mirror of
https://git.proxmox.com/git/fwupd
synced 2025-08-18 20:40:06 +00:00

sys-usb will use the Qubes OS updates proxy and an in-VM fwupd instance. This allows shedding a large amount of code.
410 lines
16 KiB
Python
Executable File
410 lines
16 KiB
Python
Executable File
#!/usr/bin/python3
|
|
#
|
|
# The Qubes OS Project, http://www.qubes-os.org
|
|
#
|
|
# Copyright (C) 2021 Norbert Kamiński <norbert.kaminski@3mdeb.com>
|
|
#
|
|
# SPDX-License-Identifier: LGPL-2.1+
|
|
#
|
|
|
|
import json
|
|
import unittest
|
|
import os
|
|
import subprocess
|
|
import sys
|
|
import imp
|
|
import io
|
|
import platform
|
|
from packaging.version import Version
|
|
from pathlib import Path
|
|
from .fwupd_logs import UPDATE_INFO, GET_DEVICES, DMI_DECODE
|
|
from .fwupd_logs import GET_DEVICES_NO_UPDATES, GET_DEVICES_NO_VERSION
|
|
from unittest.mock import patch
|
|
|
|
|
|
QUBES_FWUPDMGR_REPO = "./src/qubes_fwupdmgr.py"
|
|
QUBES_FWUPDMGR_BINDIR = "/usr/sbin/qubes-fwupdmgr"
|
|
|
|
if os.path.exists(QUBES_FWUPDMGR_REPO):
|
|
qfwupd = imp.load_source("qubes_fwupdmgr", QUBES_FWUPDMGR_REPO)
|
|
elif os.path.exists(QUBES_FWUPDMGR_BINDIR):
|
|
qfwupd = imp.load_source("qubes_fwupdmgr", QUBES_FWUPDMGR_BINDIR)
|
|
|
|
FWUPD_DOM0_DIR = "/var/cache/qubes-fwupd"
|
|
FWUPD_DOM0_UPDATES_DIR = os.path.join(FWUPD_DOM0_DIR, "updates")
|
|
FWUPD_DOM0_UNTRUSTED_DIR = os.path.join(FWUPD_DOM0_UPDATES_DIR, "untrusted")
|
|
FWUPD_DOM0_METADATA_DIR = os.path.join(FWUPD_DOM0_DIR, "metadata")
|
|
FWUPD_DOM0_METADATA_FILE = os.path.join(FWUPD_DOM0_METADATA_DIR, "firmware.xml.gz")
|
|
FWUPD_DOM0_METADATA_FILE_JCAT = os.path.join(FWUPD_DOM0_METADATA_DIR, "firmware.xml.gz")
|
|
REQUIRED_DEV = "Requires device not connected"
|
|
XL_LIST_LOG = "Name ID Mem VCPUs State Time(s)"
|
|
FWUPDMGR = "/bin/fwupdmgr"
|
|
BIOS_UPDATE_FLAG = os.path.join(FWUPD_DOM0_DIR, "bios_update")
|
|
LVFS_TESTING_DOM0_FLAG = os.path.join(FWUPD_DOM0_DIR, "lvfs_testing")
|
|
CUSTOM_METADATA = "https://fwupd.org/downloads/firmware-3c81bfdc9db5c8a42c09d38091944bc1a05b27b0.xml.gz"
|
|
|
|
|
|
def device_connected_dom0():
|
|
"""Checks if the testing device is connected in dom0"""
|
|
if "qubes" not in platform.release():
|
|
return False
|
|
q = qfwupd.QubesFwupdmgr()
|
|
q._get_dom0_devices()
|
|
return "ColorHug2" in q.dom0_devices_info
|
|
|
|
|
|
def check_whonix_updatevm():
|
|
"""Checks if the sys-whonix is running"""
|
|
if "qubes" not in platform.release():
|
|
return False
|
|
q = qfwupd.QubesFwupdmgr()
|
|
return "sys-whonix" in q.output
|
|
|
|
|
|
class TestQubesFwupdmgr(unittest.TestCase):
|
|
def setUp(self):
|
|
self.q = qfwupd.QubesFwupdmgr()
|
|
self.maxDiff = 2000
|
|
self.captured_output = io.StringIO()
|
|
sys.stdout = self.captured_output
|
|
|
|
@unittest.skipUnless("qubes" in platform.release(), "Requires Qubes OS")
|
|
def test_download_metadata(self):
|
|
self.q.metadata_file = FWUPD_DOM0_METADATA_FILE
|
|
self.q._download_metadata()
|
|
self.assertTrue(
|
|
os.path.exists(FWUPD_DOM0_METADATA_FILE),
|
|
msg="Metadata update file does not exist",
|
|
)
|
|
self.assertTrue(
|
|
os.path.exists(FWUPD_DOM0_METADATA_FILE_JCAT),
|
|
msg="Metadata signature does not exist",
|
|
)
|
|
|
|
@unittest.skipUnless(check_whonix_updatevm(), "Requires sys-whonix")
|
|
def test_download_metadata_whonix(self):
|
|
self.q.metadata_file = FWUPD_DOM0_METADATA_FILE
|
|
self.q._download_metadata(whonix=True)
|
|
self.assertTrue(
|
|
os.path.exists(FWUPD_DOM0_METADATA_FILE),
|
|
msg="Metadata update file does not exist",
|
|
)
|
|
self.assertTrue(
|
|
os.path.exists(FWUPD_DOM0_METADATA_FILE_JCAT),
|
|
msg="Metadata signature does not exist",
|
|
)
|
|
|
|
@unittest.skipUnless("qubes" in platform.release(), "Requires Qubes OS")
|
|
def test_download_custom_metadata(self):
|
|
self.q.metadata_file = CUSTOM_METADATA.replace(
|
|
"https://fwupd.org/downloads", FWUPD_DOM0_METADATA_DIR
|
|
)
|
|
self.q.metadata_file_jcat = self.q.metadata_file + ".jcat"
|
|
self.q._download_metadata(metadata_url=CUSTOM_METADATA)
|
|
self.assertTrue(
|
|
os.path.exists(self.q.metadata_file),
|
|
msg="Metadata update file does not exist",
|
|
)
|
|
self.assertTrue(
|
|
os.path.exists(self.q.metadata_file_jcat),
|
|
msg="Metadata signature does not exist",
|
|
)
|
|
|
|
@unittest.skipUnless("qubes" in platform.release(), "Requires Qubes OS")
|
|
def test_refresh_metadata_dom0(self):
|
|
self.q.refresh_metadata()
|
|
self.assertEqual(
|
|
self.q.output,
|
|
"Successfully refreshed metadata manually\n",
|
|
msg="Metadata refresh failed.",
|
|
)
|
|
|
|
@unittest.skipUnless("qubes" in platform.release(), "Requires Qubes OS")
|
|
def test_refresh_metadata_dom0_custom(self):
|
|
self.q.refresh_metadata(metadata_url=CUSTOM_METADATA)
|
|
self.assertEqual(
|
|
self.q.output,
|
|
"Successfully refreshed metadata manually\n",
|
|
msg="Metadata refresh failed.",
|
|
)
|
|
|
|
@unittest.skipUnless(check_whonix_updatevm(), "Requires sys-whonix")
|
|
def test_refresh_metadata_whonix(self):
|
|
self.q.refresh_metadata(whonix=True)
|
|
self.assertEqual(
|
|
self.q.output,
|
|
"Successfully refreshed metadata manually\n",
|
|
msg="Metadata refresh failed.",
|
|
)
|
|
|
|
@unittest.skipUnless("qubes" in platform.release(), "Requires Qubes OS")
|
|
def test_get_dom0_updates(self):
|
|
self.q._get_dom0_updates()
|
|
self.assertIn(
|
|
"Devices", self.q.dom0_updates_info, msg="Getting available updates failed"
|
|
)
|
|
|
|
def test_parse_updates_info(self):
|
|
self.q._parse_dom0_updates_info(UPDATE_INFO)
|
|
self.assertEqual(
|
|
self.q.dom0_updates_list[0]["Name"], "ColorHug2", msg="Wrong device name"
|
|
)
|
|
self.assertEqual(
|
|
self.q.dom0_updates_list[0]["Version"], "2.0.6", msg="Wrong update version"
|
|
)
|
|
self.assertEqual(
|
|
self.q.dom0_updates_list[0]["Releases"][0]["Url"],
|
|
"https://fwupd.org/downloads/0a29848de74d26348bc5a6e24fc9f03778eddf0e-hughski-colorhug2-2.0.7.cab",
|
|
msg="Wrong update URL",
|
|
)
|
|
self.assertEqual(
|
|
self.q.dom0_updates_list[0]["Releases"][0]["Checksum"],
|
|
"32c4a2c9be787cdf1d757c489d6455bd7bb14053425180b6d331c37e1ccc1cda",
|
|
msg="Wrong checksum",
|
|
)
|
|
|
|
@unittest.skipUnless("qubes" in platform.release(), "Requires Qubes OS")
|
|
def test_download_firmware_updates(self):
|
|
self.q._download_firmware_updates(
|
|
"https://fwupd.org/downloads/e5ad222bdbd3d3d48d8613e67c7e0a0e194f"
|
|
"8cd828e33c554d9f05d933e482c7-hughski-colorhug2-2.0.7.cab",
|
|
"e5ad222bdbd3d3d48d8613e67c7e0a0e194f8cd828e33c554d9f05d933e482c7",
|
|
)
|
|
update_path = os.path.join(
|
|
FWUPD_DOM0_UPDATES_DIR,
|
|
"e5ad222bdbd3d3d48d8613e67c7e0a0e194f8cd828e33c554d9f05d933e482c7"
|
|
"-hughski-colorhug2-2.0.7.cab",
|
|
)
|
|
self.assertTrue(os.path.exists(update_path))
|
|
|
|
@unittest.skipUnless(check_whonix_updatevm(), "Requires sys-whonix")
|
|
def test_download_firmware_updates_whonix(self):
|
|
self.q._download_firmware_updates(
|
|
"https://fwupd.org/downloads/e5ad222bdbd3d3d48d8613e67c7e0a0e194f"
|
|
"8cd828e33c554d9f05d933e482c7-hughski-colorhug2-2.0.7.cab",
|
|
"e5ad222bdbd3d3d48d8613e67c7e0a0e194f8cd828e33c554d9f05d933e482c7",
|
|
whonix=True,
|
|
)
|
|
update_path = os.path.join(
|
|
FWUPD_DOM0_UPDATES_DIR,
|
|
"e5ad222bdbd3d3d48d8613e67c7e0a0e194f8cd828e33c554d9f05d933e482c7"
|
|
"-hughski-colorhug2-2.0.7.cab",
|
|
)
|
|
self.assertTrue(os.path.exists(update_path))
|
|
|
|
def test_user_input_empty_dict(self):
|
|
self.assertEqual(self.q._user_input([]), 2)
|
|
|
|
def test_user_input_n(self):
|
|
user_input = ["sth", "n"]
|
|
with patch("builtins.input", side_effect=user_input):
|
|
self.q._parse_dom0_updates_info(UPDATE_INFO)
|
|
choice = self.q._user_input(self.q.dom0_updates_list)
|
|
self.assertEqual(choice, 2)
|
|
user_input = ["sth", "N"]
|
|
with patch("builtins.input", side_effect=user_input):
|
|
self.q._parse_dom0_updates_info(UPDATE_INFO)
|
|
choice = self.q._user_input(self.q.dom0_updates_list)
|
|
self.assertEqual(choice, 2)
|
|
|
|
def test_user_input_choice(self):
|
|
user_input = ["6", "1"]
|
|
with patch("builtins.input", side_effect=user_input):
|
|
self.q._parse_dom0_updates_info(UPDATE_INFO)
|
|
choice = self.q._user_input(self.q.dom0_updates_list)
|
|
self.assertEqual(choice, 0)
|
|
|
|
def test_parse_parameters(self):
|
|
self.q._parse_dom0_updates_info(UPDATE_INFO)
|
|
self.q._parse_parameters(self.q.dom0_updates_list, 0)
|
|
self.assertEqual(
|
|
self.q.url,
|
|
"https://fwupd.org/downloads/0a29848de74d26348bc5a6e24fc9f03778eddf0e-hughski-colorhug2-2.0.7.cab",
|
|
)
|
|
self.assertEqual(
|
|
self.q.sha,
|
|
"32c4a2c9be787cdf1d757c489d6455bd7bb14053425180b6d331c37e1ccc1cda",
|
|
)
|
|
self.assertEqual(self.q.version, "2.0.7")
|
|
|
|
@unittest.skipUnless("qubes" in platform.release(), "Requires Qubes OS")
|
|
def test_clean_cache_dom0(self):
|
|
self.q.clean_cache()
|
|
self.assertFalse(os.path.exists(FWUPD_DOM0_METADATA_DIR))
|
|
self.assertFalse(os.path.exists(FWUPD_DOM0_UNTRUSTED_DIR))
|
|
|
|
def test_output_crawler(self):
|
|
crawler_output = io.StringIO()
|
|
sys.stdout = crawler_output
|
|
self.q._output_crawler(json.loads(UPDATE_INFO), 0)
|
|
with open("test/logs/get_devices.log", "r") as get_devices:
|
|
self.assertEqual(
|
|
get_devices.read(), crawler_output.getvalue().strip() + "\n"
|
|
)
|
|
sys.stdout = self.captured_output
|
|
|
|
@unittest.skipUnless("qubes" in platform.release(), "Requires Qubes OS")
|
|
def test_get_dom0_devices(self):
|
|
self.q._get_dom0_devices()
|
|
self.assertIsNotNone(self.q.dom0_devices_info)
|
|
|
|
@unittest.skipUnless("qubes" in platform.release(), "Requires Qubes OS")
|
|
def test_get_devices_qubes_dom0(self):
|
|
get_devices_output = io.StringIO()
|
|
sys.stdout = get_devices_output
|
|
self.q.get_devices_qubes()
|
|
self.assertNotEqual(get_devices_output.getvalue().strip(), "")
|
|
sys.stdout = self.captured_output
|
|
|
|
@unittest.skipUnless(device_connected_dom0(), REQUIRED_DEV)
|
|
def test_get_updates_qubes_dom0(self):
|
|
get_updates_output = io.StringIO()
|
|
sys.stdout = get_updates_output
|
|
self.q.get_updates_qubes()
|
|
self.assertNotEqual(get_updates_output.getvalue().strip(), "")
|
|
sys.stdout = self.captured_output
|
|
|
|
def test_help(self):
|
|
help_output = io.StringIO()
|
|
sys.stdout = help_output
|
|
self.q.help()
|
|
with open("test/logs/help.log", "r") as help_log:
|
|
self.assertEqual(help_log.read(), help_output.getvalue().strip() + "\n")
|
|
sys.stdout = self.captured_output
|
|
|
|
@patch(
|
|
"test.test_qubes_fwupdmgr.qfwupd.QubesFwupdmgr._read_dmi",
|
|
return_value=DMI_DECODE,
|
|
)
|
|
def test_verify_dmi(self, output):
|
|
self.q.dmi_version = "P.1.0"
|
|
self.q._verify_dmi("test/logs/", "P1.1")
|
|
|
|
@patch(
|
|
"test.test_qubes_fwupdmgr.qfwupd.QubesFwupdmgr._read_dmi",
|
|
return_value=DMI_DECODE,
|
|
)
|
|
def test_verify_dmi_wrong_vendor(self, output):
|
|
with self.assertRaises(ValueError) as wrong_vendor:
|
|
self.q.dmi_version = "P.1.0"
|
|
self.q._verify_dmi("test/logs/metainfo_name/", "P1.1")
|
|
self.assertIn("Wrong firmware provider.", str(wrong_vendor.exception))
|
|
|
|
@patch(
|
|
"test.test_qubes_fwupdmgr.qfwupd.QubesFwupdmgr._read_dmi",
|
|
return_value=DMI_DECODE,
|
|
)
|
|
def test_verify_dmi_version(self, output):
|
|
self.q.dmi_version = "P1.0"
|
|
with self.assertRaises(ValueError) as downgrade:
|
|
self.q._verify_dmi("test/logs/metainfo_version/", "P0.1")
|
|
self.assertIn("P0.1 < P1.0 Downgrade not allowed", str(downgrade.exception))
|
|
|
|
@unittest.skipUnless(device_connected_dom0(), REQUIRED_DEV)
|
|
def test_downgrade_firmware_dom0(self):
|
|
old_version = None
|
|
self.q._get_dom0_devices()
|
|
downgrades = self.q._parse_downgrades(self.q.dom0_devices_info)
|
|
for number, device in enumerate(downgrades):
|
|
if "Name" not in device:
|
|
continue
|
|
if device["Name"] == "ColorHug2":
|
|
old_version = device["Version"]
|
|
break
|
|
if old_version is None:
|
|
self.fail("Test device not found")
|
|
user_input = [str(number + 1), "1"]
|
|
with patch("builtins.input", side_effect=user_input):
|
|
self.q.downgrade_firmware()
|
|
self.q._get_dom0_devices()
|
|
downgrades = self.q._parse_downgrades(self.q.dom0_devices_info)
|
|
new_version = downgrades[number]["Version"]
|
|
self.assertGreater(Version(old_version), Version(new_version))
|
|
|
|
def test_parse_downgrades(self):
|
|
downgrades = self.q._parse_downgrades(GET_DEVICES)
|
|
self.assertEqual(downgrades[0]["Name"], "ColorHug2")
|
|
self.assertEqual(downgrades[0]["Version"], "2.0.6")
|
|
self.assertEqual(downgrades[0]["Releases"][0]["Version"], "2.0.5")
|
|
self.assertEqual(
|
|
downgrades[0]["Releases"][0]["Url"],
|
|
"https://fwupd.org/downloads/f7dd4ab29fa610438571b8b62b26b0b0e57bb35b-hughski-colorhug2-2.0.5.cab",
|
|
)
|
|
self.assertEqual(
|
|
downgrades[0]["Releases"][0]["Checksum"],
|
|
"8cd379eb2e1467e4fda92c20650306dc7e598b1d421841bbe19d9ed6ea01e3ee",
|
|
)
|
|
|
|
def test_parse_downgrades_no_version(self):
|
|
downgrades = self.q._parse_downgrades(GET_DEVICES_NO_VERSION)
|
|
self.assertEqual(downgrades[0]["Name"], "ColorHug2")
|
|
self.assertEqual(downgrades[0]["Version"], "2.0.6")
|
|
self.assertEqual(downgrades[0]["Releases"][0]["Version"], "2.0.5")
|
|
self.assertEqual(
|
|
downgrades[0]["Releases"][0]["Url"],
|
|
"https://fwupd.org/downloads/f7dd4ab29fa610438571b8b62b26b0b0e57bb35b-hughski-colorhug2-2.0.5.cab",
|
|
)
|
|
self.assertEqual(
|
|
downgrades[0]["Releases"][0]["Checksum"],
|
|
"4ee9dfa38df3b810f739d8a19d13da1b3175fb87",
|
|
)
|
|
|
|
def test_user_input_downgrade_dom0(self):
|
|
user_input = ["1", "6", "sth", "2.2.1", "", " ", "\0", "2"]
|
|
with patch("builtins.input", side_effect=user_input):
|
|
downgrade_list = self.q._parse_downgrades(GET_DEVICES)
|
|
downgrade_dict = {"dom0": downgrade_list}
|
|
key, device_choice, downgrade_choice = self.q._user_input(
|
|
downgrade_dict, downgrade=True
|
|
)
|
|
self.assertEqual(key, "dom0")
|
|
self.assertEqual(device_choice, 0)
|
|
self.assertEqual(downgrade_choice, 1)
|
|
|
|
def test_user_input_downgrade_N(self):
|
|
user_input = ["N"]
|
|
with patch("builtins.input", side_effect=user_input):
|
|
downgrade_list = self.q._parse_downgrades(GET_DEVICES)
|
|
N_choice = self.q._user_input(downgrade_list, downgrade=True)
|
|
self.assertEqual(N_choice, 2)
|
|
|
|
@unittest.skipUnless(device_connected_dom0(), REQUIRED_DEV)
|
|
def test_update_firmware_dom0(self):
|
|
old_version = None
|
|
new_version = None
|
|
self.q._get_dom0_updates()
|
|
self.q._parse_dom0_updates_info(self.q.dom0_updates_info)
|
|
for number, device in enumerate(self.q.dom0_updates_list):
|
|
if "Name" not in device:
|
|
continue
|
|
if device["Name"] == "ColorHug2":
|
|
old_version = device["Version"]
|
|
break
|
|
if old_version is None:
|
|
self.fail("Test device not found")
|
|
user_input = [str(number + 1)]
|
|
with patch("builtins.input", side_effect=user_input):
|
|
self.q.update_firmware()
|
|
self.q._get_dom0_devices()
|
|
dom0_devices_info_dict = json.loads(self.q.dom0_devices_info)
|
|
for device in dom0_devices_info_dict["Devices"]:
|
|
if "Name" not in device:
|
|
continue
|
|
if device["Name"] == "ColorHug2":
|
|
new_version = device["Version"]
|
|
break
|
|
if new_version is None:
|
|
self.fail("Test device not found")
|
|
self.assertLess(Version(old_version), Version(new_version))
|
|
|
|
@unittest.skipUnless("qubes" in platform.release(), "Requires Qubes OS")
|
|
def test_enable_lvfs_testing_dom0(self):
|
|
if os.path.exists(LVFS_TESTING_DOM0_FLAG):
|
|
os.remove(LVFS_TESTING_DOM0_FLAG)
|
|
self.q._enable_lvfs_testing_dom0()
|
|
self.assertTrue(os.path.exists(LVFS_TESTING_DOM0_FLAG))
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|