mirror of
https://github.com/slackhq/nebula.git
synced 2026-11-15 09:06:52 +01:00
Matt RichardsonandClaude Fable 5.1
0f767ce529
Add support for accessing the previously ssh-only debug commands via `nebula ctl <command>.` - unix socket (named pipe on windows) for communication - sockets scoped to the user + an optional group - in cmd/nebula and cmd/nebula-service, but not nebula.Main Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
43 lines
1.6 KiB
Go
43 lines
1.6 KiB
Go
//go:build !windows
|
|
|
|
package ctl
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/slackhq/nebula/localapi"
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
// TestResolveSocketDiagnosesAnOverlongOverride: the CLI applies the daemon's own rule to
|
|
// the override, so it says what the daemon's log says rather than dialing a path the
|
|
// kernel would truncate and reporting the generic failure. The rule is sun_path's, which
|
|
// a named pipe does not have, so this is a unix test.
|
|
func TestResolveSocketDiagnosesAnOverlongOverride(t *testing.T) {
|
|
cfg := filepath.Join(t.TempDir(), "config.yml")
|
|
long := "/" + strings.Repeat("x", 120)
|
|
require.NoError(t, os.WriteFile(cfg, []byte("local_api:\n control:\n socket: "+long+"\n"), 0600))
|
|
|
|
_, err := resolveSocket("", cfg)
|
|
require.Error(t, err)
|
|
require.ErrorContains(t, err, "too long for this platform")
|
|
assert.ErrorContains(t, err, localapi.CtlSocketKey)
|
|
}
|
|
|
|
// TestResolveSocketRefusesARelativeOverride: the CLI applies the daemon's rule here too,
|
|
// so a relative path in the config is reported as the daemon's log reports it rather
|
|
// than resolved against wherever nebula ctl happened to be run from.
|
|
func TestResolveSocketRefusesARelativeOverride(t *testing.T) {
|
|
cfg := filepath.Join(t.TempDir(), "config.yml")
|
|
require.NoError(t, os.WriteFile(cfg, []byte("local_api:\n control:\n socket: run/ctl.sock\n"), 0600))
|
|
|
|
_, err := resolveSocket("", cfg)
|
|
require.Error(t, err)
|
|
require.ErrorContains(t, err, "must be an absolute path")
|
|
assert.ErrorContains(t, err, localapi.CtlSocketKey)
|
|
}
|