Sha256: b72e433b283e3f9669fef8213f78171e017188ec56cab768bf21e6f556d91b16
Contents?: true
Size: 1.7 KB
Versions: 20
Compression:
Stored size: 1.7 KB
Contents
require 'net/ssh'
require 'hybrid_platforms_conductor/test_by_service'
module HybridPlatformsConductor
module HpcPlugins
module Test
# Test that deploy removes root access
class DeployRemovesRootAccess < TestByService
# Check my_test_plugin.rb.sample documentation for signature details.
def test_for_node
@deployer.with_test_provisioned_instance(@config.tests_provisioner_id, @node, environment: 'deploy_removes_root_access', reuse_instance: log_debug?) do |deployer, instance|
# Check that we can connect with root
ssh_ok = false
begin
Net::SSH.start(instance.ip, 'root', password: 'root_pwd', auth_methods: ['password'], verify_host_key: :never) do |ssh|
ssh_ok = ssh.exec!('echo Works').strip == 'Works'
end
rescue
end
assert_equal ssh_ok, true, 'Root does not have access from the empty image'
if ssh_ok
deployer.nbr_retries_on_error = 3
deployer.deploy_on @node
# As sshd is certainly being restarted, start and stop the container to reload it.
deployer.restart @node
# Check that we can't connect with root
ssh_ok = false
begin
Net::SSH.start(instance.ip, 'root', password: 'root_pwd', auth_methods: ['password'], verify_host_key: :never) do |ssh|
ssh_ok = ssh.exec!('echo Works').strip == 'Works'
end
rescue
end
assert_equal ssh_ok, false, 'Root can still connect on the image after deployment'
end
end
end
end
end
end
end
Version data entries
20 entries across 20 versions & 1 rubygems