Sha256: f6cdb045a980237cac715c6d22e1c8a979012dc264a5070983eb3393489aa335
Contents?: true
Size: 1.83 KB
Versions: 5
Compression:
Stored size: 1.83 KB
Contents
require 'net/ssh'
require 'hybrid_platforms_conductor/test_by_service'
module HybridPlatformsConductor
module HpcPlugins
module Test
# Test that deploy removes root access
class DeployRemovesRootAccess < TestByService
# Check my_test_plugin.rb.sample documentation for signature details.
def test_for_node
unless @nodes_handler.get_root_access_allowed_of(@node)
@deployer.with_test_provisioned_instance(@config.tests_provisioner_id, @node, environment: 'deploy_removes_root_access', reuse_instance: log_debug?) do |deployer, instance|
# Check that we can connect with root
ssh_ok = false
begin
Net::SSH.start(instance.ip, 'root', password: 'root_pwd', auth_methods: ['password'], verify_host_key: :never) do |ssh|
ssh_ok = ssh.exec!('echo Works').strip == 'Works'
end
rescue
end
assert_equal ssh_ok, true, 'Root does not have access from the empty image'
if ssh_ok
deployer.nbr_retries_on_error = 3
deployer.deploy_on @node
# As sshd is certainly being restarted, start and stop the container to reload it.
deployer.restart @node
# Check that we can't connect with root
ssh_ok = false
begin
Net::SSH.start(instance.ip, 'root', password: 'root_pwd', auth_methods: ['password'], verify_host_key: :never) do |ssh|
ssh_ok = ssh.exec!('echo Works').strip == 'Works'
end
rescue
end
assert_equal ssh_ok, false, 'Root can still connect on the image after deployment'
end
end
end
end
end
end
end
end
Version data entries
5 entries across 5 versions & 1 rubygems