nixos/tests/osquery: init
This commit is contained in:
parent
da65d1dd20
commit
8dff9f64ec
|
@ -577,6 +577,7 @@ in {
|
||||||
openvscode-server = handleTest ./openvscode-server.nix {};
|
openvscode-server = handleTest ./openvscode-server.nix {};
|
||||||
orangefs = handleTest ./orangefs.nix {};
|
orangefs = handleTest ./orangefs.nix {};
|
||||||
os-prober = handleTestOn ["x86_64-linux"] ./os-prober.nix {};
|
os-prober = handleTestOn ["x86_64-linux"] ./os-prober.nix {};
|
||||||
|
osquery = handleTestOn ["x86_64-linux"] ./osquery.nix {};
|
||||||
osrm-backend = handleTest ./osrm-backend.nix {};
|
osrm-backend = handleTest ./osrm-backend.nix {};
|
||||||
overlayfs = handleTest ./overlayfs.nix {};
|
overlayfs = handleTest ./overlayfs.nix {};
|
||||||
pacemaker = handleTest ./pacemaker.nix {};
|
pacemaker = handleTest ./pacemaker.nix {};
|
||||||
|
|
56
nixos/tests/osquery.nix
Normal file
56
nixos/tests/osquery.nix
Normal file
|
@ -0,0 +1,56 @@
|
||||||
|
import ./make-test-python.nix ({ lib, pkgs, ... }:
|
||||||
|
|
||||||
|
with lib;
|
||||||
|
|
||||||
|
let
|
||||||
|
config_refresh = "10";
|
||||||
|
nullvalue = "NULL";
|
||||||
|
utc = false;
|
||||||
|
in
|
||||||
|
{
|
||||||
|
name = "osquery";
|
||||||
|
meta = with maintainers; {
|
||||||
|
maintainers = [ znewman01 lewo ];
|
||||||
|
};
|
||||||
|
|
||||||
|
nodes.machine = { config, pkgs, ... }: {
|
||||||
|
services.osquery = {
|
||||||
|
enable = true;
|
||||||
|
|
||||||
|
settings.options = { inherit nullvalue utc; };
|
||||||
|
flags = {
|
||||||
|
inherit config_refresh;
|
||||||
|
nullvalue = "IGNORED";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
testScript = { nodes, ... }:
|
||||||
|
let
|
||||||
|
cfg = nodes.machine.services.osquery;
|
||||||
|
in
|
||||||
|
''
|
||||||
|
machine.start()
|
||||||
|
machine.wait_for_unit("osqueryd.service")
|
||||||
|
|
||||||
|
# Stop the osqueryd service so that we can use osqueryi to check information stored in the database.
|
||||||
|
machine.wait_until_succeeds("systemctl stop osqueryd.service")
|
||||||
|
|
||||||
|
# osqueryd was able to query information about the host.
|
||||||
|
machine.succeed("echo 'SELECT address FROM etc_hosts LIMIT 1;' | osqueryi | tee /dev/console | grep -q '127.0.0.1'")
|
||||||
|
|
||||||
|
# osquery binaries respect configuration from the Nix config option.
|
||||||
|
machine.succeed("echo 'SELECT value FROM osquery_flags WHERE name = \"utc\";' | osqueryi | tee /dev/console | grep -q ${boolToString utc}")
|
||||||
|
|
||||||
|
# osquery binaries respect configuration from the Nix flags option.
|
||||||
|
machine.succeed("echo 'SELECT value FROM osquery_flags WHERE name = \"config_refresh\";' | osqueryi | tee /dev/console | grep -q ${config_refresh}")
|
||||||
|
|
||||||
|
# Demonstrate that osquery binaries prefer configuration plugin options over CLI flags.
|
||||||
|
# https://osquery.readthedocs.io/en/latest/deployment/configuration/#options.
|
||||||
|
machine.succeed("echo 'SELECT value FROM osquery_flags WHERE name = \"nullvalue\";' | osqueryi | tee /dev/console | grep -q ${nullvalue}")
|
||||||
|
|
||||||
|
# Module creates directories for default database_path and pidfile flag values.
|
||||||
|
machine.succeed("test -d $(dirname ${cfg.flags.database_path})")
|
||||||
|
machine.succeed("test -d $(dirname ${cfg.flags.pidfile})")
|
||||||
|
'';
|
||||||
|
})
|
Loading…
Reference in a new issue