xref: /qemu/tests/qemu-iotests/207 (revision 79854b95) 
1#!/usr/bin/env python3
2# group: rw
3#
4# Test ssh image creation
5#
6# Copyright (C) 2018 Red Hat, Inc.
7#
8# Creator/Owner: Kevin Wolf <kwolf@redhat.com>
9#
10# This program is free software; you can redistribute it and/or modify
11# it under the terms of the GNU General Public License as published by
12# the Free Software Foundation; either version 2 of the License, or
13# (at your option) any later version.
14#
15# This program is distributed in the hope that it will be useful,
16# but WITHOUT ANY WARRANTY; without even the implied warranty of
17# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18# GNU General Public License for more details.
19#
20# You should have received a copy of the GNU General Public License
21# along with this program.  If not, see <http://www.gnu.org/licenses/>.
22#
23
24import iotests
25import subprocess
26import re
27
28iotests.script_initialize(
29    supported_fmts=['raw'],
30    supported_protocols=['ssh'],
31)
32
33def filter_hash(qmsg):
34    def _filter(key, value):
35        if key == 'hash' and re.match('[0-9a-f]+', value):
36            return 'HASH'
37        return value
38    return iotests.filter_qmp(qmsg, _filter)
39
40def blockdev_create(vm, options):
41    vm.blockdev_create(options, filters=[iotests.filter_qmp_testfiles, filter_hash])
42
43with iotests.FilePath('t.img') as disk_path, \
44     iotests.VM() as vm:
45
46    remote_path = iotests.remote_filename(disk_path)
47
48    #
49    # Successful image creation (defaults)
50    #
51    iotests.log("=== Successful image creation (defaults) ===")
52    iotests.log("")
53
54    vm.launch()
55    blockdev_create(vm, { 'driver': 'ssh',
56                          'location': {
57                              'path': disk_path,
58                              'server': {
59                                  'host': '127.0.0.1',
60                                  'port': '22'
61                              }
62                          },
63                          'size': 4194304 })
64    vm.shutdown()
65
66    iotests.img_info_log(remote_path)
67    iotests.log("")
68    iotests.img_info_log(disk_path)
69
70    #
71    # Test host-key-check options
72    #
73    iotests.log("=== Test host-key-check options ===")
74    iotests.log("")
75
76    iotests.log("--- no host key checking --")
77    iotests.log("")
78
79    vm.launch()
80    blockdev_create(vm, { 'driver': 'ssh',
81                          'location': {
82                              'path': disk_path,
83                              'server': {
84                                  'host': '127.0.0.1',
85                                  'port': '22'
86                              },
87                              'host-key-check': {
88                                  'mode': 'none'
89                              }
90                          },
91                          'size': 8388608 })
92    vm.shutdown()
93
94    iotests.img_info_log(remote_path)
95
96    iotests.log("--- known_hosts key checking --")
97    iotests.log("")
98
99    vm.launch()
100    blockdev_create(vm, { 'driver': 'ssh',
101                          'location': {
102                              'path': disk_path,
103                              'server': {
104                                  'host': '127.0.0.1',
105                                  'port': '22'
106                              },
107                              'host-key-check': {
108                                  'mode': 'known_hosts'
109                              }
110                          },
111                          'size': 4194304 })
112    vm.shutdown()
113
114    iotests.img_info_log(remote_path)
115
116    keys = subprocess.check_output(
117        'ssh-keyscan 127.0.0.1 2>/dev/null | grep -v "\\^#" | ' +
118        'cut -d" " -f3',
119        shell=True).rstrip().decode('ascii').split('\n')
120
121    # Mappings of base64 representations to digests
122    md5_keys = {}
123    sha1_keys = {}
124    sha256_keys = {}
125
126    for key in keys:
127        md5_keys[key] = subprocess.check_output(
128            'echo %s | base64 -d | md5sum -b | cut -d" " -f1' % key,
129            shell=True).rstrip().decode('ascii')
130
131        sha1_keys[key] = subprocess.check_output(
132            'echo %s | base64 -d | sha1sum -b | cut -d" " -f1' % key,
133            shell=True).rstrip().decode('ascii')
134
135        sha256_keys[key] = subprocess.check_output(
136            'echo %s | base64 -d | sha256sum -b | cut -d" " -f1' % key,
137            shell=True).rstrip().decode('ascii')
138
139    vm.launch()
140
141    # Find correct key first
142    matching_key = None
143    for key in keys:
144        result = vm.qmp('blockdev-add',
145                        driver='ssh', node_name='node0', path=disk_path,
146                        server={
147                             'host': '127.0.0.1',
148                             'port': '22',
149                        }, host_key_check={
150                             'mode': 'hash',
151                             'type': 'md5',
152                             'hash': md5_keys[key],
153                        })
154
155        if 'error' not in result:
156            vm.qmp('blockdev-del', node_name='node0')
157            matching_key = key
158            break
159
160    if matching_key is None:
161        vm.shutdown()
162        iotests.notrun('Did not find a key that fits 127.0.0.1')
163
164    iotests.log("--- explicit md5 key checking --")
165    iotests.log("")
166
167    blockdev_create(vm, { 'driver': 'ssh',
168                          'location': {
169                              'path': disk_path,
170                              'server': {
171                                  'host': '127.0.0.1',
172                                  'port': '22'
173                              },
174                              'host-key-check': {
175                                  'mode': 'hash',
176                                  'type': 'md5',
177                                  'hash': 'wrong',
178                              }
179                          },
180                          'size': 2097152 })
181
182    blockdev_create(vm, { 'driver': 'ssh',
183                          'location': {
184                              'path': disk_path,
185                              'server': {
186                                  'host': '127.0.0.1',
187                                  'port': '22'
188                              },
189                              'host-key-check': {
190                                  'mode': 'hash',
191                                  'type': 'md5',
192                                  'hash': md5_keys[matching_key],
193                              }
194                          },
195                          'size': 8388608 })
196    vm.shutdown()
197
198    iotests.img_info_log(remote_path)
199
200    iotests.log("--- explicit sha1 key checking --")
201    iotests.log("")
202
203    vm.launch()
204    blockdev_create(vm, { 'driver': 'ssh',
205                          'location': {
206                              'path': disk_path,
207                              'server': {
208                                  'host': '127.0.0.1',
209                                  'port': '22'
210                              },
211                              'host-key-check': {
212                                  'mode': 'hash',
213                                  'type': 'sha1',
214                                  'hash': 'wrong',
215                              }
216                          },
217                          'size': 2097152 })
218    blockdev_create(vm, { 'driver': 'ssh',
219                          'location': {
220                              'path': disk_path,
221                              'server': {
222                                  'host': '127.0.0.1',
223                                  'port': '22'
224                              },
225                              'host-key-check': {
226                                  'mode': 'hash',
227                                  'type': 'sha1',
228                                  'hash': sha1_keys[matching_key],
229                              }
230                          },
231                          'size': 4194304 })
232    vm.shutdown()
233
234    iotests.img_info_log(remote_path)
235
236    iotests.log("--- explicit sha256 key checking --")
237    iotests.log("")
238
239    vm.launch()
240    blockdev_create(vm, { 'driver': 'ssh',
241                          'location': {
242                              'path': disk_path,
243                              'server': {
244                                  'host': '127.0.0.1',
245                                  'port': '22'
246                              },
247                              'host-key-check': {
248                                  'mode': 'hash',
249                                  'type': 'sha256',
250                                  'hash': 'wrong',
251                              }
252                          },
253                          'size': 2097152 })
254    blockdev_create(vm, { 'driver': 'ssh',
255                          'location': {
256                              'path': disk_path,
257                              'server': {
258                                  'host': '127.0.0.1',
259                                  'port': '22'
260                              },
261                              'host-key-check': {
262                                  'mode': 'hash',
263                                  'type': 'sha256',
264                                  'hash': sha256_keys[matching_key],
265                              }
266                          },
267                          'size': 4194304 })
268    vm.shutdown()
269
270    iotests.img_info_log(remote_path)
271
272    #
273    # Invalid path and user
274    #
275    iotests.log("=== Invalid path and user ===")
276    iotests.log("")
277
278    vm.launch()
279    blockdev_create(vm, { 'driver': 'ssh',
280                          'location': {
281                              'path': '/this/is/not/an/existing/path',
282                              'server': {
283                                  'host': '127.0.0.1',
284                                  'port': '22'
285                              },
286                              'host-key-check': {
287                                  'mode': 'none'
288                              }
289                          },
290                          'size': 4194304 })
291    blockdev_create(vm, { 'driver': 'ssh',
292                          'location': {
293                              'path': disk_path,
294                              'user': 'invalid user',
295                              'server': {
296                                  'host': '127.0.0.1',
297                                  'port': '22'
298                              },
299                              'host-key-check': {
300                                  'mode': 'none'
301                              }
302                          },
303                          'size': 4194304 })
304    vm.shutdown()
305