fix(tests): recreate SSH session in each context to prevent Broken runspace errors

IGLADI · IGLADI · commit 6c184b58678f · 2025-08-12T22:16:42.000+02:00
diff --git a/tests/main-test.ps1 b/tests/main-test.ps1
@@ -42,100 +42,101 @@ function CleanUpContainers {
 [string]$hostname, [string]$username = $server -split ' '
 $username = $username -replace "ansible_user=", ""
 
-$session = New-PSSession -HostName $hostname -UserName $username -SSHTransport
-
 
 #region Pester tests
 Describe "Docker Container Tests" {
     Context "Default Configuration" {
         BeforeAll {
-            # run the main script
+            $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport
             pwsh -File $scriptPath -ConfigPath "$configDir/default.psd1" -InventoryPath $InventoryPath -become $become
         }
+        AfterAll {
+            Remove-PSSession $global:session
+        }
 
         It "Should ensure the pihole container is running correctly" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker ps --filter "name=Pi-DNStack_pihole" --format "{{.Names}}"
             }
             $result | Should -Not -BeNullOrEmpty
         }
 
         It "Should ensure the pihole container is bound to port 80 and 53" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_pihole --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'
             }
             $result | Should -Match "80"
             $result | Should -Match "53"
         }
 
         It "Should ensure the pihole container has the correct mount for /etc/pihole" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_pihole --format '{{range .Mounts}}{{.Source}}{{end}}'
             }
             $result | Should -Match "/etc/pihole"
         }
 
         It "Should ensure the restart policy is set to 'unless-stopped'" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_pihole --format '{{.HostConfig.RestartPolicy.Name}}'
             }
             $result | Should -Match "unless-stopped"
         }
 
         It "Should ensure the container network is set to 'bridge'" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_pihole --format '{{.HostConfig.NetworkMode}}'
             }
             $result | Should -Match "bridge"
         }
 
         It "Should ensure the unbound container is running correctly" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker ps --filter "name=Pi-DNStack_pihole" --format "{{.Names}}"
             }
             $result | Should -Not -BeNullOrEmpty
         }
 
         It "Should ensure the cloudflared container is running correctly" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker ps --filter "name=Pi-DNStack_cloudflared" --format "{{.Names}}"
             }
             $result | Should -Not -BeNullOrEmpty
         }
 
         It "Should ensure the pihole container is resolving correctly" {
-            [string]$server = Invoke-Command -Session $session -ScriptBlock { 
+            [string]$server = Invoke-Command -Session $global:session -ScriptBlock { 
                 docker inspect Pi-DNStack_pihole --format '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}'
             }
-            [string]$result = Invoke-Command -Session $session -ScriptBlock { 
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock { 
                 nslookup google.com $server
             } -ArgumentList $server
             $result | Should -Match "Non-authoritative answer"
         }
 
         It "Should ensure DNSSEC is enabled" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf
             }
             $result | Should -Match "DNSSEC=true"
         }
 
         It "Should ensure the adlists are set correctly" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker exec Pi-DNStack_pihole pihole-FTL sqlite3 /etc/pihole/gravity.db "SELECT * FROM adlist"
             }
             $result | Should -Match "https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"
         }
 
         It "Should ensure interface is set to eth0" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf
             }
             $result | Should -Match "PIHOLE_INTERFACE=eth0"
         }
 
         It "Should ensure pihole listens on local" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf
             }
             $result | Should -Match "DNSMASQ_LISTENING=local"
@@ -144,36 +145,39 @@ Describe "Docker Container Tests" {
 
     Context "Unbound Disabled" {
         BeforeAll {
-            # run the main script
+            $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport
             pwsh -File $scriptPath -ConfigPath "$configDir/unbound_disabled.psd1" -InventoryPath $InventoryPath -become $become
         }
+        AfterAll {
+            Remove-PSSession $global:session
+        }
 
         It "Should ensure the unbound container is not running" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker ps --filter "name=Pi-DNStack_unbound" --format "{{.Names}}" | wc -l
             }
             $result | Should -Be "0"
         }
 
         It "Should ensure the cloudflared container is still running correctly" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker ps --filter "name=Pi-DNStack_cloudflared" --format "{{.Names}}"
             }
             $result | Should -Not -BeNullOrEmpty
         }
 
         It "Should ensure the pihole container is still running correctly" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker ps --filter "name=Pi-DNStack_pihole" --format "{{.Names}}"
             }
             $result | Should -Not -BeNullOrEmpty
         }
 
         It "Should ensure the pihole container is resolving correctly" {
-            [string]$server = Invoke-Command -Session $session -ScriptBlock { 
+            [string]$server = Invoke-Command -Session $global:session -ScriptBlock { 
                 docker inspect Pi-DNStack_pihole --format '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}'
             }
-            [string]$result = Invoke-Command -Session $session -ScriptBlock { 
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock { 
                 nslookup google.com $server
             } -ArgumentList $server
             $result | Should -Match "Non-authoritative answer"
@@ -182,35 +186,39 @@ Describe "Docker Container Tests" {
 
     Context "Cloudflared Disabled" {
         BeforeAll {
-            # run the main script
+            $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport
             pwsh -File $scriptPath -ConfigPath "$configDir/cloudflared_disabled.psd1" -InventoryPath $InventoryPath -become $become
         }
+        AfterAll {
+            Remove-PSSession $global:session
+        }
+
         It "Should ensure the cloudflared container is not running" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker ps --filter "name=Pi-DNStack_cloudflared" --format "{{.Names}}" | wc -l
             }
             $result | Should -Be "0"
         }
 
         It "Should ensure the unbound container is still running correctly" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker ps --filter "name=Pi-DNStack_unbound" --format "{{.Names}}"
             }
             $result | Should -Not -BeNullOrEmpty
         }
 
         It "Should ensure the pihole container is still running correctly" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker ps --filter "name=Pi-DNStack_pihole" --format "{{.Names}}"
             }
             $result | Should -Not -BeNullOrEmpty
         }
 
         It "Should ensure the pihole container is resolving correctly" {
-            [string]$server = Invoke-Command -Session $session -ScriptBlock { 
+            [string]$server = Invoke-Command -Session $global:session -ScriptBlock { 
                 docker inspect Pi-DNStack_pihole --format '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}'
             }
-            [string]$result = Invoke-Command -Session $session -ScriptBlock { 
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock { 
                 nslookup google.com $server
             } -ArgumentList $server
             $result | Should -Match "Non-authoritative answer"
@@ -219,97 +227,103 @@ Describe "Docker Container Tests" {
 
     Context "StackName Changed" {
         BeforeAll {
+            $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport
             # as we change stackname we need to clear old containers to avoid port conflicts
-            CleanUpContainers -session $session "$configDir/cloudflared_disabled.psd1"
+            CleanUpContainers -session $global:session "$configDir/cloudflared_disabled.psd1"
             # run the main script
             pwsh -File $scriptPath -ConfigPath "$configDir/stackName_changed.psd1" -InventoryPath $InventoryPath -become $become
         }
+        AfterAll {
+            CleanUpContainers -session $global:session "$configDir/stackName_changed.psd1"
+            Remove-PSSession $global:session
+        }
+
         It "Should ensure the stack name is set to 'custom_stack'" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker ps | grep "custom_stack"
             }
             $result | Should -Not -BeNullOrEmpty
         }
-
-        # remove the containers after the context
-        AfterAll {
-            CleanUpContainers -session $session "$configDir/stackName_changed.psd1"
-        }
     }
 
     Context "Multiple Changes" {
         BeforeAll {
+            $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport
             # run the main script
             pwsh -File $scriptPath -ConfigPath "$configDir/changes.psd1" -InventoryPath $InventoryPath -become $become
         }
+        AfterAll {
+            Remove-PSSession $global:session
+        }
+
         It "Should ensure the restart policy is set to 'always'" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_pihole --format '{{.HostConfig.RestartPolicy.Name}}'
             }
             $result | Should -Match "always"
         }
 
         It "Should ensure the Pi-hole container is bound to port 8081 and 5356" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_pihole --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'
             }
             $result | Should -Match "8081"
             $result | Should -Match "5356"
         }
 
         It "Should ensure the unbound container is bound to port 5353" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_unbound --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'
             }
             $result | Should -Match "5353"
         }
 
         It "Should ensure the cloudflared container is bound to port 5054" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_cloudflared --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'
             }
             $result | Should -Match "5054"
         }
 
         It "Should ensure the Pi-hole password is changed" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_pihole --format '{{range .Config.Env}}{{println .}}{{end}}'
             }
             $result | Should -Match "FTLCONF_webserver_api_password=secret"
         }
 
         It "Should ensure volume path is changed" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_pihole --format '{{range .Mounts}}{{.Source}}{{end}}'
             }
             $result | Should -Match "/etc/test/pihole"
             $result | Should -Match "/etc/test/dnsmasq.d"
         }
 
         It "Should ensure DNSSEC is disabled" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf
             }
             $result | Should -Match "DNSSEC=false"
         }
 
         It "Should ensure the adlists are set correctly" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker exec Pi-DNStack_pihole pihole-FTL sqlite3 /etc/pihole/gravity.db "SELECT * FROM adlist"
             }
             $result | Should -Match "https://test.com"
             $result | Should -Not -Match "https://v.firebog.net/hosts/static/w3kbl.txt"
         }
 
         It "Should ensure interface is set to eth1" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf
             }
             $result | Should -Match "PIHOLE_INTERFACE=eth1"
         }
 
         It "Should ensure pihole listens on all" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf
             }
             $result | Should -Match "DNSMASQ_LISTENING=all"
@@ -318,45 +332,49 @@ Describe "Docker Container Tests" {
 
     Context "Host Network" {
         BeforeAll {
+            $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport
             # run the main script
             pwsh -File $scriptPath -ConfigPath "$configDir/host_network.psd1" -InventoryPath $InventoryPath -become $become
         }
+        AfterAll {
+            Remove-PSSession $global:session
+        }
 
         It "Should ensure the container network is set to 'host'" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_pihole --format '{{.HostConfig.NetworkMode}}'
             }
             $result | Should -Match "host"
         }
 
         It "Should ensure the pihole container has no ports bound" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_pihole --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'
             }
             $result | Should -BeNullOrEmpty
         }
 
         It "Should ensure the cloudflared container has no ports bound" {
-            [string]$result = Invoke-Command -Session $session -ScriptBlock {
+            [string]$result = Invoke-Command -Session $global:session -ScriptBlock {
                 docker inspect Pi-DNStack_cloudflared --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'
             }
             $result | Should -BeNullOrEmpty
         }
     }
 
     Context "Password not changed" {
+        BeforeAll {
+            $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport
+        }
+        AfterAll {
+            CleanUpContainers -session $global:session "$configDir/password_not_changed.psd1"
+            Remove-PSSession $global:session
+        }
+
         It "Should throw an error if the password is not changed" {
             pwsh -File $scriptPath -ConfigPath "$configDir/password_not_changed.psd1" -InventoryPath $InventoryPath -become $become 2>&1
             $LastExitCode | Should -Not -Be 0
         }
-
-        # remove the containers after the last context
-        AfterAll {
-            CleanUpContainers -session $session "$configDir/password_not_changed.psd1"
-        }
     }
 }
 #endregion
-
-# cleanup
-Remove-PSSession $session

Original file line number	Diff line number	Diff line change
`@@ -42,100 +42,101 @@ function CleanUpContainers {`
`42`	`42`	`[string]$hostname, [string]$username = $server -split ' '`
`43`	`43`	`$username = $username -replace "ansible_user=", ""`
`44`	`44`
`45`		`-$session = New-PSSession -HostName $hostname -UserName $username -SSHTransport`
`46`		`-`
`47`	`45`
`48`	`46`	`#region Pester tests`
`49`	`47`	`Describe "Docker Container Tests" {`
`50`	`48`	`Context "Default Configuration" {`
`51`	`49`	`BeforeAll {`
`52`		`- # run the main script`
	`50`	`+ $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport`
`53`	`51`	`pwsh -File $scriptPath -ConfigPath "$configDir/default.psd1" -InventoryPath $InventoryPath -become $become`
`54`	`52`	`}`
	`53`	`+ AfterAll {`
	`54`	`+ Remove-PSSession $global:session`
	`55`	`+ }`
`55`	`56`
`56`	`57`	`It "Should ensure the pihole container is running correctly" {`
`57`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`58`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`58`	`59`	`docker ps --filter "name=Pi-DNStack_pihole" --format "{{.Names}}"`
`59`	`60`	`}`
`60`	`61`	`$result \| Should -Not -BeNullOrEmpty`
`61`	`62`	`}`
`62`	`63`
`63`	`64`	`It "Should ensure the pihole container is bound to port 80 and 53" {`
`64`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`65`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`65`	`66`	`docker inspect Pi-DNStack_pihole --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'`
`66`	`67`	`}`
`67`	`68`	`$result \| Should -Match "80"`
`68`	`69`	`$result \| Should -Match "53"`
`69`	`70`	`}`
`70`	`71`
`71`	`72`	`It "Should ensure the pihole container has the correct mount for /etc/pihole" {`
`72`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`73`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`73`	`74`	`docker inspect Pi-DNStack_pihole --format '{{range .Mounts}}{{.Source}}{{end}}'`
`74`	`75`	`}`
`75`	`76`	`$result \| Should -Match "/etc/pihole"`
`76`	`77`	`}`
`77`	`78`
`78`	`79`	`It "Should ensure the restart policy is set to 'unless-stopped'" {`
`79`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`80`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`80`	`81`	`docker inspect Pi-DNStack_pihole --format '{{.HostConfig.RestartPolicy.Name}}'`
`81`	`82`	`}`
`82`	`83`	`$result \| Should -Match "unless-stopped"`
`83`	`84`	`}`
`84`	`85`
`85`	`86`	`It "Should ensure the container network is set to 'bridge'" {`
`86`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`87`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`87`	`88`	`docker inspect Pi-DNStack_pihole --format '{{.HostConfig.NetworkMode}}'`
`88`	`89`	`}`
`89`	`90`	`$result \| Should -Match "bridge"`
`90`	`91`	`}`
`91`	`92`
`92`	`93`	`It "Should ensure the unbound container is running correctly" {`
`93`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`94`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`94`	`95`	`docker ps --filter "name=Pi-DNStack_pihole" --format "{{.Names}}"`
`95`	`96`	`}`
`96`	`97`	`$result \| Should -Not -BeNullOrEmpty`
`97`	`98`	`}`
`98`	`99`
`99`	`100`	`It "Should ensure the cloudflared container is running correctly" {`
`100`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`101`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`101`	`102`	`docker ps --filter "name=Pi-DNStack_cloudflared" --format "{{.Names}}"`
`102`	`103`	`}`
`103`	`104`	`$result \| Should -Not -BeNullOrEmpty`
`104`	`105`	`}`
`105`	`106`
`106`	`107`	`It "Should ensure the pihole container is resolving correctly" {`
`107`		`- [string]$server = Invoke-Command -Session $session -ScriptBlock {`
	`108`	`+ [string]$server = Invoke-Command -Session $global:session -ScriptBlock {`
`108`	`109`	`docker inspect Pi-DNStack_pihole --format '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}'`
`109`	`110`	`}`
`110`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`111`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`111`	`112`	`nslookup google.com $server`
`112`	`113`	`} -ArgumentList $server`
`113`	`114`	`$result \| Should -Match "Non-authoritative answer"`
`114`	`115`	`}`
`115`	`116`
`116`	`117`	`It "Should ensure DNSSEC is enabled" {`
`117`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`118`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`118`	`119`	`docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf`
`119`	`120`	`}`
`120`	`121`	`$result \| Should -Match "DNSSEC=true"`
`121`	`122`	`}`
`122`	`123`
`123`	`124`	`It "Should ensure the adlists are set correctly" {`
`124`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`125`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`125`	`126`	`docker exec Pi-DNStack_pihole pihole-FTL sqlite3 /etc/pihole/gravity.db "SELECT * FROM adlist"`
`126`	`127`	`}`
`127`	`128`	`$result \| Should -Match "https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"`
`128`	`129`	`}`
`129`	`130`
`130`	`131`	`It "Should ensure interface is set to eth0" {`
`131`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`132`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`132`	`133`	`docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf`
`133`	`134`	`}`
`134`	`135`	`$result \| Should -Match "PIHOLE_INTERFACE=eth0"`
`135`	`136`	`}`
`136`	`137`
`137`	`138`	`It "Should ensure pihole listens on local" {`
`138`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`139`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`139`	`140`	`docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf`
`140`	`141`	`}`
`141`	`142`	`$result \| Should -Match "DNSMASQ_LISTENING=local"`
`@@ -144,36 +145,39 @@ Describe "Docker Container Tests" {`
`144`	`145`
`145`	`146`	`Context "Unbound Disabled" {`
`146`	`147`	`BeforeAll {`
`147`		`- # run the main script`
	`148`	`+ $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport`
`148`	`149`	`pwsh -File $scriptPath -ConfigPath "$configDir/unbound_disabled.psd1" -InventoryPath $InventoryPath -become $become`
`149`	`150`	`}`
	`151`	`+ AfterAll {`
	`152`	`+ Remove-PSSession $global:session`
	`153`	`+ }`
`150`	`154`
`151`	`155`	`It "Should ensure the unbound container is not running" {`
`152`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`156`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`153`	`157`	`docker ps --filter "name=Pi-DNStack_unbound" --format "{{.Names}}" \| wc -l`
`154`	`158`	`}`
`155`	`159`	`$result \| Should -Be "0"`
`156`	`160`	`}`
`157`	`161`
`158`	`162`	`It "Should ensure the cloudflared container is still running correctly" {`
`159`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`163`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`160`	`164`	`docker ps --filter "name=Pi-DNStack_cloudflared" --format "{{.Names}}"`
`161`	`165`	`}`
`162`	`166`	`$result \| Should -Not -BeNullOrEmpty`
`163`	`167`	`}`
`164`	`168`
`165`	`169`	`It "Should ensure the pihole container is still running correctly" {`
`166`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`170`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`167`	`171`	`docker ps --filter "name=Pi-DNStack_pihole" --format "{{.Names}}"`
`168`	`172`	`}`
`169`	`173`	`$result \| Should -Not -BeNullOrEmpty`
`170`	`174`	`}`
`171`	`175`
`172`	`176`	`It "Should ensure the pihole container is resolving correctly" {`
`173`		`- [string]$server = Invoke-Command -Session $session -ScriptBlock {`
	`177`	`+ [string]$server = Invoke-Command -Session $global:session -ScriptBlock {`
`174`	`178`	`docker inspect Pi-DNStack_pihole --format '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}'`
`175`	`179`	`}`
`176`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`180`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`177`	`181`	`nslookup google.com $server`
`178`	`182`	`} -ArgumentList $server`
`179`	`183`	`$result \| Should -Match "Non-authoritative answer"`
`@@ -182,35 +186,39 @@ Describe "Docker Container Tests" {`
`182`	`186`
`183`	`187`	`Context "Cloudflared Disabled" {`
`184`	`188`	`BeforeAll {`
`185`		`- # run the main script`
	`189`	`+ $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport`
`186`	`190`	`pwsh -File $scriptPath -ConfigPath "$configDir/cloudflared_disabled.psd1" -InventoryPath $InventoryPath -become $become`
`187`	`191`	`}`
	`192`	`+ AfterAll {`
	`193`	`+ Remove-PSSession $global:session`
	`194`	`+ }`
	`195`	`+`
`188`	`196`	`It "Should ensure the cloudflared container is not running" {`
`189`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`197`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`190`	`198`	`docker ps --filter "name=Pi-DNStack_cloudflared" --format "{{.Names}}" \| wc -l`
`191`	`199`	`}`
`192`	`200`	`$result \| Should -Be "0"`
`193`	`201`	`}`
`194`	`202`
`195`	`203`	`It "Should ensure the unbound container is still running correctly" {`
`196`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`204`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`197`	`205`	`docker ps --filter "name=Pi-DNStack_unbound" --format "{{.Names}}"`
`198`	`206`	`}`
`199`	`207`	`$result \| Should -Not -BeNullOrEmpty`
`200`	`208`	`}`
`201`	`209`
`202`	`210`	`It "Should ensure the pihole container is still running correctly" {`
`203`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`211`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`204`	`212`	`docker ps --filter "name=Pi-DNStack_pihole" --format "{{.Names}}"`
`205`	`213`	`}`
`206`	`214`	`$result \| Should -Not -BeNullOrEmpty`
`207`	`215`	`}`
`208`	`216`
`209`	`217`	`It "Should ensure the pihole container is resolving correctly" {`
`210`		`- [string]$server = Invoke-Command -Session $session -ScriptBlock {`
	`218`	`+ [string]$server = Invoke-Command -Session $global:session -ScriptBlock {`
`211`	`219`	`docker inspect Pi-DNStack_pihole --format '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}'`
`212`	`220`	`}`
`213`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`221`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`214`	`222`	`nslookup google.com $server`
`215`	`223`	`} -ArgumentList $server`
`216`	`224`	`$result \| Should -Match "Non-authoritative answer"`
`@@ -219,97 +227,103 @@ Describe "Docker Container Tests" {`
`219`	`227`
`220`	`228`	`Context "StackName Changed" {`
`221`	`229`	`BeforeAll {`
	`230`	`+ $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport`
`222`	`231`	`# as we change stackname we need to clear old containers to avoid port conflicts`
`223`		`- CleanUpContainers -session $session "$configDir/cloudflared_disabled.psd1"`
	`232`	`+ CleanUpContainers -session $global:session "$configDir/cloudflared_disabled.psd1"`
`224`	`233`	`# run the main script`
`225`	`234`	`pwsh -File $scriptPath -ConfigPath "$configDir/stackName_changed.psd1" -InventoryPath $InventoryPath -become $become`
`226`	`235`	`}`
	`236`	`+ AfterAll {`
	`237`	`+ CleanUpContainers -session $global:session "$configDir/stackName_changed.psd1"`
	`238`	`+ Remove-PSSession $global:session`
	`239`	`+ }`
	`240`	`+`
`227`	`241`	`It "Should ensure the stack name is set to 'custom_stack'" {`
`228`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`242`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`229`	`243`	`docker ps \| grep "custom_stack"`
`230`	`244`	`}`
`231`	`245`	`$result \| Should -Not -BeNullOrEmpty`
`232`	`246`	`}`
`233`		`-`
`234`		`- # remove the containers after the context`
`235`		`- AfterAll {`
`236`		`- CleanUpContainers -session $session "$configDir/stackName_changed.psd1"`
`237`		`- }`
`238`	`247`	`}`
`239`	`248`
`240`	`249`	`Context "Multiple Changes" {`
`241`	`250`	`BeforeAll {`
	`251`	`+ $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport`
`242`	`252`	`# run the main script`
`243`	`253`	`pwsh -File $scriptPath -ConfigPath "$configDir/changes.psd1" -InventoryPath $InventoryPath -become $become`
`244`	`254`	`}`
	`255`	`+ AfterAll {`
	`256`	`+ Remove-PSSession $global:session`
	`257`	`+ }`
	`258`	`+`
`245`	`259`	`It "Should ensure the restart policy is set to 'always'" {`
`246`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`260`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`247`	`261`	`docker inspect Pi-DNStack_pihole --format '{{.HostConfig.RestartPolicy.Name}}'`
`248`	`262`	`}`
`249`	`263`	`$result \| Should -Match "always"`
`250`	`264`	`}`
`251`	`265`
`252`	`266`	`It "Should ensure the Pi-hole container is bound to port 8081 and 5356" {`
`253`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`267`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`254`	`268`	`docker inspect Pi-DNStack_pihole --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'`
`255`	`269`	`}`
`256`	`270`	`$result \| Should -Match "8081"`
`257`	`271`	`$result \| Should -Match "5356"`
`258`	`272`	`}`
`259`	`273`
`260`	`274`	`It "Should ensure the unbound container is bound to port 5353" {`
`261`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`275`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`262`	`276`	`docker inspect Pi-DNStack_unbound --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'`
`263`	`277`	`}`
`264`	`278`	`$result \| Should -Match "5353"`
`265`	`279`	`}`
`266`	`280`
`267`	`281`	`It "Should ensure the cloudflared container is bound to port 5054" {`
`268`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`282`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`269`	`283`	`docker inspect Pi-DNStack_cloudflared --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'`
`270`	`284`	`}`
`271`	`285`	`$result \| Should -Match "5054"`
`272`	`286`	`}`
`273`	`287`
`274`	`288`	`It "Should ensure the Pi-hole password is changed" {`
`275`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`289`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`276`	`290`	`docker inspect Pi-DNStack_pihole --format '{{range .Config.Env}}{{println .}}{{end}}'`
`277`	`291`	`}`
`278`	`292`	`$result \| Should -Match "FTLCONF_webserver_api_password=secret"`
`279`	`293`	`}`
`280`	`294`
`281`	`295`	`It "Should ensure volume path is changed" {`
`282`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`296`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`283`	`297`	`docker inspect Pi-DNStack_pihole --format '{{range .Mounts}}{{.Source}}{{end}}'`
`284`	`298`	`}`
`285`	`299`	`$result \| Should -Match "/etc/test/pihole"`
`286`	`300`	`$result \| Should -Match "/etc/test/dnsmasq.d"`
`287`	`301`	`}`
`288`	`302`
`289`	`303`	`It "Should ensure DNSSEC is disabled" {`
`290`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`304`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`291`	`305`	`docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf`
`292`	`306`	`}`
`293`	`307`	`$result \| Should -Match "DNSSEC=false"`
`294`	`308`	`}`
`295`	`309`
`296`	`310`	`It "Should ensure the adlists are set correctly" {`
`297`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`311`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`298`	`312`	`docker exec Pi-DNStack_pihole pihole-FTL sqlite3 /etc/pihole/gravity.db "SELECT * FROM adlist"`
`299`	`313`	`}`
`300`	`314`	`$result \| Should -Match "https://test.com"`
`301`	`315`	`$result \| Should -Not -Match "https://v.firebog.net/hosts/static/w3kbl.txt"`
`302`	`316`	`}`
`303`	`317`
`304`	`318`	`It "Should ensure interface is set to eth1" {`
`305`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`319`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`306`	`320`	`docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf`
`307`	`321`	`}`
`308`	`322`	`$result \| Should -Match "PIHOLE_INTERFACE=eth1"`
`309`	`323`	`}`
`310`	`324`
`311`	`325`	`It "Should ensure pihole listens on all" {`
`312`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`326`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`313`	`327`	`docker exec Pi-DNStack_pihole cat /etc/pihole/setupVars.conf`
`314`	`328`	`}`
`315`	`329`	`$result \| Should -Match "DNSMASQ_LISTENING=all"`
`@@ -318,45 +332,49 @@ Describe "Docker Container Tests" {`
`318`	`332`
`319`	`333`	`Context "Host Network" {`
`320`	`334`	`BeforeAll {`
	`335`	`+ $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport`
`321`	`336`	`# run the main script`
`322`	`337`	`pwsh -File $scriptPath -ConfigPath "$configDir/host_network.psd1" -InventoryPath $InventoryPath -become $become`
`323`	`338`	`}`
	`339`	`+ AfterAll {`
	`340`	`+ Remove-PSSession $global:session`
	`341`	`+ }`
`324`	`342`
`325`	`343`	`It "Should ensure the container network is set to 'host'" {`
`326`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`344`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`327`	`345`	`docker inspect Pi-DNStack_pihole --format '{{.HostConfig.NetworkMode}}'`
`328`	`346`	`}`
`329`	`347`	`$result \| Should -Match "host"`
`330`	`348`	`}`
`331`	`349`
`332`	`350`	`It "Should ensure the pihole container has no ports bound" {`
`333`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`351`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`334`	`352`	`docker inspect Pi-DNStack_pihole --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'`
`335`	`353`	`}`
`336`	`354`	`$result \| Should -BeNullOrEmpty`
`337`	`355`	`}`
`338`	`356`
`339`	`357`	`It "Should ensure the cloudflared container has no ports bound" {`
`340`		`- [string]$result = Invoke-Command -Session $session -ScriptBlock {`
	`358`	`+ [string]$result = Invoke-Command -Session $global:session -ScriptBlock {`
`341`	`359`	`docker inspect Pi-DNStack_cloudflared --format '{{range .HostConfig.PortBindings}}{{.}}{{end}}'`
`342`	`360`	`}`
`343`	`361`	`$result \| Should -BeNullOrEmpty`
`344`	`362`	`}`
`345`	`363`	`}`
`346`	`364`
`347`	`365`	`Context "Password not changed" {`
	`366`	`+ BeforeAll {`
	`367`	`+ $global:session = New-PSSession -HostName $hostname -UserName $username -SSHTransport`
	`368`	`+ }`
	`369`	`+ AfterAll {`
	`370`	`+ CleanUpContainers -session $global:session "$configDir/password_not_changed.psd1"`
	`371`	`+ Remove-PSSession $global:session`
	`372`	`+ }`
	`373`	`+`
`348`	`374`	`It "Should throw an error if the password is not changed" {`
`349`	`375`	`pwsh -File $scriptPath -ConfigPath "$configDir/password_not_changed.psd1" -InventoryPath $InventoryPath -become $become 2>&1`
`350`	`376`	`$LastExitCode \| Should -Not -Be 0`
`351`	`377`	`}`
`352`		`-`
`353`		`- # remove the containers after the last context`
`354`		`- AfterAll {`
`355`		`- CleanUpContainers -session $session "$configDir/password_not_changed.psd1"`
`356`		`- }`
`357`	`378`	`}`
`358`	`379`	`}`
`359`	`380`	`#endregion`
`360`		`-`
`361`		`-# cleanup`
`362`		`-Remove-PSSession $session`