public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixosTests.mysql: add additional test{db,user}2

Browse Source 
Test that other users are not able to access the mysql database, and
unix socket auth actually works.
This commit is contained in:
Florian Klink 2019-12-28 15:30:11 +01:00
parent 7d64f7a534
commit bf7841aae1
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
nixos/tests/mysql.nix
View File

@ -27,6 +27,7 @@ import ./make-test-python.nix ({ pkgs, ...} : {
{ {
users.users.testuser = { }; users.users.testuser = { };
users.users.testuser2 = { };
services.mysql.enable = true; services.mysql.enable = true;
services.mysql.initialScript = pkgs.writeText "mariadb-init.sql" '' services.mysql.initialScript = pkgs.writeText "mariadb-init.sql" ''
ALTER USER root@localhost IDENTIFIED WITH unix_socket; ALTER USER root@localhost IDENTIFIED WITH unix_socket;
@ -34,12 +35,17 @@ import ./make-test-python.nix ({ pkgs, ...} : {
DELETE FROM mysql.user WHERE user = '''; DELETE FROM mysql.user WHERE user = ''';
FLUSH PRIVILEGES; FLUSH PRIVILEGES;
''; '';
services.mysql.ensureDatabases = [ "testdb" ]; services.mysql.ensureDatabases = [ "testdb" "testdb2" ];
services.mysql.ensureUsers = [{ services.mysql.ensureUsers = [{
name = "testuser"; name = "testuser";
ensurePermissions = { ensurePermissions = {
"testdb.*" = "ALL PRIVILEGES"; "testdb.*" = "ALL PRIVILEGES";
}; };
} {
name = "testuser2";
ensurePermissions = {
"testdb2.*" = "ALL PRIVILEGES";
};
}]; }];
services.mysql.package = pkgs.mariadb; services.mysql.package = pkgs.mariadb;
}; };
@ -62,6 +68,14 @@ import ./make-test-python.nix ({ pkgs, ...} : {
mariadb.succeed( mariadb.succeed(
"echo 'use testdb; insert into tests values (42);' | sudo -u testuser mysql -u testuser" "echo 'use testdb; insert into tests values (42);' | sudo -u testuser mysql -u testuser"
) )
# Ensure testuser2 is not able to insert into testdb as mysql testuser2
mariadb.fail(
"echo 'use testdb; insert into tests values (23);' | sudo -u testuser2 mysql -u testuser2"
)
# Ensure testuser2 is not able to authenticate as mysql testuser
mariadb.fail(
"echo 'use testdb; insert into tests values (23);' | sudo -u testuser2 mysql -u testuser"
)
mariadb.succeed( mariadb.succeed(
"echo 'use testdb; select test_id from tests;' | sudo -u testuser mysql -u testuser -N | grep 42" "echo 'use testdb; select test_id from tests;' | sudo -u testuser mysql -u testuser -N | grep 42"
) )