mirror of
https://github.com/containers/podman.git
synced 2025-10-13 01:06:10 +08:00
73cbc13190
Primary motivator: 'curl -v' format changes in f42 Drive-bys: * 127.0.0.1, not localhost * use wait_for_port, not sleep * show curl commands and their output, to ease debugging failures * better failure assertions Signed-off-by: Ed Santiago <santiago@redhat.com>
73 lines
2.2 KiB
Bash
73 lines
2.2 KiB
Bash
#!/usr/bin/env bats -*- bats -*-
|
|
#
|
|
# Tests podman system service CORS enabled
|
|
#
|
|
|
|
load helpers
|
|
load helpers.network
|
|
|
|
SERVICE_NAME="podman_test_$(random_string)"
|
|
|
|
SERVICE_TCP_HOST="127.0.0.1"
|
|
|
|
SERVICE_FILE="$UNIT_DIR/$SERVICE_NAME.service"
|
|
SOCKET_FILE="$UNIT_DIR/$SERVICE_NAME.socket"
|
|
|
|
# bats test_tags=ci:parallel
|
|
@test "podman system service - tcp CORS" {
|
|
skip_if_remote "system service tests are meaningless over remote"
|
|
PORT=$(random_free_port)
|
|
|
|
log=${PODMAN_TMPDIR}/system-service.log
|
|
$PODMAN system service --cors="*" tcp:$SERVICE_TCP_HOST:$PORT -t 20 2> $log &
|
|
podman_pid="$!"
|
|
|
|
wait_for_port $SERVICE_TCP_HOST $PORT
|
|
cmd="curl -s --max-time 10 -vvv $SERVICE_TCP_HOST:$PORT/_ping"
|
|
echo "$_LOG_PROMPT $cmd"
|
|
run -0 $cmd
|
|
echo "$output"
|
|
assert "$output" =~ " Access-Control-Allow-Origin: \*" \
|
|
"access-control-allow-origin verifies CORS is set"
|
|
|
|
kill $podman_pid
|
|
wait $podman_pid || true
|
|
|
|
# Running server over TCP is a bad idea. We should see a warning
|
|
assert "$(< $log)" =~ "Using the Podman API service with TCP sockets" \
|
|
"podman warns about server on TCP"
|
|
}
|
|
|
|
# bats test_tags=ci:parallel
|
|
@test "podman system service - tcp without CORS" {
|
|
skip_if_remote "system service tests are meaningless over remote"
|
|
PORT=$(random_free_port)
|
|
$PODMAN system service tcp:$SERVICE_TCP_HOST:$PORT -t 20 &
|
|
podman_pid="$!"
|
|
|
|
wait_for_port $SERVICE_TCP_HOST $PORT
|
|
cmd="curl -s --max-time 10 -vvv $SERVICE_TCP_HOST:$PORT/_ping"
|
|
echo "$_LOG_PROMPT $cmd"
|
|
run -0 $cmd
|
|
echo "$output"
|
|
|
|
assert "$output" !~ "Access-Control-Allow-Origin:" \
|
|
"CORS header should not be present"
|
|
|
|
kill $podman_pid
|
|
wait $podman_pid || true
|
|
}
|
|
|
|
# bats test_tags=ci:parallel
|
|
@test "podman system service - CORS enabled in logs" {
|
|
skip_if_remote "system service tests are meaningless over remote"
|
|
|
|
PORT=$(random_free_port)
|
|
run_podman 0+w system service --log-level="debug" --cors="*" -t 1 tcp:$SERVICE_TCP_HOST:$PORT
|
|
is "$output" ".*CORS Headers were set to ..\*...*" "debug log confirms CORS headers set"
|
|
assert "$output" =~ "level=warning msg=\"Using the Podman API service with TCP sockets is not recommended" \
|
|
"TCP socket warning"
|
|
}
|
|
|
|
# vim: filetype=sh
|