unbound_spec.rb

# frozen_string_literal: true

require 'spec_helper_acceptance'
if fact('osfamily') == 'FreeBSD'
  apply_manifest("package{'dns/bind-tools': ensure => 'present'}")
else
  if fact('osfamily') == 'RedHat'
    apply_manifest("package{'bind-utils': ensure => 'present'}")
  else
    apply_manifest("package{'dnsutils': ensure => 'present'}")
  end

  shell('sysctl net.ipv6.conf.all.disable_ipv6=0')
end
describe 'unbound class' do
  describe 'running puppet code' do
    it 'work with no errors' do
      pp = "class {'unbound': }"
      apply_manifest(pp, catch_failures: true)
      apply_manifest(pp, catch_failures: true)
      expect(apply_manifest(pp, catch_failures: true).exit_code).to eq 0
    end

    if fact('osfamily') == 'Archlinux'
      describe command('systemctl restart unbound') do
        its(:exit_status) { is_expected.to eq 0 }
      end
    else
      describe command('service unbound restart') do
        its(:exit_status) { is_expected.to eq 0 }
      end
    end

    describe service('unbound') do
      it { is_expected.to be_running }
    end

    describe port(53) do
      it { is_expected.to be_listening }
    end

    describe command('dig +dnssec . soa @localhost') do
      its(:stdout) { is_expected.to match %r{\.\s+\d+\s+IN\s+SOA\s+a\.root-servers\.net\.\snstld\.verisign-grs\.com\.\s\d+\s1800\s900\s604800\s86400} }
      its(:stdout) { is_expected.to match %r{\.\s+\d+\s+IN\s+RRSIG\s+SOA} }
      its(:stdout) { is_expected.to match %r{flags: qr rd ra ad;} }
    end

    describe command('dig +dnssec SOA servfail.nl @localhost') do
      its(:stdout) { is_expected.to match %r{status: SERVFAIL} }
    end

    describe command('dig +dnssec +cd SOA servfail.nl @localhost') do
      its(:stdout) { is_expected.to match %r{status: NOERROR} }
    end
  end
end