mirror of
https://github.com/fail2ban/fail2ban.git
synced 2026-03-11 08:55:31 +00:00
59bf5013c0
-- cache dnsToIp, ipToName to prevent long wait during retrieving of ip/name for wrong dns or lazy dns-system; -- instead of simple "sleep" used conditional wait "wait_for", that internal increases sleep interval up to sleeptime; -- ticket / banmanager / failmanager modules are performance optimized; -- api of filter (log files), jail, etc. rewritten and extended for performance purposes; - performance of test cases optimized: -- added option "--fast" to decrease wait intervals, avoid passive waiting, and skip few very slow test cases; - code review after partially cherry pick of branch 'ban-time-incr' (see gh-716) -- ticket module prepared to easy merge with newest version of 'ban-time-incr', now additionally holds banTime, banCount and json-data; -- executeCmd partially moved from action to new module utils, etc. -- python 2.6 compatibility; - testExecuteTimeoutWithNastyChildren: test case repaired - wait for pid file inside bash, kill tree in any case (gh-1155); - testSocket: test case repaired - wait for server thread starts a socket (listener)
135 lines
4.1 KiB
Python
Executable file
135 lines
4.1 KiB
Python
Executable file
#!/usr/bin/python
|
|
# emacs: -*- mode: python; py-indent-offset: 4; indent-tabs-mode: t -*-
|
|
# vi: set ft=python sts=4 ts=4 sw=4 noet :
|
|
"""Script to run Fail2Ban tests battery
|
|
"""
|
|
|
|
# This file is part of Fail2Ban.
|
|
#
|
|
# Fail2Ban is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# Fail2Ban is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with Fail2Ban; if not, write to the Free Software
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
__author__ = "Cyril Jaquier"
|
|
__copyright__ = "Copyright (c) 2004 Cyril Jaquier, 2012- Yaroslav Halchenko"
|
|
__license__ = "GPL"
|
|
|
|
import logging
|
|
import os
|
|
import sys
|
|
import time
|
|
import unittest
|
|
|
|
# Check if local fail2ban module exists, and use if it exists by
|
|
# modifying the path. This is such that tests can be used in dev
|
|
# environment.
|
|
if os.path.exists("fail2ban/__init__.py"):
|
|
sys.path.insert(0, ".")
|
|
from fail2ban.version import version
|
|
|
|
from fail2ban.tests.utils import gatherTests
|
|
from fail2ban.helpers import FormatterWithTraceBack, getLogger
|
|
from fail2ban.server.mytime import MyTime
|
|
|
|
from optparse import OptionParser, Option
|
|
|
|
def get_opt_parser():
|
|
# use module docstring for help output
|
|
p = OptionParser(
|
|
usage="%s [OPTIONS] [regexps]\n" % sys.argv[0] + __doc__,
|
|
version="%prog " + version)
|
|
|
|
p.add_options([
|
|
Option('-l', "--log-level", type="choice",
|
|
dest="log_level",
|
|
choices=('heavydebug', 'debug', 'info', 'notice', 'warning', 'error', 'critical'),
|
|
default=None,
|
|
help="Log level for the logger to use during running tests"),
|
|
Option('-n', "--no-network", action="store_true",
|
|
dest="no_network",
|
|
help="Do not run tests that require the network"),
|
|
Option('-f', "--fast", action="store_true",
|
|
dest="fast",
|
|
help="Try to increase speed of the tests, decreasing of wait intervals, memory database"),
|
|
Option("-t", "--log-traceback", action='store_true',
|
|
help="Enrich log-messages with compressed tracebacks"),
|
|
Option("--full-traceback", action='store_true',
|
|
help="Either to make the tracebacks full, not compressed (as by default)"),
|
|
|
|
])
|
|
|
|
return p
|
|
|
|
parser = get_opt_parser()
|
|
(opts, regexps) = parser.parse_args()
|
|
|
|
#
|
|
# Logging
|
|
#
|
|
logSys = getLogger("fail2ban")
|
|
|
|
# Numerical level of verbosity corresponding to a log "level"
|
|
verbosity = {'heavydebug': 4,
|
|
'debug': 3,
|
|
'info': 2,
|
|
'notice': 2,
|
|
'warning': 1,
|
|
'error': 1,
|
|
'critical': 0,
|
|
None: 1}[opts.log_level]
|
|
|
|
if opts.log_level is not None: # pragma: no cover
|
|
# so we had explicit settings
|
|
logSys.setLevel(getattr(logging, opts.log_level.upper()))
|
|
else: # pragma: no cover
|
|
# suppress the logging but it would leave unittests' progress dots
|
|
# ticking, unless like with '-l critical' which would be silent
|
|
# unless error occurs
|
|
logSys.setLevel(getattr(logging, 'CRITICAL'))
|
|
|
|
# Add the default logging handler
|
|
stdout = logging.StreamHandler(sys.stdout)
|
|
|
|
fmt = ' %(message)s'
|
|
|
|
if opts.log_traceback:
|
|
Formatter = FormatterWithTraceBack
|
|
fmt = (opts.full_traceback and ' %(tb)s' or ' %(tbc)s') + fmt
|
|
else:
|
|
Formatter = logging.Formatter
|
|
|
|
# Custom log format for the verbose tests runs
|
|
if verbosity > 1: # pragma: no cover
|
|
stdout.setFormatter(Formatter(' %(asctime)-15s %(thread)s' + fmt))
|
|
else: # pragma: no cover
|
|
# just prefix with the space
|
|
stdout.setFormatter(Formatter(fmt))
|
|
logSys.addHandler(stdout)
|
|
|
|
#
|
|
# Let know the version
|
|
#
|
|
if not opts.log_level or opts.log_level != 'critical': # pragma: no cover
|
|
print("Fail2ban %s test suite. Python %s. Please wait..." \
|
|
% (version, str(sys.version).replace('\n', '')))
|
|
|
|
tests = gatherTests(regexps, opts)
|
|
#
|
|
# Run the tests
|
|
#
|
|
testRunner = unittest.TextTestRunner(verbosity=verbosity)
|
|
|
|
tests_results = testRunner.run(tests)
|
|
|
|
if not tests_results.wasSuccessful(): # pragma: no cover
|
|
sys.exit(1)
|