tests/bind
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
113 commits 3 branches 1 tag 5 MiB
Commit graph

64 commits

Author SHA1 Message Date
Ondrej Mejzlik
36a7999ab8 update ids 2024-06-20 19:39:16 +02:00
Petr Menšík
17d375dcc8 Move around some Sanity tests 
Test sharing adjust definitions by having it once per subdirectory in
Sanity. Separate named for bind testing, utils for just bind-utils
testing. With the same working also for other bind variants.
 2024-06-20 17:12:58 +02:00
Petr Menšík
c391126fc9 Additional improvements to caching dnssec forwarder 
Try multiple starts of named. Trust anchor management might not properly
initialize keys. Ensure they work also after restarts.
 2024-03-26 12:24:51 +01:00
Petr Menšík
ef374282fe Use next resolv.conf if first is is security-unaware 
Check servers in the most preferred resolv.conf file. If it does not
contain security-aware servers, try next file. Only use fallback
addresses if none of detected servers works with DNSSEC.
 2024-03-20 16:54:10 +01:00
Petr Menšík
34be987e9e Fix delv check 2024-03-20 14:28:49 +01:00
Petr Menšík
db71acdb1a Handle better case when no provided server works 2024-03-20 14:25:49 +01:00
Petr Menšík
34632deacc Workarounds for completely DNSSEC-unaware architecture 
Instead of hard failures, try to use custom servers.
 2024-03-20 13:39:26 +01:00
Petr Menšík
b37c1f3153 Ensure keyId is non-empty and non-zero 2024-03-20 11:28:51 +01:00
Petr Menšík
aea5744967 Rename more functions to move them into bind-utils library 2024-03-19 20:59:51 +01:00
Petr Menšík
dabbd04134 Change to support also alternative packages 
Print also used version of dig and named.
 2024-03-19 13:20:39 +01:00
Petr Menšík
fc54993c93 Forwarder with DNSSEC enabled test 
Basic sanity test configuring forwarder, with enabled dnssec. Check that
known signed domains are indeed signed and marked as such. Check that
few unsigned zones are also marked as unsigned.

Checks also trust anchor is trusted and automatically installed.
 2024-03-19 13:02:59 +01:00
Petr Menšík
c51ba65c14 Install python3-dns and pytest 
BIND 9.16 still provides python3 modules and can test them using pytest.
cds test can use python3-dns, if it is installed.
 2024-02-19 22:46:19 +01:00
Petr Menšík
76a41d1775 Disable upstream test suite when checking rhel 2023-10-17 12:28:20 +02:00
Petr Menšík
2ddad6ff92 Workarounds to DNSSEC failing infrastructure 
Be it systemd-resolved activation or some servers not providing working
dnssec, it needs workarounds to resolv.conf.
 2023-08-25 16:11:06 +02:00
Petr Menšík
87e2d28453 Convert remaining tests to work with alternative components 
Expand adjusting based on components to more alternatives
 2023-08-25 15:14:41 +02:00
Petr Menšík
e82b8c0c33 Make more components conditionally run 
Expand component adjusts and ability to test multiple components.
 2023-08-25 13:31:36 +02:00
Petr Menšík
b39f2d88cd Extend delv tests to include more details 2023-08-25 12:47:53 +02:00
Petr Menšík
acbc9195fe Add unset component and bind9.16 rhel8 component support 2023-08-25 12:47:53 +02:00
Petr Menšík
928e44fe35 First attempt to support multiple components 2023-08-25 12:43:02 +02:00
Petr Menšík
d9f5b1efa6 fixup! Try conditionalizing tests 2023-01-30 20:21:50 +01:00
Petr Menšík
4e305a97d5 Adjust also geoip test 
Only this test is enabled at the moment.
 2023-01-30 18:37:34 +01:00
Petr Menšík
ecafc60535 Try conditionalizing tests 
Accept both component bind or bind9-next. Expects component is set from
CI plan specified per component, but from shared tests/bind repository.
 2023-01-30 17:48:52 +01:00
Petr Menšík
2da9e653c8 Adapt test to run even for different than bind pkg 
We already have multiple packages with different versions of bind. They
can be in RHEL or Fedora. Attempt to support even alternative packages
run by overriding PACKAGE environment variable to different base SRPM
name.
 2023-01-29 14:02:50 +01:00
Petr Menšík
85d8ed4279 Update to RHEL test variant 2022-09-09 17:30:26 +02:00
Petr Menšík
556e3d028c Get Back internal test suite 
Imported back from commit 45a1f718bf
 2022-09-09 15:33:22 +02:00
Petr Menšík
8092bee1d3 Remove dnssec-enabled yes statement 
It is not supported since 9.16+ and is always enabled. It is also
enabled by default on earlier 9.11. There is no reason it has to be
present, except maybe for very old 9.8 or 9.9 versions.
 2022-08-04 12:40:23 +02:00
Petr Sklenar
3bf810abc7 Adding test 2022-01-04 20:01:53 +01:00
Petr Sklenar
c0e56fd799 removing old and not functional tests 2022-01-04 16:40:03 +01:00
Petr Sklenar
45a1f718bf removing old and not functional tests 2022-01-04 16:38:03 +01:00
Petr Sklenar
598c60cf2d removing old and not functional tests 2022-01-04 12:28:29 +01:00
Petr Sklenar
623634e5c5 removing old and not functional tests 2022-01-04 12:27:16 +01:00
Petr Sklenar
aaa71be5b8 removing old and not functional tests 2022-01-04 12:22:08 +01:00
Petr Menšík
3e6a5fa104 Modify mysql DLZ module test to work with 9.16 
Use built DLZ module instead of built-in functionality.
 2021-09-04 01:35:11 +02:00
Petr Menšík
c15ff1e86d New experimental mysql DLZ module test 
It would work only with named-sdb available on RHEL8 and lower.
Unfinished problem with mysql connection refused by selinux.
 2021-05-27 23:11:17 +02:00
Petr Menšík
2522678960 Add simple test validating JSON support 
Passes on Fedora builds, where JSON is already enabled.
 2021-01-25 22:19:52 +01:00
Petr Menšík
aa7c4e9e2d Try catching broken dependencies on update 
Check whether non-bind srpm dependencies are still installed.
 2021-01-25 21:30:58 +01:00
Petr Menšík
78e82abc04 Adjust to more recent tmt bakerlib handling 2021-01-06 14:34:09 +01:00
Petr Menšík
0f6f99e1e5 Run fine on RHEL6, where pkcs11-tokens is not yet built 2020-05-27 12:02:22 +02:00
Petr Menšík
fbaeef6765 Disable few tests failing tests 2020-04-16 22:13:08 +02:00
Petr Menšík
1997a5d0e2 Update metadata of few tests 2020-04-15 00:01:28 +02:00
Petr Menšík
1c56a54766 Update upstream testsuite test metadata 2020-04-14 23:53:17 +02:00
Petr Menšík
c068eec327 Import tests from Red Hat tests repository 2020-04-14 23:53:17 +02:00
Petr Menšík
4b7fcb264a RHTS removal 2020-04-14 16:53:22 +02:00
Petr Menšík
a23ab8e133 Remove rhts dependencies 2020-04-14 16:37:14 +02:00
Petr Menšík
95553bdd9b Create two plans, run on container 2020-04-14 15:46:54 +02:00
Petr Menšík
2916caf34b Provide way to run it 
Document way to run it on local machine. Avoid it by default, because it
might destroy local configuration.
 2020-04-14 15:19:08 +02:00
Petr Menšík
d273b26733 Move BIND upstream tests into tier 1 2020-04-14 12:40:07 +02:00
Petr Menšík
6927763846 Remove tests requiring bind/setup library from tier1 
Setup tests are problematic, they will not start as they should. Do not
run them now.
 2020-04-14 11:05:00 +02:00
Petr Menšík
6b6e069009 Add more sanity tests to Tier 1 
Add all sanity tests, that run in internal Tier 1 CI
 2020-04-14 09:12:29 +02:00
Petr Menšík
afc99941af Pass rndc test also in FIPS mode 
In FIPS mode, rndc-keygen has to switch itself to algorithm different
than default hmac-md5. It should fail with hmac-md5 in that mode, but
should pass if algorithm was not given explicitly.
 2019-11-25 12:03:14 +01:00