xref: /freebsd/contrib/netbsd-tests/lib/librumphijack/t_tcpip.sh (revision d370fd1cd8fc69e87dc63f4f4a82e5a8b4956c93)
1 #       $NetBSD: t_tcpip.sh,v 1.18 2016/08/13 11:22:11 christos Exp $
2 #
3 # Copyright (c) 2011 The NetBSD Foundation, Inc.
4 # All rights reserved.
5 #
6 # Redistribution and use in source and binary forms, with or without
7 # modification, are permitted provided that the following conditions
8 # are met:
9 # 1. Redistributions of source code must retain the above copyright
10 #    notice, this list of conditions and the following disclaimer.
11 # 2. Redistributions in binary form must reproduce the above copyright
12 #    notice, this list of conditions and the following disclaimer in the
13 #    documentation and/or other materials provided with the distribution.
14 #
15 # THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
16 # ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
17 # TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
18 # PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
19 # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
20 # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
21 # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
22 # INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
23 # CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
24 # ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
25 # POSSIBILITY OF SUCH DAMAGE.
26 #
27 
28 rumpnetlibs="-lrumpnet -lrumpnet_net -lrumpnet_netinet6 -lrumpnet_netinet"
29 rumpnetsrv="rump_server $rumpnetlibs -lrumpdev"
30 export RUMP_SERVER=unix://csock
31 
32 atf_test_case http cleanup
33 http_head()
34 {
35         atf_set "descr" "Start hijacked httpd and get webpage from it"
36 }
37 
38 http_body()
39 {
40 
41 	atf_check -s exit:0 ${rumpnetsrv} ${RUMP_SERVER}
42 
43 	# start bozo in daemon mode
44 	atf_check -s exit:0 env LD_PRELOAD=/usr/lib/librumphijack.so \
45 	    /usr/libexec/httpd -P ./httpd.pid -b -s $(atf_get_srcdir)
46 
47 	atf_check -s exit:0 -o file:"$(atf_get_srcdir)/netstat.expout" \
48 	    rump.netstat -a
49 
50 	# get the webpage
51 	atf_check -s exit:0 env LD_PRELOAD=/usr/lib/librumphijack.so 	\
52 	    $(atf_get_srcdir)/h_netget 127.0.0.1 80 webfile
53 
54 	# check that we got what we wanted
55 	atf_check -o match:'HTTP/1.0 200 OK' cat webfile
56 	atf_check -o match:'Content-Length: 95' cat webfile
57 	blank_line_re="$(printf '^\r$')" # matches a line with only <CR><LF>
58 	atf_check -o file:"$(atf_get_srcdir)/index.html" \
59 	    sed -n "1,/${blank_line_re}/!p" webfile
60 }
61 
62 http_cleanup()
63 {
64 	if [ -f httpd.pid ]; then
65 		kill -9 "$(cat httpd.pid)"
66 		rm -f httpd.pid
67 	fi
68 
69 	rump.halt
70 }
71 
72 #
73 # Starts a SSH server and sets up the client to access it.
74 # Authentication is allowed and done using an RSA key exclusively, which
75 # is generated on the fly as part of the test case.
76 # XXX: Ideally, all the tests in this test program should be able to share
77 # the generated key, because creating it can be a very slow process on some
78 # machines.
79 #
80 # XXX2: copypasted from jmmv's sshd thingamob in the psshfs test.
81 # ideally code (and keys, like jmmv notes above) could be shared
82 #
83 start_sshd() {
84 	echo "Setting up SSH server configuration"
85 	sed -e "s,@SRCDIR@,$(atf_get_srcdir),g" -e "s,@WORKDIR@,$(pwd),g" \
86 	    $(atf_get_srcdir)/sshd_config.in >sshd_config || \
87 	    atf_fail "Failed to create sshd_config"
88 	atf_check -s ignore -o empty -e ignore \
89 	    cp $(atf_get_srcdir)/ssh_host_key .
90 	atf_check -s ignore -o empty -e ignore \
91 	    cp $(atf_get_srcdir)/ssh_host_key.pub .
92 	atf_check -s eq:0 -o empty -e empty chmod 400 ssh_host_key
93 	atf_check -s eq:0 -o empty -e empty chmod 444 ssh_host_key.pub
94 
95         env LD_PRELOAD=/usr/lib/librumphijack.so \
96 	    /usr/sbin/sshd -e -f ./sshd_config
97 	while [ ! -f sshd.pid ]; do
98 		sleep 0.01
99 	done
100 	echo "SSH server started (pid $(cat sshd.pid))"
101 
102 	echo "Setting up SSH client configuration"
103 	atf_check -s eq:0 -o empty -e empty \
104 	    ssh-keygen -f ssh_user_key -t rsa -b 1024 -N "" -q
105 	atf_check -s eq:0 -o empty -e empty \
106 	    cp ssh_user_key.pub authorized_keys
107 	echo "127.0.0.1,localhost,::1 " \
108 	    "$(cat $(atf_get_srcdir)/ssh_host_key.pub)" >known_hosts || \
109 	    atf_fail "Failed to create known_hosts"
110 	atf_check -s eq:0 -o empty -e empty chmod 600 authorized_keys
111 	sed -e "s,@SRCDIR@,$(atf_get_srcdir),g" -e "s,@WORKDIR@,$(pwd),g" \
112 	    $(atf_get_srcdir)/ssh_config.in >ssh_config || \
113 	    atf_fail "Failed to create ssh_config"
114 
115 	echo "sshd running"
116 }
117 
118 atf_test_case ssh cleanup
119 ssh_head()
120 {
121         atf_set "descr" "Test that hijacked ssh/sshd works"
122 }
123 
124 ssh_body()
125 {
126 	atf_expect_fail "PR lib/50174"
127 
128 	atf_check -s exit:0 ${rumpnetsrv} ${RUMP_SERVER}
129 	# make sure clients die after we nuke the server
130 	export RUMPHIJACK_RETRYCONNECT='die'
131 
132 	start_sshd
133 
134 	# create some sort of directory for us to "ls"
135 	mkdir testdir
136 	cd testdir
137 	jot 11 | xargs touch
138 	jot 11 12 | xargs mkdir
139 	cd ..
140 
141 	atf_check -s exit:0 -o save:ssh.out				\
142 	    env LD_PRELOAD=/usr/lib/librumphijack.so			\
143 	    ssh -T -F ssh_config 127.0.0.1 env BLOCKSIZE=512		\
144 	    ls -li $(pwd)/testdir
145 	atf_check -s exit:0 -o file:ssh.out env BLOCKSIZE=512 		\
146 	    ls -li $(pwd)/testdir
147 }
148 
149 ssh_cleanup()
150 {
151 	rump.halt
152 	# sshd dies due to RUMPHIJACK_RETRYCONNECT=1d6
153 }
154 
155 test_nfs()
156 {
157 
158 	magicstr='wind in my hair'
159 	# create ffs file system we'll be serving from
160 	atf_check -s exit:0 -o ignore newfs -F -s 10000 ffs.img
161 
162 	# start nfs kernel server.  this is a mouthful
163 	export RUMP_SERVER=unix://serversock
164 	atf_check -s exit:0 rump_server $* ${RUMP_SERVER}
165 
166 	atf_check -s exit:0 rump.ifconfig shmif0 create
167 	atf_check -s exit:0 rump.ifconfig shmif0 linkstr shmbus
168 	atf_check -s exit:0 rump.ifconfig shmif0 inet 10.1.1.1
169 
170 	export RUMPHIJACK_RETRYCONNECT=die
171 	export LD_PRELOAD=/usr/lib/librumphijack.so
172 
173 	atf_check -s exit:0 mkdir -p /rump/var/run
174 	atf_check -s exit:0 mkdir -p /rump/var/db
175 	atf_check -s exit:0 touch /rump/var/db/mountdtab
176 	atf_check -s exit:0 mkdir /rump/etc
177 	atf_check -s exit:0 mkdir /rump/export
178 
179 	atf_check -s exit:0 -x \
180 	    'echo "/export -noresvport -noresvmnt 10.1.1.100" | \
181 		dd of=/rump/etc/exports 2> /dev/null'
182 
183 	atf_check -s exit:0 rump.sysctl -q -w kern.module.autoload=1
184 
185 	atf_check -s exit:0 -e ignore mount_ffs /dk /rump/export
186 	atf_check -s exit:0 -x "echo ${magicstr} > /rump/export/im_alive"
187 
188 	# start rpcbind.  we want /var/run/rpcbind.sock
189 	export RUMPHIJACK='blanket=/var/run,socket=all'
190 	atf_check -s exit:0 rpcbind
191 
192 	# ok, then we want mountd in the similar fashion
193 	export RUMPHIJACK='blanket=/var/run:/var/db:/export,socket=all,path=/rump,vfs=all'
194 	atf_check -s exit:0 mountd /rump/etc/exports
195 
196 	# finally, le nfschuck
197 	export RUMPHIJACK='blanket=/var/run,socket=all,vfs=all'
198 	atf_check -s exit:0 nfsd
199 
200 	#
201 	# now, time for the client server and associated madness.
202 	#
203 
204 	export RUMP_SERVER=unix://clientsock
205 	unset RUMPHIJACK
206 	unset LD_PRELOAD
207 
208 	# at least the kernel server is easier
209 	atf_check -s exit:0 rump_server -lrumpvfs -lrumpnet -lrumpdev	\
210 	    -lrumpnet_net -lrumpnet_netinet -lrumpnet_shmif -lrumpfs_nfs\
211 	    ${RUMP_SERVER}
212 
213 	atf_check -s exit:0 rump.ifconfig shmif0 create
214 	atf_check -s exit:0 rump.ifconfig shmif0 linkstr shmbus
215 	atf_check -s exit:0 rump.ifconfig shmif0 inet 10.1.1.100
216 
217 	export LD_PRELOAD=/usr/lib/librumphijack.so
218 
219 	atf_check -s exit:0 mkdir /rump/mnt
220 	atf_check -s exit:0 mount_nfs 10.1.1.1:/export /rump/mnt
221 
222 	atf_check -s exit:0 -o inline:"${magicstr}\n" cat /rump/mnt/im_alive
223 	atf_check -s exit:0 -o match:'.*im_alive$' ls -l /rump/mnt/im_alive
224 }
225 
226 
227 atf_test_case nfs cleanup
228 nfs_head()
229 {
230         atf_set "descr" "Test hijacked nfsd and mount_nfs"
231 }
232 
233 nfs_body()
234 {
235 	test_nfs -lrumpvfs -lrumpdev -lrumpnet -lrumpnet_net		\
236 	    -lrumpnet_netinet -lrumpnet_local -lrumpnet_shmif -lrumpdev	\
237 	    -lrumpdev_disk -lrumpfs_ffs -lrumpfs_nfs -lrumpfs_nfsserver	\
238 	    -d key=/dk,hostpath=ffs.img,size=host
239 }
240 
241 nfs_cleanup()
242 {
243 	RUMP_SERVER=unix://serversock rump.halt 2> /dev/null
244 	RUMP_SERVER=unix://clientsock rump.halt 2> /dev/null
245 	:
246 }
247 
248 atf_test_case nfs_autoload cleanup
249 nfs_autoload_head()
250 {
251         atf_set "descr" "Test hijacked nfsd with autoload from /stand"
252 }
253 
254 nfs_autoload_body()
255 {
256 	[ `uname -m` = "i386" ] || atf_skip "test currently valid only on i386"
257 	test_nfs -lrumpvfs -lrumpdev -lrumpnet -lrumpnet_net		\
258 	    -lrumpnet_netinet -lrumpnet_local -lrumpnet_shmif -lrumpdev	\
259 	    -lrumpdev_disk -d key=/dk,hostpath=ffs.img,size=host
260 }
261 
262 nfs_autoload_cleanup()
263 {
264 	nfs_cleanup
265 }
266 
267 atf_init_test_cases()
268 {
269 	atf_add_test_case http
270 	atf_add_test_case ssh
271 	atf_add_test_case nfs
272 	atf_add_test_case nfs_autoload
273 }
274