Skip to content
Snippets Groups Projects
Commit 80178b2e authored by Walter Lozano's avatar Walter Lozano
Browse files

Disable iptables nmap test


This test relies on a Debian LXC image to be deployed in the DUT which
presents a problem in some scenarios, devices requires access to public
Internet and QEMU requires LXC support.

Disable this test until it is reimplemented to overcome the current
limitations.

Signed-off-by: default avatarWalter Lozano <walter.lozano@collabora.com>
parent ba4ef231
No related branches found
No related tags found
1 merge request!550Backport v2023 <- v2024dev3: Disable iptables nmap test
Pipeline #582414 passed
job_name: {{image_name}}-{{group}}
{% if device_type == 'qemu' %}
{% include 'common-qemu-boot-tpl.yaml' %}
{% else %}
{% include 'common-boot-tpl.yaml' %}
{% endif %}
- deploy:
namespace: tlxc
timeout:
minutes: 30
to: lxc
os: debian
packages:
- python3
- nmap
- boot:
namespace: tlxc
prompts:
- 'root@(.*):/#'
timeout:
minutes: 15
method: lxc
- test:
timeout:
minutes: 30
namespace: tlxc
name: {{group}}-test
definitions:
{%- for test_name in tests %}
- repository: https://gitlab.apertis.org/tests/apertis-test-cases.git
branch: 'apertis/v2023'
history: False
from: git
name: {{test_name}}
path: test-cases/{{test_name}}.yaml
{%- endfor %}
protocols:
lava-lxc:
name: lxc-debug
template: debian
distribution: debian
release: buster
mirror: http://deb.debian.org/debian
metadata:
name: iptables-nmap
format: "Apertis Test Definition 1.0"
image-types:
hmi: [ armhf, amd64 ]
basesdk: [ amd64 ]
sdk: [ amd64 ]
image-deployment:
- APT
- OSTree
group: "iptables-nmap"
type: functional
exec-type: automated
priority: high
maintainer: "Apertis Project"
description: "Test the firewall using nmap from another computer."
resources:
- "The tester needs an external computer with the nmap command available."
- "The external computer must be connected to the same network as the target."
expected:
- "All ports are filtered, except port 80/tcp (http)/closed,
22/tcp (ssh)/open, and 1234/tcp (hotline)/close. The script should also
report 'pass' at the end."
- |
>Not shown: 999 filtered ports
PORT STATE SERVICE
22/tcp open ssh
80/tcp closed http
1234/tcp closed hotline
....
TEST_RESULT:only_valid_services:pass
notes:
- "Make sure that you have disconnect the ethernet connection to the target
before you start the tethering process."
- "In order to test the SDK image, the VirtualBox VM must be configured with
a network attached to Bridged adaptor. The test cannot be run if the
network is configured as NAT."
install:
git-repos:
- url: https://gitlab.apertis.org/pkg/development/apertis-tests.git
branch: 'apertis/v2023'
run:
steps:
- "# From the external computer where the apertis-tests repository was
cloned, run the following script to check filtered/open/closed ports
(the nmap command can take some time). Replace 'lava-target-ip' by the
DUT_IP:"
- cd apertis-tests
- iptables-nmap/run-iptables-nmap.py `lava-target-ip`
parse:
pattern: 'TEST_RESULT:(?P<test_case_id>[^:]+):(?P<result>\w+)'
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment