182 lines
9.3 KiB
Go
182 lines
9.3 KiB
Go
package control
|
|
|
|
import (
|
|
"context"
|
|
"crypto/sha256"
|
|
"net"
|
|
"path/filepath"
|
|
"testing"
|
|
"time"
|
|
|
|
rvboxv1 "github.com/rvbox/rvbox/gen/go/rvbox/v1"
|
|
"github.com/rvbox/rvbox/internal/agentproto"
|
|
"github.com/rvbox/rvbox/internal/domain"
|
|
"github.com/rvbox/rvbox/internal/server/store"
|
|
"google.golang.org/grpc"
|
|
"google.golang.org/grpc/codes"
|
|
"google.golang.org/grpc/credentials/insecure"
|
|
"google.golang.org/grpc/status"
|
|
"google.golang.org/grpc/test/bufconn"
|
|
"google.golang.org/protobuf/proto"
|
|
"google.golang.org/protobuf/types/known/durationpb"
|
|
)
|
|
|
|
func TestControlListAndGetViews_HP_CONTROL_01(t *testing.T) {
|
|
service, persistence := newTestService(t)
|
|
defer persistence.Close()
|
|
ctx := context.Background()
|
|
registerControlClient(t, persistence, "win-a", rvboxv1.Platform_PLATFORM_WINDOWS, rvboxv1.ShellType_SHELL_POWERSHELL, 1)
|
|
registerControlClient(t, persistence, "win-b", rvboxv1.Platform_PLATFORM_WINDOWS, rvboxv1.ShellType_SHELL_CMD, 2)
|
|
|
|
first, err := service.ListClients(ctx, &rvboxv1.ListClientsRequest{PageSize: 1})
|
|
if err != nil || len(first.GetClients()) != 1 || first.GetNextPageToken() == "" {
|
|
t.Fatalf("first client page = %#v, %v", first, err)
|
|
}
|
|
second, err := service.ListClients(ctx, &rvboxv1.ListClientsRequest{PageSize: 1, PageToken: first.GetNextPageToken()})
|
|
if err != nil || len(second.GetClients()) != 1 || second.GetClients()[0].GetClientId() != "win-b" {
|
|
t.Fatalf("second client page = %#v, %v", second, err)
|
|
}
|
|
if _, err := service.ListClients(ctx, &rvboxv1.ListClientsRequest{PageSize: 1, PageToken: "bad-token"}); status.Code(err) != codes.InvalidArgument {
|
|
t.Fatalf("bad client cursor code = %v", status.Code(err))
|
|
}
|
|
client, err := service.GetClient(ctx, &rvboxv1.GetClientRequest{ClientId: "win-a"})
|
|
if err != nil || client.GetClient().GetSupportedShells()[0] != rvboxv1.ShellType_SHELL_POWERSHELL {
|
|
t.Fatalf("get client = %#v, %v", client, err)
|
|
}
|
|
|
|
issue := fixedIssue(0xa1)
|
|
queued, err := service.RunCommand(ctx, &rvboxv1.RunCommandRequest{
|
|
TargetClientId: "win-a", RequestId: issue.String(),
|
|
Spec: &rvboxv1.ExecutionSpec{Source: &rvboxv1.ExecutionSpec_CommandText{CommandText: "echo hi"}},
|
|
})
|
|
if err != nil || queued.GetIssueUuid() != issue.String() || queued.GetLifecycle() != rvboxv1.CommandLifecycle_COMMAND_QUEUED {
|
|
t.Fatalf("run response = %#v, %v", queued, err)
|
|
}
|
|
commands, err := service.ListCommands(ctx, &rvboxv1.ListCommandsRequest{ClientId: "win-a", IncludeTerminal: true})
|
|
if err != nil || len(commands.GetCommands()) != 1 || commands.GetCommands()[0].GetSpec().GetShellType() != rvboxv1.ShellType_SHELL_POWERSHELL {
|
|
t.Fatalf("command list = %#v, %v", commands, err)
|
|
}
|
|
got, err := service.GetCommand(ctx, &rvboxv1.GetCommandRequest{ClientId: "win-a", IssueUuid: issue.String()})
|
|
if err != nil || got.GetCommand().GetIssueUuid() != issue.String() {
|
|
t.Fatalf("command get = %#v, %v", got, err)
|
|
}
|
|
if _, err := service.GetCommand(ctx, &rvboxv1.GetCommandRequest{IssueUuid: "019c46f1-1d02-6000-8000-0000000000a1"}); status.Code(err) != codes.InvalidArgument {
|
|
t.Fatalf("non-v7 command ID code = %v", status.Code(err))
|
|
}
|
|
}
|
|
|
|
func TestRunCommandRequestIDIdempotencyAndValidation_BH_CONTROL_02(t *testing.T) {
|
|
service, persistence := newTestService(t)
|
|
defer persistence.Close()
|
|
ctx := context.Background()
|
|
registerControlClient(t, persistence, "win-a", rvboxv1.Platform_PLATFORM_WINDOWS, rvboxv1.ShellType_SHELL_POWERSHELL, 3)
|
|
issue := fixedIssue(0xa2)
|
|
request := &rvboxv1.RunCommandRequest{TargetClientId: "win-a", RequestId: issue.String(), Spec: &rvboxv1.ExecutionSpec{Source: &rvboxv1.ExecutionSpec_CommandText{CommandText: "echo one"}}}
|
|
if _, err := service.RunCommand(ctx, request); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if replay, err := service.RunCommand(ctx, proto.Clone(request).(*rvboxv1.RunCommandRequest)); err != nil || replay.GetIssueUuid() != issue.String() {
|
|
t.Fatalf("exact replay = %#v, %v", replay, err)
|
|
}
|
|
conflict := proto.Clone(request).(*rvboxv1.RunCommandRequest)
|
|
conflict.Spec = &rvboxv1.ExecutionSpec{Source: &rvboxv1.ExecutionSpec_CommandText{CommandText: "echo two"}}
|
|
if _, err := service.RunCommand(ctx, conflict); status.Code(err) != codes.AlreadyExists {
|
|
t.Fatalf("conflicting replay code = %v", status.Code(err))
|
|
}
|
|
badID := proto.Clone(request).(*rvboxv1.RunCommandRequest)
|
|
badID.RequestId = "not-a-uuid"
|
|
if _, err := service.RunCommand(ctx, badID); status.Code(err) != codes.InvalidArgument {
|
|
t.Fatalf("bad request ID code = %v", status.Code(err))
|
|
}
|
|
script := &rvboxv1.RunCommandRequest{TargetClientId: "win-a", RequestId: fixedIssue(0xa3).String(), Spec: &rvboxv1.ExecutionSpec{Source: &rvboxv1.ExecutionSpec_Script{Script: &rvboxv1.ScriptDescriptor{Filename: "x.ps1", SizeBytes: 1, Sha256: sha256.New().Sum(nil)}}}, ScriptContent: []byte("x")}
|
|
if _, err := service.RunCommand(ctx, script); status.Code(err) != codes.Unimplemented {
|
|
t.Fatalf("script admission code = %v", status.Code(err))
|
|
}
|
|
badTTL := proto.Clone(request).(*rvboxv1.RunCommandRequest)
|
|
badTTL.RequestId = fixedIssue(0xa4).String()
|
|
badTTL.QueueTtl = durationpb.New(-time.Second)
|
|
if _, err := service.RunCommand(ctx, badTTL); status.Code(err) != codes.InvalidArgument {
|
|
t.Fatalf("negative TTL code = %v", status.Code(err))
|
|
}
|
|
}
|
|
|
|
func TestCommandPaginationBindsFilters_BH_CONTROL_03(t *testing.T) {
|
|
service, persistence := newTestService(t)
|
|
defer persistence.Close()
|
|
ctx := context.Background()
|
|
registerControlClient(t, persistence, "win-a", rvboxv1.Platform_PLATFORM_WINDOWS, rvboxv1.ShellType_SHELL_CMD, 4)
|
|
for index := byte(0xb0); index < 0xb3; index++ {
|
|
if _, err := service.RunCommand(ctx, &rvboxv1.RunCommandRequest{TargetClientId: "win-a", RequestId: fixedIssue(index).String(), Spec: &rvboxv1.ExecutionSpec{ShellType: rvboxv1.ShellType_SHELL_CMD, Source: &rvboxv1.ExecutionSpec_CommandText{CommandText: "echo"}}}); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
first, err := service.ListCommands(ctx, &rvboxv1.ListCommandsRequest{ClientId: "win-a", PageSize: 1})
|
|
if err != nil || len(first.GetCommands()) != 1 || first.GetNextPageToken() == "" {
|
|
t.Fatalf("first command page = %#v, %v", first, err)
|
|
}
|
|
changedFilter := &rvboxv1.ListCommandsRequest{ClientId: "win-a", IncludeTerminal: true, PageSize: 1, PageToken: first.GetNextPageToken()}
|
|
if _, err := service.ListCommands(ctx, changedFilter); status.Code(err) != codes.InvalidArgument {
|
|
t.Fatalf("changed-filter cursor code = %v", status.Code(err))
|
|
}
|
|
second, err := service.ListCommands(ctx, &rvboxv1.ListCommandsRequest{ClientId: "win-a", PageSize: 1, PageToken: first.GetNextPageToken()})
|
|
if err != nil || len(second.GetCommands()) != 1 || second.GetCommands()[0].GetIssueUuid() == first.GetCommands()[0].GetIssueUuid() {
|
|
t.Fatalf("second command page = %#v, %v", second, err)
|
|
}
|
|
}
|
|
|
|
func TestControlGRPCRoundTrip_HP_CONTROL_06(t *testing.T) {
|
|
service, persistence := newTestService(t)
|
|
defer persistence.Close()
|
|
registerControlClient(t, persistence, "win-a", rvboxv1.Platform_PLATFORM_WINDOWS, rvboxv1.ShellType_SHELL_CMD, 5)
|
|
grpcServer := grpc.NewServer()
|
|
rvboxv1.RegisterControlServer(grpcServer, service)
|
|
listener := bufconn.Listen(1 << 20)
|
|
go func() { _ = grpcServer.Serve(listener) }()
|
|
defer grpcServer.Stop()
|
|
ctx, cancel := context.WithTimeout(context.Background(), time.Second)
|
|
defer cancel()
|
|
connection, err := grpc.DialContext(ctx, "bufnet", grpc.WithContextDialer(func(context.Context, string) (net.Conn, error) { return listener.Dial() }), grpc.WithTransportCredentials(insecure.NewCredentials()), grpc.WithBlock())
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer connection.Close()
|
|
client := rvboxv1.NewControlClient(connection)
|
|
response, err := client.RunCommand(ctx, &rvboxv1.RunCommandRequest{TargetClientId: "win-a", RequestId: fixedIssue(0xa5).String(), Spec: &rvboxv1.ExecutionSpec{ShellType: rvboxv1.ShellType_SHELL_CMD, Source: &rvboxv1.ExecutionSpec_CommandText{CommandText: "echo wire"}}})
|
|
if err != nil || response.GetLifecycle() != rvboxv1.CommandLifecycle_COMMAND_QUEUED {
|
|
t.Fatalf("gRPC run response = %#v, %v", response, err)
|
|
}
|
|
}
|
|
|
|
func newTestService(t *testing.T) (*Service, *store.Store) {
|
|
t.Helper()
|
|
persistence, err := store.Open(context.Background(), store.Options{DataDir: filepath.Join(t.TempDir(), "state"), BusyTimeout: time.Second})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
service, err := NewService(Options{Store: persistence, CursorKey: bytesKey(), Now: func() time.Time { return time.Date(2026, time.September, 6, 12, 0, 0, 0, time.UTC) }, Limits: agentproto.DefaultLimits()})
|
|
if err != nil {
|
|
persistence.Close()
|
|
t.Fatal(err)
|
|
}
|
|
return service, persistence
|
|
}
|
|
|
|
func bytesKey() []byte { return []byte("0123456789abcdef0123456789abcdef") }
|
|
|
|
func registerControlClient(t *testing.T, persistence *store.Store, clientID string, platform rvboxv1.Platform, shell rvboxv1.ShellType, seed byte) {
|
|
t.Helper()
|
|
shells, err := proto.Marshal(&rvboxv1.ClientHello{SupportedShells: []rvboxv1.ShellType{shell}})
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if _, err := persistence.RegisterClientSession(context.Background(), store.ClientRegistration{ClientID: clientID, Platform: uint32(platform), Architecture: "amd64", DaemonVersion: "test", DaemonCWD: `C:\\ProgramData\\RVBox`, SupportedShells: shells, ClientInstanceID: [16]byte{seed}, SessionID: [16]byte{seed + 10}, ConnectedAt: time.Date(2026, time.September, 6, 11, 0, 0, 0, time.UTC)}); err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
}
|
|
|
|
func fixedIssue(last byte) domain.UUID {
|
|
value, _ := domain.ParseUUIDv7("019c46f1-1d02-7000-8000-000000000001")
|
|
value[15] = last
|
|
return value
|
|
}
|