veeos-1x.git/smoketest/scripts/cli/test_service_ssh.py, branch equuleusVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos-contrib/veeos-1x.git)
https://git.amelek.net/vyos-contrib/veeos-1x.git/atom?h=equuleus2023-07-19T14:39:45+00:00sshguard: T5354: Add service ssh dynamic-protection2023-07-19T14:39:45+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-07-19T14:39:45+00:00urn:sha1:cd6f7994a9c5d6501ce56b57362c7f33f64fa3d5
Sshguard protects hosts from brute-force attacks
It can inspect logs and block "bad" addresses by threshold
Auto-generates own tables and rules for nftables, so they are not
intercept with VyOS firewall rules.
When service stops, all generated tables are deleted.
set service ssh dynamic-protection
set service ssh dynamic-protection allow-from '192.0.2.1'
set service ssh dynamic-protection block-time '120'
set service ssh dynamic-protection detect-time '1800'
set service ssh dynamic-protection threshold '30'
smoketest: ssh: verify SSH service is stopped on removal2022-04-04T20:32:13+00:00Christian Poessingerchristian@poessinger.com2022-04-04T20:17:29+00:00urn:sha1:ce1073f08d24d8c4bd2ffdd82fa87a89ee3a334d
(cherry picked from commit 4bb0adf535e12dc962a0ebea0f5a96f612a76a5d)
smoketest: ssh: verify login of valid and invalid test user2022-04-04T20:31:17+00:00Christian Poessingerchristian@poessinger.com2022-04-04T19:05:12+00:00urn:sha1:7b4a9a871ad8a9fd056ac1514797b9910e100ada
In order to test for proper system authentication and security setup a new
testcase is added which performs an SSH login and command execution with a
predefined user. The result (output of uname -a) must match the output if the
command is run natively.
We also try to login as an invalid user - this is not allowed to work.
(cherry picked from commit e66c45ce7a664ecb26d21a215975777bef0fcd71)
smoketest: remove superfluous ConfigSession import2021-11-21T18:24:42+00:00Christian Poessingerchristian@poessinger.com2021-11-21T18:23:17+00:00urn:sha1:1eede5bf19518e30bbfe1defcd067a69cdbe0393
(cherry picked from commit commit 22e3558834784a8ca37f6335c15c58a631a7fe10)
smoketest: add shim for every test to re-use common tasts2021-07-25T19:10:25+00:00Christian Poessingerchristian@poessinger.com2021-03-17T18:12:04+00:00urn:sha1:fb94d0b6091e09099c972355886918ef63ee9d97
Currently every smoketest does the setup and destruction of the configsession
on its own durin setUp(). This creates a lot of overhead and one configsession
should be re-used during execution of every smoketest script.
In addiion a test that failed will leaf the system in an unconsistent state.
For this reason before the test is executed we will save the running config
to /tmp and the will re-load the config after the test has passed, always
ensuring a clean environment for the next test.
(cherry picked from commit 0f3def974fbaa4a26e6ad590ee37dd965bc2358f)
vrf: T31: add support for - and _ in VRF names2021-01-16T14:31:33+00:00Christian Poessingerchristian@poessinger.com2021-01-16T14:18:31+00:00urn:sha1:8dab92c65127a629df6607e7b46504a115943f72
(cherry picked from commit 8953a14b01a4183ea890f1c3d569aae54e363614)
ssh: T2635: harden Jinja2 template and daemon startup2021-01-07T22:23:40+00:00Christian Poessingerchristian@poessinger.com2021-01-07T22:22:58+00:00urn:sha1:dcdc4f3ea27f1a26f8baa6b72b51c7911f21e6bassh: T2635: change sshd_config path to /run/sshd2021-01-07T22:01:51+00:00Christian Poessingerchristian@poessinger.com2021-01-07T20:30:00+00:00urn:sha1:65ee3a66077c7708f366d9492033634024887545smoketest: adjust test method names2020-12-29T21:47:04+00:00Christian Poessingerchristian@poessinger.com2020-12-29T20:51:24+00:00urn:sha1:f2b2bbdd51cb00a8be1aefa1f9028212fcffc1d3
This is for better readability during testruns
smoketest: run all tests with verbosity=22020-12-29T20:08:41+00:00Christian Poessingerchristian@poessinger.com2020-12-29T19:41:39+00:00urn:sha1:d36063f837e7b015e8f9fc3a19832bc36bceb61a