Add initial support of device posture checks (#1540)

This PR implements the following posture checks:

* Agent minimum version allowed
* OS minimum version allowed
* Geo-location based on connection IP

For the geo-based location, we rely on GeoLite2 databases which are free IP geolocation databases. MaxMind was tested and we provide a script that easily allows to download of all necessary files, see infrastructure_files/download-geolite2.sh.

The OpenAPI spec should extensively cover the life cycle of current version posture checks.

management/server/posture/nb_version_test.go

@@ -0,0 +1,110 @@
+package posture
+
+import (
+	"testing"
+
+	"github.com/netbirdio/netbird/management/server/peer"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestNBVersionCheck_Check(t *testing.T) {
+	tests := []struct {
+		name    string
+		input   peer.Peer
+		check   NBVersionCheck
+		wantErr bool
+		isValid bool
+	}{
+		{
+			name: "Valid Peer NB version",
+			input: peer.Peer{
+				Meta: peer.PeerSystemMeta{
+					WtVersion: "1.0.1",
+				},
+			},
+			check: NBVersionCheck{
+				MinVersion: "1.0.0",
+			},
+			wantErr: false,
+			isValid: true,
+		},
+		{
+			name: "Valid Peer NB version With No Patch Version 1",
+			input: peer.Peer{
+				Meta: peer.PeerSystemMeta{
+					WtVersion: "2.0.9",
+				},
+			},
+			check: NBVersionCheck{
+				MinVersion: "2.0",
+			},
+			wantErr: false,
+			isValid: true,
+		},
+		{
+			name: "Valid Peer NB version With No Patch Version 2",
+			input: peer.Peer{
+				Meta: peer.PeerSystemMeta{
+					WtVersion: "2.0.0",
+				},
+			},
+			check: NBVersionCheck{
+				MinVersion: "2.0",
+			},
+			wantErr: false,
+			isValid: true,
+		},
+		{
+			name: "Older Peer NB version",
+			input: peer.Peer{
+				Meta: peer.PeerSystemMeta{
+					WtVersion: "0.9.9",
+				},
+			},
+			check: NBVersionCheck{
+				MinVersion: "1.0.0",
+			},
+			wantErr: false,
+			isValid: false,
+		},
+		{
+			name: "Older Peer NB version With Patch Version",
+			input: peer.Peer{
+				Meta: peer.PeerSystemMeta{
+					WtVersion: "0.1.0",
+				},
+			},
+			check: NBVersionCheck{
+				MinVersion: "0.2",
+			},
+			wantErr: false,
+			isValid: false,
+		},
+		{
+			name: "Invalid Peer NB version",
+			input: peer.Peer{
+				Meta: peer.PeerSystemMeta{
+					WtVersion: "x.y.z",
+				},
+			},
+			check: NBVersionCheck{
+				MinVersion: "1.0.0",
+			},
+			wantErr: true,
+			isValid: false,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			isValid, err := tt.check.Check(tt.input)
+			if tt.wantErr {
+				assert.Error(t, err)
+			} else {
+				assert.NoError(t, err)
+			}
+			assert.Equal(t, tt.isValid, isValid)
+		})
+	}
+}