nixpkgs/nixos/tests/shadow.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

120 lines
4.2 KiB
Nix
Raw Normal View History

2020-12-23 18:28:30 +00:00
let
password1 = "foobar";
password2 = "helloworld";
password3 = "bazqux";
password4 = "asdf123";
2020-12-23 18:28:30 +00:00
in import ./make-test-python.nix ({ pkgs, ... }: {
name = "shadow";
meta = with pkgs.lib.maintainers; { maintainers = [ nequissimus ]; };
2020-12-23 18:28:30 +00:00
nodes.shadow = { pkgs, ... }: {
environment.systemPackages = [ pkgs.shadow ];
users = {
mutableUsers = true;
users.emma = {
isNormalUser = true;
2020-12-23 18:28:30 +00:00
password = password1;
shell = pkgs.bash;
};
users.layla = {
isNormalUser = true;
2020-12-23 18:28:30 +00:00
password = password2;
shell = pkgs.shadow;
};
users.ash = {
isNormalUser = true;
password = password4;
shell = pkgs.bash;
};
2020-12-23 18:28:30 +00:00
};
};
testScript = ''
shadow.wait_for_unit("multi-user.target")
shadow.wait_until_succeeds("pgrep -f 'agetty.*tty1'")
with subtest("Normal login"):
shadow.send_key("alt-f2")
shadow.wait_until_succeeds("[ $(fgconsole) = 2 ]")
shadow.wait_for_unit("getty@tty2.service")
shadow.wait_until_succeeds("pgrep -f 'agetty.*tty2'")
shadow.wait_until_tty_matches("2", "login: ")
2020-12-23 18:28:30 +00:00
shadow.send_chars("emma\n")
shadow.wait_until_tty_matches("2", "login: emma")
2020-12-23 18:28:30 +00:00
shadow.wait_until_succeeds("pgrep login")
shadow.sleep(2)
2020-12-23 18:28:30 +00:00
shadow.send_chars("${password1}\n")
shadow.send_chars("whoami > /tmp/1\n")
shadow.wait_for_file("/tmp/1")
assert "emma" in shadow.succeed("cat /tmp/1")
with subtest("Switch user"):
shadow.send_chars("su - ash\n")
shadow.sleep(2)
shadow.send_chars("${password4}\n")
shadow.sleep(2)
shadow.send_chars("whoami > /tmp/3\n")
shadow.wait_for_file("/tmp/3")
assert "ash" in shadow.succeed("cat /tmp/3")
2020-12-23 18:28:30 +00:00
with subtest("Change password"):
shadow.send_key("alt-f3")
shadow.wait_until_succeeds("[ $(fgconsole) = 3 ]")
shadow.wait_for_unit("getty@tty3.service")
shadow.wait_until_succeeds("pgrep -f 'agetty.*tty3'")
shadow.wait_until_tty_matches("3", "login: ")
2020-12-23 18:28:30 +00:00
shadow.send_chars("emma\n")
shadow.wait_until_tty_matches("3", "login: emma")
2020-12-23 18:28:30 +00:00
shadow.wait_until_succeeds("pgrep login")
shadow.sleep(2)
2020-12-23 18:28:30 +00:00
shadow.send_chars("${password1}\n")
shadow.send_chars("passwd\n")
shadow.sleep(2)
shadow.send_chars("${password1}\n")
shadow.sleep(2)
shadow.send_chars("${password3}\n")
shadow.sleep(2)
shadow.send_chars("${password3}\n")
shadow.sleep(2)
shadow.send_key("alt-f4")
shadow.wait_until_succeeds("[ $(fgconsole) = 4 ]")
shadow.wait_for_unit("getty@tty4.service")
shadow.wait_until_succeeds("pgrep -f 'agetty.*tty4'")
shadow.wait_until_tty_matches("4", "login: ")
2020-12-23 18:28:30 +00:00
shadow.send_chars("emma\n")
shadow.wait_until_tty_matches("4", "login: emma")
2020-12-23 18:28:30 +00:00
shadow.wait_until_succeeds("pgrep login")
shadow.sleep(2)
2020-12-23 18:28:30 +00:00
shadow.send_chars("${password1}\n")
shadow.wait_until_tty_matches("4", "Login incorrect")
shadow.wait_until_tty_matches("4", "login:")
2020-12-23 18:28:30 +00:00
shadow.send_chars("emma\n")
shadow.wait_until_tty_matches("4", "login: emma")
2020-12-23 18:28:30 +00:00
shadow.wait_until_succeeds("pgrep login")
shadow.sleep(2)
2020-12-23 18:28:30 +00:00
shadow.send_chars("${password3}\n")
shadow.send_chars("whoami > /tmp/2\n")
shadow.wait_for_file("/tmp/2")
assert "emma" in shadow.succeed("cat /tmp/2")
with subtest("Groups"):
assert "foobar" not in shadow.succeed("groups emma")
shadow.succeed("groupadd foobar")
shadow.succeed("usermod -a -G foobar emma")
assert "foobar" in shadow.succeed("groups emma")
with subtest("nologin shell"):
shadow.send_key("alt-f5")
shadow.wait_until_succeeds("[ $(fgconsole) = 5 ]")
shadow.wait_for_unit("getty@tty5.service")
shadow.wait_until_succeeds("pgrep -f 'agetty.*tty5'")
shadow.wait_until_tty_matches("5", "login: ")
2020-12-23 18:28:30 +00:00
shadow.send_chars("layla\n")
shadow.wait_until_tty_matches("5", "login: layla")
2020-12-23 18:28:30 +00:00
shadow.wait_until_succeeds("pgrep login")
shadow.send_chars("${password2}\n")
shadow.wait_until_tty_matches("5", "login:")
2020-12-23 18:28:30 +00:00
'';
})