import os
import pathlib
import unittest
from unittest import mock

from .fixtures import (
    cephadm_fs,
    import_cephadm,
    mock_podman,
    with_cephadm_ctx,
    FunkyPatcher,
    funkypatch,
)


_cephadm = import_cephadm()


def _common_patches(funkypatch):
    mocks = {}
    _call = funkypatch.patch('cephadmlib.container_types.call')
    _call.return_value = ('', '', 0)
    mocks['call'] = _call
    _call_throws = funkypatch.patch('cephadmlib.container_types.call_throws')
    _call_throws.return_value = ('', '', 0)
    mocks['call_throws'] = _call_throws
    _firewalld = funkypatch.patch('cephadm.Firewalld')
    _firewalld().external_ports.get.return_value = []
    mocks['Firewalld'] = _firewalld
    _extract_uid_gid = funkypatch.patch('cephadm.extract_uid_gid', force=True)
    _extract_uid_gid.return_value = (8765, 8765)
    mocks['extract_uid_gid'] = _extract_uid_gid
    _install_sysctl = funkypatch.patch('cephadm.install_sysctl')
    mocks['install_sysctl'] = _install_sysctl
    return mocks


def test_deploy_nfs_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'nfs.fun'
        ctx.image = 'quay.io/ceph/ceph:latest'
        ctx.reconfig = False
        ctx.config_blobs = {
            'pool': 'foo',
            'files': {
                'ganesha.conf': 'FAKE',
                'idmap.conf': 'FAKE',
            },
            'config': 'BALONEY',
            'keyring': 'BUNKUS',
        }
        _cephadm._common_deploy(ctx)

    with open(f'/var/lib/ceph/{fsid}/nfs.fun/unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith('quay.io/ceph/ceph:latest -F -L STDERR')
    assert '-e TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES' not in runfile_lines[-1]
    assert '--pids-limit' in runfile_lines[-1]
    assert '-e CEPH_CONF=' in runfile_lines[-1]
    assert f'-v /var/lib/ceph/{fsid}/nfs.fun/etc/ganesha:/etc/ganesha:z' in runfile_lines[-1]
    _firewalld().open_ports.assert_called_with([2049])
    with open(f'/var/lib/ceph/{fsid}/nfs.fun/config') as f:
        assert f.read() == 'BALONEY'
    with open(f'/var/lib/ceph/{fsid}/nfs.fun/keyring') as f:
        assert f.read() == 'BUNKUS'
    with open(f'/var/lib/ceph/{fsid}/nfs.fun/etc/ganesha/ganesha.conf') as f:
        assert f.read() == 'FAKE'


def test_deploy_snmp_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'snmp-gateway.sunmop'
        ctx.image = 'quay.io/aaabbb/snmp:latest'
        ctx.reconfig = False
        ctx.config_blobs = {
            'destination': '192.168.100.10:8899',
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
        }
        _cephadm._common_deploy(ctx)

    with open(f'/var/lib/ceph/{fsid}/snmp-gateway.sunmop/unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith(
        'quay.io/aaabbb/snmp:latest --web.listen-address=:9464 --snmp.destination=192.168.100.10:8899 --snmp.version=V2c --log.level=info --snmp.trap-description-template=/etc/snmp_notifier/description-template.tpl'
    )
    assert '--pids-limit' not in runfile_lines[-1]
    assert f'--env-file=/var/lib/ceph/{fsid}/snmp-gateway.sunmop/snmp-gateway.conf' in runfile_lines[-1]
    _firewalld().open_ports.assert_not_called()
    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/snmp-gateway.sunmop')
    assert basedir.is_dir()
    assert not (basedir / 'config').exists()
    assert not (basedir / 'keyring').exists()


def test_deploy_keepalived_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    _install_sysctl = mocks['install_sysctl']
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'keepalived.uiop'
        ctx.image = 'quay.io/eeranimated/keepalived:latest'
        ctx.reconfig = False
        ctx.config_blobs = {
            'destination': '192.168.100.10:8899',
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
            'files': {
                'keepalived.conf': 'neversayneveragain',
            },
        }
        _cephadm._common_deploy(ctx)

    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/keepalived.uiop')
    assert basedir.is_dir()
    with open(basedir / 'unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith('quay.io/eeranimated/keepalived:latest')
    assert '-e KEEPALIVED_AUTOCONF=false' in runfile_lines[-1]
    assert '-e KEEPALIVED_DEBUG=false' in runfile_lines[-1]
    assert '--cap-add=NET_ADMIN' in runfile_lines[-1]
    assert '--cap-add=NET_RAW' in runfile_lines[-1]
    assert f'-v {basedir}/keepalived.conf:/etc/keepalived/keepalived.conf' in runfile_lines[-1]
    _firewalld().open_ports.assert_not_called()
    assert not (basedir / 'config').exists()
    assert not (basedir / 'keyring').exists()
    with open(basedir / 'keepalived.conf') as f:
        assert f.read() == 'neversayneveragain'
    with open(basedir / 'keepalived.conf') as f:
        assert f.read() == 'neversayneveragain'
        si = os.fstat(f.fileno())
        assert (si.st_uid, si.st_gid) == (8765, 8765)
    assert (basedir / 'keepalived').is_dir()
    si = (basedir / 'keepalived').stat()
    assert (si.st_uid, si.st_gid) == (8765, 8765)
    assert _install_sysctl.call_count == 1
    assert len(_install_sysctl.call_args[0][-1].get_sysctl_settings()) > 1


def test_deploy_haproxy_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    _install_sysctl = mocks['install_sysctl']
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'haproxy.yyz'
        ctx.image = 'quay.io/lfeuwbo/haproxy:latest'
        ctx.reconfig = False
        ctx.config_blobs = {
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
            'files': {
                'haproxy.cfg': 'bifrost',
            },
        }
        _cephadm._common_deploy(ctx)

    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/haproxy.yyz')
    assert basedir.is_dir()
    with open(basedir / 'unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith(
        'quay.io/lfeuwbo/haproxy:latest haproxy -f /var/lib/haproxy/haproxy.cfg'
    )
    assert '--pids-limit' not in runfile_lines[-1]
    assert '--user=root' in runfile_lines[-1]
    assert f'-v {basedir}/haproxy:/var/lib/haproxy' in runfile_lines[-1]
    _firewalld().open_ports.assert_not_called()
    assert not (basedir / 'config').exists()
    assert not (basedir / 'keyring').exists()
    assert (basedir / 'haproxy').is_dir()
    si = (basedir / 'haproxy').stat()
    assert (si.st_uid, si.st_gid) == (8765, 8765)
    with open(basedir / 'haproxy/haproxy.cfg') as f:
        assert f.read() == 'bifrost'
        si = os.fstat(f.fileno())
        assert (si.st_uid, si.st_gid) == (8765, 8765)
    assert _install_sysctl.call_count == 1
    assert len(_install_sysctl.call_args[0][-1].get_sysctl_settings()) > 1


def test_deploy_iscsi_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'iscsi.wuzzy'
        ctx.image = 'quay.io/ayeaye/iscsi:latest'
        ctx.reconfig = False
        ctx.config_blobs = {
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
            'files': {
                'iscsi-gateway.cfg': 'portal',
            },
        }
        _cephadm._common_deploy(ctx)

    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/iscsi.wuzzy')
    assert basedir.is_dir()
    with open(basedir / 'unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith('quay.io/ayeaye/iscsi:latest')
    assert '-e TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES' not in runfile_lines[-1]
    assert '--pids-limit' in runfile_lines[-1]
    assert '--privileged' in runfile_lines[-1]
    assert f'-v {basedir}/iscsi-gateway.cfg:/etc/ceph/iscsi-gateway.cfg:z' in runfile_lines[-1]
    assert '--mount type=bind,source=/lib/modules,destination=/lib/modules' in runfile_lines[-1]
    _firewalld().open_ports.assert_not_called()
    with open(basedir / 'config') as f:
        assert f.read() == 'XXXXXXX'
    with open(basedir / 'keyring') as f:
        assert f.read() == 'YYYYYY'
    assert (basedir / 'configfs').is_dir()
    si = (basedir / 'configfs').stat()
    assert (si.st_uid, si.st_gid) == (8765, 8765)
    with open(basedir / 'iscsi-gateway.cfg') as f:
        assert f.read() == 'portal'
        si = os.fstat(f.fileno())
        assert (si.st_uid, si.st_gid) == (8765, 8765)


def test_deploy_nvmeof_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'nvmeof.andu'
        ctx.image = 'quay.io/ownf/nmve:latest'
        ctx.reconfig = False
        ctx.config_blobs = {
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
            'files': {
                'ceph-nvmeof.conf': 'icantbeliveitsnotiscsi',
            },
        }
        _cephadm._common_deploy(ctx)

    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/nvmeof.andu')
    assert basedir.is_dir()
    with open(basedir / 'unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith('quay.io/ownf/nmve:latest')
    assert '-e TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES' not in runfile_lines[-1]
    assert '--pids-limit' in runfile_lines[-1]
    assert '--ulimit memlock=-1:-1' in runfile_lines[-1]
    assert '--cap-add=SYS_ADMIN' in runfile_lines[-1]
    assert '--cap-add=CAP_SYS_NICE' in runfile_lines[-1]
    assert f'-v {basedir}/ceph-nvmeof.conf:/src/ceph-nvmeof.conf:z' in runfile_lines[-1]
    assert '--mount type=bind,source=/lib/modules,destination=/lib/modules' in runfile_lines[-1]
    _firewalld().open_ports.assert_not_called()
    with open(basedir / 'config') as f:
        assert f.read() == 'XXXXXXX'
    with open(basedir / 'keyring') as f:
        assert f.read() == 'YYYYYY'
    assert (basedir / 'configfs').is_dir()
    si = (basedir / 'configfs').stat()
    assert (si.st_uid, si.st_gid) == (167, 167)
    with open(basedir / 'ceph-nvmeof.conf') as f:
        assert f.read() == 'icantbeliveitsnotiscsi'
        si = os.fstat(f.fileno())
        assert (si.st_uid, si.st_gid) == (167, 167)


def test_deploy_a_monitoring_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    _get_ip_addresses = funkypatch.patch('cephadmlib.net_utils.get_ip_addresses')
    _get_ip_addresses.return_value = (['10.10.10.10'], [])
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'prometheus.fire'
        ctx.image = 'quay.io/titans/prometheus:latest'
        ctx.reconfig = False
        ctx.config_blobs = {
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
            'files': {
                'prometheus.yml': 'bettercallherc',
            },
            'ip_to_bind_to': '1.2.3.4'
        }
        _cephadm._common_deploy(ctx)

    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/prometheus.fire')
    assert basedir.is_dir()
    with open(basedir / 'unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith(
        'quay.io/titans/prometheus:latest --config.file=/etc/prometheus/prometheus.yml --storage.tsdb.path=/prometheus --web.listen-address=1.2.3.4:9095 --storage.tsdb.retention.time=15d --storage.tsdb.retention.size=0 --web.external-url=http://10.10.10.10:9095'
    )
    assert '--user 8765' in runfile_lines[-1]
    assert f'-v /var/lib/ceph/{fsid}/prometheus.fire/etc/prometheus:/etc/prometheus:Z' in runfile_lines[-1]
    _firewalld().open_ports.assert_not_called()
    assert not (basedir / 'config').exists()
    assert not (basedir / 'keyring').exists()
    with open(basedir / 'etc/prometheus/prometheus.yml') as f:
        assert f.read() == 'bettercallherc'
        si = os.fstat(f.fileno())
        assert (si.st_uid, si.st_gid) == (8765, 8765)


def test_deploy_a_tracing_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'elasticsearch.band'
        ctx.image = 'quay.io/rubber/elasticsearch:latest'
        ctx.reconfig = False
        ctx.config_blobs = {
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
            'files': {
                'prometheus.yml': 'bettercallherc',
            },
        }
        _cephadm._common_deploy(ctx)

    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/elasticsearch.band')
    assert basedir.is_dir()
    with open(basedir / 'unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert '-e discovery.type=single-node' in runfile_lines[-1]
    assert runfile_lines[-1].endswith('quay.io/rubber/elasticsearch:latest')
    _firewalld().open_ports.assert_not_called()
    assert not (basedir / 'config').exists()
    assert not (basedir / 'keyring').exists()


def test_deploy_ceph_mgr_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    _make_run_dir = funkypatch.patch('cephadmlib.file_utils.make_run_dir')
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'mgr.foo'
        ctx.image = 'quay.io/ceph/ceph:latest'
        ctx.reconfig = False
        ctx.allow_ptrace = False
        ctx.osd_fsid = '00000000-0000-0000-0000-000000000000'
        ctx.config_blobs = {
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
        }
        _cephadm._common_deploy(ctx)

    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/mgr.foo')
    assert basedir.is_dir()
    with open(basedir / 'unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith(
        'quay.io/ceph/ceph:latest -n mgr.foo -f --setuser ceph --setgroup ceph --default-log-to-file=false --default-log-to-journald=true --default-log-to-stderr=false'
    )
    assert '-e TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES' in runfile_lines[-1]
    assert '--pids-limit' in runfile_lines[-1]
    assert '--entrypoint /usr/bin/ceph-mgr' in runfile_lines[-1]
    assert f'-v /var/lib/ceph/{fsid}/mgr.foo:/var/lib/ceph/mgr/ceph-foo:z' in runfile_lines[-1]
    assert f'-v /var/log/ceph/{fsid}:/var/log/ceph:z' in runfile_lines[-1]
    _firewalld().open_ports.assert_not_called()
    with open(basedir / 'config') as f:
        assert f.read() == 'XXXXXXX'
    with open(basedir / 'keyring') as f:
        assert f.read() == 'YYYYYY'
    assert _make_run_dir.call_count == 1
    assert _make_run_dir.call_args[0][1] == 8765
    assert _make_run_dir.call_args[0][2] == 8765


def test_deploy_ceph_osd_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    _make_run_dir = funkypatch.patch('cephadmlib.file_utils.make_run_dir')
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'osd.quux'
        ctx.image = 'quay.io/ceph/ceph:latest'
        ctx.reconfig = False
        ctx.allow_ptrace = False
        ctx.osd_fsid = '00000000-0000-0000-0000-000000000000'
        ctx.config_blobs = {
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
        }
        _cephadm._common_deploy(ctx)

    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/osd.quux')
    assert basedir.is_dir()
    with open(basedir / 'unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith(
        'quay.io/ceph/ceph:latest -n osd.quux -f --setuser ceph --setgroup ceph --default-log-to-file=false --default-log-to-journald=true --default-log-to-stderr=false'
    )
    assert '-e TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES' in runfile_lines[-1]
    assert '--privileged' in runfile_lines[-1]
    assert '--pids-limit' in runfile_lines[-1]
    assert '--entrypoint /usr/bin/ceph-osd' in runfile_lines[-1]
    assert f'-v /var/lib/ceph/{fsid}/osd.quux:/var/lib/ceph/osd/ceph-quux:z' in runfile_lines[-1]
    assert f'-v /var/log/ceph/{fsid}:/var/log/ceph:z' in runfile_lines[-1]
    assert '-v /dev:/dev' in runfile_lines[-1]
    _firewalld().open_ports.assert_not_called()
    with open(basedir / 'config') as f:
        assert f.read() == 'XXXXXXX'
    with open(basedir / 'keyring') as f:
        assert f.read() == 'YYYYYY'
    assert _make_run_dir.call_count == 1
    assert _make_run_dir.call_args[0][1] == 8765
    assert _make_run_dir.call_args[0][2] == 8765


def test_deploy_ceph_exporter_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    _get_ip_addresses = funkypatch.patch('cephadmlib.net_utils.get_ip_addresses')
    _get_ip_addresses.return_value = (['10.10.10.10'], [])
    _make_run_dir = funkypatch.patch('cephadmlib.file_utils.make_run_dir')
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'ceph-exporter.zaq'
        ctx.image = 'quay.io/ceph/ceph:latest'
        ctx.reconfig = False
        ctx.allow_ptrace = False
        ctx.osd_fsid = '00000000-0000-0000-0000-000000000000'
        ctx.config_blobs = {
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
            'prio-limit': 12,
        }

        # ceph-exporter is weird and special. it requires the "sock dir"
        # to already exist. that dir defaults to /var/run/ceph
        vrc = pathlib.Path('/var/run/ceph')
        (vrc / fsid).mkdir(parents=True)

        _cephadm._common_deploy(ctx)

    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/ceph-exporter.zaq')
    assert basedir.is_dir()
    with open(basedir / 'unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith(
        'quay.io/ceph/ceph:latest -n client.ceph-exporter.zaq -f --sock-dir=/var/run/ceph/ --addrs=0.0.0.0 --port=9926 --prio-limit=12 --stats-period=5'
    )
    assert '--entrypoint /usr/bin/ceph-exporter' in runfile_lines[-1]
    assert '-e TCMALLOC_MAX_TOTAL_THREAD_CACHE_BYTES' in runfile_lines[-1]
    assert '--pids-limit' in runfile_lines[-1]
    _firewalld().open_ports.assert_not_called()
    with open(basedir / 'config') as f:
        assert f.read() == 'XXXXXXX'
    with open(basedir / 'keyring') as f:
        assert f.read() == 'YYYYYY'


def test_deploy_and_rm_iscsi(cephadm_fs, funkypatch):
    # Test that the deploy and remove paths for iscsi (which has sidecar container)
    # create and remove the correct unit files.
    funkypatch.patch('shutil.rmtree')  # fakefs + shutil.rmtree breaks on py3.12
    mocks = _common_patches(funkypatch)
    _firewalld = mocks['Firewalld']
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'iscsi.wuzzy'
        ctx.image = 'quay.io/ayeaye/iscsi:latest'
        ctx.reconfig = False
        ctx.config_blobs = {
            'config': 'XXXXXXX',
            'keyring': 'YYYYYY',
            'files': {
                'iscsi-gateway.cfg': 'portal',
            },
        }
        _cephadm._common_deploy(ctx)

    unit_dir = pathlib.Path('/etc/systemd/system')
    assert unit_dir.is_dir()
    assert (unit_dir / f'ceph-{fsid}@.service').exists()
    drop_in = unit_dir / f'ceph-{fsid}@iscsi.wuzzy.service.d/99-cephadm.conf'
    assert drop_in.parent.is_dir()
    assert drop_in.exists()
    assert 'tcmu' in drop_in.read_text()
    tcmu_sidecar = unit_dir / f'ceph-{fsid}-sidecar@iscsi.wuzzy:tcmu.service'
    assert tcmu_sidecar.exists()
    assert 'sidecar-tcmu.run' in tcmu_sidecar.read_text()

    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'iscsi.wuzzy'
        ctx.image = 'quay.io/ayeaye/iscsi:latest'
        _cephadm.command_rm_daemon(ctx)

    assert not drop_in.exists()
    assert not drop_in.parent.exists()
    assert not tcmu_sidecar.exists()


def test_deploy_smb_container(cephadm_fs, funkypatch):
    mocks = _common_patches(funkypatch)
    fsid = 'b01dbeef-701d-9abe-0000-e1e5a47004a7'
    with with_cephadm_ctx([]) as ctx:
        ctx.container_engine = mock_podman()
        ctx.fsid = fsid
        ctx.name = 'smb.b01s'
        ctx.image = 'quay.io/essembee/samba-server:latest'
        ctx.reconfig = False
        ctx.config_blobs = {
            'cluster_id': 'smb1',
            'config_uri': 'http://localhost:9876/smb.json',
            'config': 'SAMPLE',
            'keyring': 'SOMETHING',
        }
        _cephadm._common_deploy(ctx)

    basedir = pathlib.Path(f'/var/lib/ceph/{fsid}/smb.b01s')
    assert basedir.is_dir()
    with open(basedir / 'unit.run') as f:
        runfile_lines = f.read().splitlines()
    assert 'podman' in runfile_lines[-1]
    assert runfile_lines[-1].endswith('quay.io/essembee/samba-server:latest run smbd')
    assert f'-v {basedir}/etc-samba-container:/etc/samba/container:z' in runfile_lines[-1]
    assert f'-v {basedir}/lib-samba:/var/lib/samba:z' in runfile_lines[-1]
    assert '-e SAMBA_CONTAINER_ID=smb1' in runfile_lines[-1]
    assert '-e \'SAMBACC_CONFIG=["http://localhost:9876/smb.json"]\'' in runfile_lines[-1]
    assert '--publish' in runfile_lines[-1]