a1cb6e5a88
1. Add another wait_for_unit("pdns-recursor")
(this is needed when DNSSEC is disabled)
2. Make everything IPv6
94 lines
2.6 KiB
Nix
94 lines
2.6 KiB
Nix
import ./make-test-python.nix ({ lib, pkgs, ... }:
|
|
let
|
|
fakeReply = pkgs.writeText "namecoin-reply.json" ''
|
|
{ "error": null,
|
|
"id": 1,
|
|
"result": {
|
|
"address": "T31q8ucJ4dI1xzhxQ5QispfECld5c7Xw",
|
|
"expired": false,
|
|
"expires_in": 2248,
|
|
"height": 438155,
|
|
"name": "d/test",
|
|
"txid": "db61c0b2540ba0c1a2c8cc92af703a37002e7566ecea4dbf8727c7191421edfb",
|
|
"value": "{\"ip\": \"1.2.3.4\", \"email\": \"root@test.bit\",\"info\": \"Fake record\"}",
|
|
"vout": 0
|
|
}
|
|
}
|
|
'';
|
|
|
|
# Disabled because DNSSEC does not currently validate,
|
|
# see https://github.com/namecoin/ncdns/issues/127
|
|
dnssec = false;
|
|
|
|
in
|
|
|
|
{
|
|
name = "ncdns";
|
|
meta = with pkgs.lib.maintainers; {
|
|
maintainers = [ rnhmjoj ];
|
|
};
|
|
|
|
nodes.server = { ... }: {
|
|
networking.nameservers = [ "::1" ];
|
|
|
|
services.namecoind.rpc = {
|
|
address = "::1";
|
|
user = "namecoin";
|
|
password = "secret";
|
|
port = 8332;
|
|
};
|
|
|
|
# Fake namecoin RPC server because we can't
|
|
# run a full node in a test.
|
|
systemd.services.namecoind = {
|
|
wantedBy = [ "multi-user.target" ];
|
|
script = ''
|
|
while true; do
|
|
echo -e "HTTP/1.1 200 OK\n\n $(<${fakeReply})\n" \
|
|
| ${pkgs.netcat}/bin/nc -N -l ::1 8332
|
|
done
|
|
'';
|
|
};
|
|
|
|
services.ncdns = {
|
|
enable = true;
|
|
dnssec.enable = dnssec;
|
|
identity.hostname = "example.com";
|
|
identity.hostmaster = "root@example.com";
|
|
identity.address = "1.0.0.1";
|
|
};
|
|
|
|
services.pdns-recursor.enable = true;
|
|
services.pdns-recursor.resolveNamecoin = true;
|
|
|
|
environment.systemPackages = [ pkgs.dnsutils ];
|
|
};
|
|
|
|
testScript =
|
|
(lib.optionalString dnssec ''
|
|
with subtest("DNSSEC keys have been generated"):
|
|
server.wait_for_unit("ncdns")
|
|
server.wait_for_file("/var/lib/ncdns/bit.key")
|
|
server.wait_for_file("/var/lib/ncdns/bit-zone.key")
|
|
|
|
with subtest("DNSKEY bit record is present"):
|
|
server.wait_for_unit("pdns-recursor")
|
|
server.wait_for_open_port("53")
|
|
server.succeed("host -t DNSKEY bit")
|
|
'') +
|
|
''
|
|
with subtest("can resolve a .bit name"):
|
|
server.wait_for_unit("namecoind")
|
|
server.wait_for_unit("ncdns")
|
|
server.wait_for_open_port("8332")
|
|
assert "1.2.3.4" in server.succeed("dig @localhost -p 5333 test.bit")
|
|
|
|
with subtest("SOA record has identity information"):
|
|
assert "example.com" in server.succeed("dig SOA @localhost -p 5333 bit")
|
|
|
|
with subtest("bit. zone forwarding works"):
|
|
server.wait_for_unit("pdns-recursor")
|
|
assert "1.2.3.4" in server.succeed("host test.bit")
|
|
'';
|
|
})
|