0, 'Should be able to connect to borg-client-2 repo'
else:
pytest.fail(f"Unexpected hostname: {hostname}")
def test_borg_info_works(host):
hostname = host.backend.get_hostname()
if hostname == 'borg-client-multi':
c = host.run('borg info borg@borg-server:/opt/borg/configs')
assert c.rc == 0, 'Should be able to get info for configs repo'
c2 = host.run('borg info borg@borg-server:/opt/borg/home-data')
assert c2.rc == 0, 'Should be able to get info for home-data repo'
elif hostname == 'borg-client-multi-keys':
c = host.run(
f'{get_borg_rsh(host, "configs-keys")} '
'borg info borg@borg-server:/opt/borg/configs-keys'
)
assert c.rc == 0, 'Should be able to get info for configs-keys repo'
c2 = host.run(
f'{get_borg_rsh(host, "home-data-keys")} '
'borg info borg@borg-server:/opt/borg/home-data-keys'
)
assert c2.rc == 0, 'Should be able to get info for home-data-keys repo'
elif hostname == 'borg-client':
c = host.run('borg info borg@borg-server:/opt/borg/borg-client')
assert c.rc == 0
elif hostname == 'borg-client-2':
c = host.run('borg info borg@borg-server:/opt/borg/borg-client-2')
assert c.rc == 0, 'Should be able to get info for borg-client-2 repo'
else:
pytest.fail(f"Unexpected hostname: {hostname}")
def test_multi_instance_can_access_both_repos(host):
hostname = host.backend.get_hostname()
if hostname != 'borg-client-multi':
return
c1 = host.run('borg list borg@borg-server:/opt/borg/configs')
assert c1.rc == 0, 'borg-client-multi should access configs repo'
c2 = host.run('borg list borg@borg-server:/opt/borg/home-data')
assert c2.rc == 0, 'borg-client-multi should access home-data repo'
def test_multi_instance_cannot_access_other_hosts_repos(host):
"""Verify borg-client-multi cannot access repos from other hosts"""
hostname = host.backend.get_hostname()
if hostname != 'borg-client-multi':
return
c1 = host.run('borg list borg@borg-server:/opt/borg/borg-client')
assert c1.rc != 0, (
'borg-client-multi should NOT access borg-client repo'
)
c2 = host.run('borg list borg@borg-server:/opt/borg/borg-client-2')
assert c2.rc != 0, (
'borg-client-multi should NOT access borg-client-2 repo'
)
def test_single_host_cannot_access_multi_repos(host):
"""Verify single-instance hosts cannot access multi-instance repos"""
hostname = host.backend.get_hostname()
if hostname not in ['borg-client', 'borg-client-2']:
return
c1 = host.run('borg list borg@borg-server:/opt/borg/configs')
assert c1.rc != 0, (
f'{hostname} should NOT access configs repo (belongs to borg-client-multi)'
)
c2 = host.run('borg list borg@borg-server:/opt/borg/home-data')
assert c2.rc != 0, (
f'{hostname} should NOT access home-data repo (belongs to borg-client-multi)'
)
def test_single_hosts_cannot_access_each_others_repos(host):
"""Verify single-instance hosts cannot access each other's repos"""
hostname = host.backend.get_hostname()
if hostname == 'borg-client':
c = host.run('borg list borg@borg-server:/opt/borg/borg-client-2')
assert c.rc != 0, (
'borg-client should NOT access borg-client-2 repo'
)
elif hostname == 'borg-client-2':
c = host.run('borg list borg@borg-server:/opt/borg/borg-client')
assert c.rc != 0, (
'borg-client-2 should NOT access borg-client repo'
)
|
