testing: Migrated ha/active-passive scenario to vici

This commit is contained in:
Andreas Steffen
2021-03-30 18:57:49 +02:00
parent 737f7fce51
commit 5c22e94f0f
18 changed files with 154 additions and 115 deletions
+12 -6
View File
@@ -1,3 +1,7 @@
alice::sed -i s/Restart=on-abnormal/Restart=no/ /lib/systemd/system/strongswan.service
alice::systemctl daemon-reload
moon::sed -i s/Restart=on-abnormal/Restart=no/ /lib/systemd/system/strongswan.service
moon::systemctl daemon-reload
moon::ip addr add 192.168.0.5/24 dev eth0
moon::ip addr add 10.1.0.5/16 dev eth1
alice::ifup eth1
@@ -9,13 +13,15 @@ moon::iptables-restore < /etc/iptables.rules
alice::iptables-restore < /etc/iptables.rules
carol::iptables-restore < /etc/iptables.rules
dave::iptables-restore < /etc/iptables.rules
moon::ipsec start
alice::ipsec start
moon::cd /etc/swanctl; rm rsa/moonKey.pem x509/moonCert.pem
alice::cd /etc/swanctl; rm rsa/aliceKey.pem x509/aliceCert.pem
moon::systemctl start strongswan
alice::systemctl start strongswan
moon::sleep 2
alice::echo "+1" > /var/run/charon.ha
carol::ipsec start
dave::ipsec start
carol::systemctl start strongswan
dave::systemctl start strongswan
carol::expect-connection home
dave::expect-connection home
carol::ipsec up home
dave::ipsec up home
carol::swanctl --initiate --child home
dave::swanctl --initiate --child home