Update networking tests for nftables switch

[chef.git] / test / integration / networking / serverspec / nftables_spec.rb

diff --git a/test/integration/networking/serverspec/nftables_spec.rb b/test/integration/networking/serverspec/nftables_spec.rb
new file mode 100644 (file)
index 0000000..f1f1389
--- /dev/null
+++ b/test/integration/networking/serverspec/nftables_spec.rb
@@ -0,0 +1,20 @@
+require "serverspec"
+
+# Required by serverspec
+set :backend, :exec
+
+describe package("nftables") do
+  it { should be_installed }
+end
+
+describe service("nftables") do
+  it { should be_enabled }
+  it { should be_running }
+end
+
+describe file("/etc/nftables.conf") do
+  it { should be_file }
+  its(:content) { should match(/echo-request.*accept/) }
+  its(:content) { should match(/http.*accept/) }
+  its(:content) { should match(/https.*accept/) }
+end