mirror of
https://github.com/slackhq/nebula.git
synced 2025-11-12 12:43:57 +01:00
55858c64cc
Test that basic inbound / outbound firewall rules work during the smoke test. This change sets an inbound firewall rule on host3, and a new host4 with outbound firewall rules. It also tests that conntrack allows packets once the connection has been established.
40 lines
1.1 KiB
Bash
Executable File
40 lines
1.1 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
set -e -x
|
|
|
|
rm -rf ./build
|
|
mkdir ./build
|
|
|
|
(
|
|
cd build
|
|
|
|
cp ../../../../nebula .
|
|
cp ../../../../nebula-cert .
|
|
|
|
HOST="lighthouse1" \
|
|
AM_LIGHTHOUSE=true \
|
|
../genconfig.sh >lighthouse1.yml
|
|
|
|
HOST="host2" \
|
|
LIGHTHOUSES="192.168.100.1 172.17.0.2:4242" \
|
|
../genconfig.sh >host2.yml
|
|
|
|
HOST="host3" \
|
|
LIGHTHOUSES="192.168.100.1 172.17.0.2:4242" \
|
|
INBOUND='[{"port": "any", "proto": "icmp", "group": "lighthouse"}]' \
|
|
../genconfig.sh >host3.yml
|
|
|
|
HOST="host4" \
|
|
LIGHTHOUSES="192.168.100.1 172.17.0.2:4242" \
|
|
OUTBOUND='[{"port": "any", "proto": "icmp", "group": "lighthouse"}]' \
|
|
../genconfig.sh >host4.yml
|
|
|
|
./nebula-cert ca -name "Smoke Test"
|
|
./nebula-cert sign -name "lighthouse1" -groups "lighthouse,lighthouse1" -ip "192.168.100.1/24"
|
|
./nebula-cert sign -name "host2" -groups "host,host2" -ip "192.168.100.2/24"
|
|
./nebula-cert sign -name "host3" -groups "host,host3" -ip "192.168.100.3/24"
|
|
./nebula-cert sign -name "host4" -groups "host,host4" -ip "192.168.100.4/24"
|
|
)
|
|
|
|
docker build -t nebula:smoke .
|