blob: aff7ddd2d10ae34cc23594c0db6326e28199a7b9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
import re
import pytest
from tests.integration_tests.instances import IntegrationInstance
from tests.integration_tests.integration_settings import PLATFORM
def _test_crawl(client, ip):
assert client.execute("cloud-init clean --logs").ok
assert client.execute("cloud-init init --local").ok
log = client.read_from_file("/var/log/cloud-init.log")
assert f"Using metadata source: '{ip}'" in log
result = re.findall(r"Crawl of metadata service.* (\d+.\d+) seconds", log)
if len(result) != 1:
pytest.fail(f"Expected 1 metadata crawl time, got {result}")
# 20 would still be a crazy long time for metadata service to crawl,
# but it's short enough to know we're not waiting for a response
assert float(result[0]) < 20
@pytest.mark.skipif(PLATFORM != "ec2", reason="test is ec2 specific")
def test_dual_stack(client: IntegrationInstance):
# Drop IPv4 responses
assert client.execute("iptables -I INPUT -s 169.254.169.254 -j DROP").ok
_test_crawl(client, "http://[fd00:ec2::254]")
# Block IPv4 requests
assert client.execute("iptables -I OUTPUT -d 169.254.169.254 -j REJECT").ok
_test_crawl(client, "http://[fd00:ec2::254]")
# Re-enable IPv4
assert client.execute("iptables -D OUTPUT -d 169.254.169.254 -j REJECT").ok
assert client.execute("iptables -D INPUT -s 169.254.169.254 -j DROP").ok
# Drop IPv6 responses
assert client.execute("ip6tables -I INPUT -s fd00:ec2::254 -j DROP").ok
_test_crawl(client, "http://169.254.169.254")
# Block IPv6 requests
assert client.execute("ip6tables -I OUTPUT -d fd00:ec2::254 -j REJECT").ok
_test_crawl(client, "http://169.254.169.254")
# Force NoDHCPLeaseError (by removing dhclient) and assert ipv6 still works
# Destructive test goes last
# dhclient is at /sbin/dhclient on bionic but /usr/sbin/dhclient elseware
assert client.execute("rm $(which dhclient)").ok
client.restart()
log = client.read_from_file("/var/log/cloud-init.log")
assert "Crawl of metadata service using link-local ipv6 took" in log
|
