aboutsummaryrefslogtreecommitdiff
path: root/tests/shadow/shadow.yaml
Commit message (Collapse)AuthorAgeFilesLines
* CI shadow test: increase transfer sizes to 5 MBJim Newsome2025-08-271-1/+1
| | | | | | | | This is the transfer size used in the tor CI chutney tests, to more-fully exercise SENDMEs / congestion control. We also increase the simulation run time to allow time for the larger transfers.
* shadow.yaml: move arti build dir to a yaml anchorJim Newsome2025-08-261-15/+22
|
* Integration testing: use quicktest buildJim Newsome2025-08-261-15/+15
|
* shadow CI: have arti processes log to file instead of consoleJim Newsome2025-06-171-15/+45
| | | | | | | | | | | | | | This is in preparation to switch arti's console logging to use stderr instead of stdout. The test script currently fails the test if there are non-empty stderr files, since that's where rust panics end up getting recorded. It will also make it easier to see if there is any other non-logging output. Also disable trace-level logging for the tor_proto module. It's unclear exactly when/why this was added, but it's probably overkill other than when debugging.
* shadow CI: enable model-unblocked-syscall-latencyJim Newsome2025-05-051-0/+20
| | | | | | | | | | | Not expected to solve any immediate issue, but helpful for consistency with the chutney-shadow CI, and I think in the past we've hit busy-loop deadlock without it if/when we try increasing the simulation end time. Similarly, we apply the same tuning of "max_unapplied_cpu_latency" as we use in the chutney-shadow simulation, which gets back some of the simulation stability that enabling model-unblocked-syscall-latency otherwise sometimes sacrifices.
* shadow: capture only 40 bytes of packetsSteven Engler2025-04-011-0/+4
| | | | | | | | | | The pcaps are only used to check for leaks by reading the packet source/destination, so we don't need the entire packet. This should make CI artifacts a bit smaller. The fixed-size portion of an IP header is 20 bytes for IPv4 and 40 bytes for IPv6. Shadow doesn't support IPv6, but used the IPv6 header size anyways.
* shadow tests: Provide an arti.extra.toml to arti-extra binaryIan Jackson2024-10-211-0/+9
|
* shadow CI: Add arti hidden service test using a C Tor keystore.Gabriela Moldovan2024-10-081-0/+52
|
* shadow CI: Disable SOCKS/DNS proxying for the arti onion services.Gabriela Moldovan2024-09-171-0/+6
| | | | This tests that #1569 works.
* shadow: add obfs4 arti client + tor bridgeopara2024-08-211-0/+35
|
* shadow test: Add another client for the restricted discovery service.Gabriela Moldovan2024-08-051-0/+36
| | | | | This tests that the client configured in the `authorized_clients` directory of the service is able to connect.
* shadow test: Add a new arti client for connecting to filserver-onion-arti-auth.Gabriela Moldovan2024-08-051-0/+23
| | | | | This will be used with the new `fileserver-onion-arti-auth` test hidden service.
* shadow test: Add fileserver-onion-arti-authGabriela Moldovan2024-08-051-0/+25
| | | | | | | | | This adds a new restricted discovery hidden service (`fpqqmiwzqiv63jczrshh4qcmlxw6gujcai3arobq23wikt7hk7ojadid.onion`) that has 2 authorized clients: * `alice`, the client configured in the `restricted_discovery.static` list in its TOML config * `default`, the client configured in `authorized_clients/default.auth`
* Revert "shadow ci: Increase start_time of the new test."Gabriela Moldovan2024-06-031-2/+2
| | | | | | We don't need this now that #1417 is fixed. This reverts commit a9010f6300c25e4602ecf8017ca176c724ecdfa5.
* shadow ci: Increase start_time of the new test.Gabriela Moldovan2024-06-031-2/+2
| | | | | | | | | | | | | | Without this change, one of the tgen processes doesn't exit as expected: ``` 618990:00:06:50.991981 [4717:shadow-worker] 00:30:00.000000000 [ERROR] [torclient-onion-artiserver:11.0.0.19] [process.rs:1525] [shadow_rs::host::process] process 'torclient-onion-artiserver.tgen.1001' exited with status StoppedByShadow; expected end state was exited: 0 but was running ``` This is because of a stub circuit selection bug that only manifests when the `torclient-onion-artiserver` and `torclient-onion-artiserver-full-vanguards` tests are run at the same time. See #1417 for more details.
* shadow test: Add test for onion svc using full vanguards.Gabriela Moldovan2024-06-031-0/+62
| | | | | | | This adds an onion service that uses full vanguards, and a client that connects to it. Closes #1408
* shadow test: remove workaround for #1170Jim Newsome2023-12-131-9/+0
| | | | | | | Disabling the shadow option --model-unblocked-syscall-latency causes this bug not to surface. Better to remove this workaround for now so that we can revisit again if/when it does rather than continue to mask it.
* shadow test: add tor client connecting to arti hsJim Newsome2023-12-131-0/+13
|
* shadow test: add client for arti hsJim Newsome2023-12-131-0/+32
| | | | | This also adds a workaround - the arti service doesn't appear to register itself (set up intro points) unless first used as a client.
* shadow test: add fileserver-onion-artiJim Newsome2023-12-131-0/+23
|
* shadow ci: use proxy.sock_listen instead of socks_portJim Newsome2023-12-131-5/+5
| | | | socks_port is deprecated
* shadow ci: reformat arti argument lists (no-op)Jim Newsome2023-12-131-5/+33
| | | | | Put one argument per line and use a yaml list instead of string (shadow accepts either here).
* shadow ci: add host articlient-extraJim Newsome2023-12-071-0/+18
| | | | | | | | | | | The arti-extra binary has several experimental features enabled. Currently it is used to test experimental onion service features, but it would be useful also do a test of the arti-extra binary in the same configuration and workload as the arti binary (which has the default featureset). In a follow-up commit, we'll enable the experimental ntor-v3 handshake implementation in the arti-extra binary.
* CI: Add client auth integration test.Gabriela Moldovan2023-07-121-0/+30
|
* articlient-onion: don't filter onion addressesJim Newsome2023-07-031-1/+1
|
* Dedupe arti configs and match TestingTorNetworks HS configJim Newsome2023-07-031-3/+3
|
* shadow test: disable trace-level loggingJim Newsome2023-07-031-2/+0
| | | | | | Some hosts were configured to log at trace level instead of the global default (debug level). This was resulting in quite large shadow log output.
* shadow test: add 2 more relaysJim Newsome2023-07-031-0/+16
| | | | | Without this, the onion client was failing to find a guard. We recently made this change in shadow's "tor minimal" test as well.
* shadow test: add and validate arti onion clientJim Newsome2023-07-031-0/+16
|
* shadow test: add onion serverJim Newsome2023-07-031-0/+14
|
* shadow ci: bump shadowJim Newsome2023-05-221-9/+27
|
* shadow ci: avoid hard coding tgen and tor bin pathsJim Newsome2022-12-191-9/+9
| | | | | As of shadow 2.3, shadow can locate executables from the PATH, letting us avoid hard-coded paths here.
* shadow ci: only do pcap capture for bridge clientJim Newsome2022-12-191-4/+2
|
* add vanila bridge to shadow simtrinity-1686a2022-11-301-0/+25
|
* shadow ci: Set stop time to 30m instead of 27mJim Newsome2022-10-141-4/+1
| | | | | This was a temporary stop-gap to work around a busy loop that seemed to happen before. I am no longer able to reproduce any such problem.
* Create a shadow-based integration testJim Newsome2022-10-051-0/+81
Fixes https://gitlab.torproject.org/tpo/core/arti/-/issues/174