innernet/docker-tests/run-docker-tests.sh

#!/usr/bin/env bash
set -e
shopt -s nocasematch

SELF_DIR="$(dirname "$0")"
cd "$SELF_DIR/.."

if [[ $# -eq 1 ]]; then
    case "$1" in
        kernel)
            INNERNET_ARGS=""
            ;;
        userspace)
            INNERNET_ARGS="--backend userspace"
            ;;
        *)
            echo "invalid backend (must be kernel or userspace)"
            exit 1
    esac
else
    cat >&2 <<-_EOF
    Usage: "${0##*/}" <BACKEND>

    BACKEND: "kernel" or "userspace"
_EOF
    exit
fi

cmd() {
	echo "[#] $*" >&2
	"$@"
}

info() {
  echo -e "\033[0;34m- $@\033[0m" 1>&2
}

tmp_dir=$(mktemp -d -t innernet-tests-XXXXXXXXXX)
cleanup() {
    info "Cleaning up."
    rm -rf "$tmp_dir"
    cmd docker stop $(docker ps -q) || true
    cmd docker network remove innernet
}
trap cleanup EXIT

info "Creating network."
NETWORK=$(cmd docker network create -d bridge --subnet=172.18.0.0/16 innernet)

info "Starting server."
SERVER_CONTAINER=$(cmd docker create -it --rm \
    --network "$NETWORK" \
    --ip 172.18.1.1 \
    --volume /dev/net/tun:/dev/net/tun \
    --env RUST_LOG=debug \
    --env INNERNET_ARGS="$INNERNET_ARGS" \
    --cap-add NET_ADMIN \
    innernet)
cmd docker start -a "$SERVER_CONTAINER" &

info "server started as $SERVER_CONTAINER"
info "Waiting for server to initialize."
cmd sleep 5

info "Starting first peer."
cmd docker cp "$SERVER_CONTAINER:/app/peer1.toml" "$tmp_dir"
PEER1_CONTAINER=$(cmd docker create --rm -it \
    --network "$NETWORK" \
    --ip 172.18.1.2 \
    --volume /dev/net/tun:/dev/net/tun \
    --env INTERFACE=evilcorp \
    --env INNERNET_ARGS="$INNERNET_ARGS" \
    --cap-add NET_ADMIN \
    innernet /app/start-client.sh)
info "peer1 started as $PEER1_CONTAINER"
cmd docker cp "$tmp_dir/peer1.toml" "$PEER1_CONTAINER:/app/invite.toml"
cmd docker start "$PEER1_CONTAINER"
sleep 10

info "Creating a new CIDR from first peer."
cmd docker exec "$PEER1_CONTAINER" innernet \
    add-cidr evilcorp \
    --name "robots" \
    --cidr "10.66.2.0/24" \
    --parent "evilcorp" \
    --yes

info "Creating association between CIDRs."
cmd docker exec "$PEER1_CONTAINER" innernet \
    add-association evilcorp \
        humans \
        robots

info "Creating invitation for second peer from first peer."
cmd docker exec "$PEER1_CONTAINER" innernet \
    add-peer evilcorp \
    --name "peer2" \
    --cidr "robots" \
    --admin false \
    --auto-ip \
    --save-config "/app/peer2.toml" \
    --invite-expires "30s" \
    --yes
cmd docker cp "$PEER1_CONTAINER:/app/peer2.toml" "$tmp_dir"

info "Starting second peer."
PEER2_CONTAINER=$(docker create --rm -it \
    --network "$NETWORK" \
    --ip 172.18.1.3 \
    --volume /dev/net/tun:/dev/net/tun \
    --cap-add NET_ADMIN \
    --env INTERFACE=evilcorp \
    --env INNERNET_ARGS="$INNERNET_ARGS" \
    innernet /app/start-client.sh)
info "peer2 started as $PEER2_CONTAINER"
cmd docker cp "$tmp_dir/peer2.toml" "$PEER2_CONTAINER:/app/invite.toml"
cmd docker start "$PEER2_CONTAINER"
sleep 10

info "Creating short-lived invitation for third peer."
cmd docker exec "$PEER1_CONTAINER" innernet \
    add-peer evilcorp \
    --name "peer3" \
    --cidr "robots" \
    --admin false \
    --ip "10.66.2.100" \
    --save-config "/app/peer3.toml" \
    --invite-expires "1s" \
    --yes

info "waiting 15 seconds to see if the server clears out the IP address."
sleep 11

info "Re-requesting invite after expiration with the same parameters."
cmd docker exec "$PEER1_CONTAINER" innernet \
    add-peer evilcorp \
    --name "peer3" \
    --cidr "robots" \
    --admin false \
    --ip "10.66.2.100" \
    --save-config "/app/peer3_2.toml" \
    --invite-expires "30m" \
    --yes

info "peer2 started as $PEER2_CONTAINER"
cmd docker cp "$tmp_dir/peer2.toml" "$PEER2_CONTAINER:/app/invite.toml"
cmd docker start "$PEER2_CONTAINER"
sleep 10

info "Checking connectivity betweeen peers."
cmd docker exec "$PEER2_CONTAINER" ping -c3 10.66.0.1
cmd docker exec "$PEER2_CONTAINER" ping -c3 10.66.1.1