diff --git a/test/fmf/tests/onboarding/run-onboarding.sh b/test/fmf/tests/onboarding/run-onboarding.sh index 94e9066db..bf92ab743 100755 --- a/test/fmf/tests/onboarding/run-onboarding.sh +++ b/test/fmf/tests/onboarding/run-onboarding.sh @@ -17,6 +17,8 @@ DATABASES="${MANUFACTURER_DATABASE} ${OWNER_DATABASE} ${RENDEZVOUS_DATABASE}" OV_STORE_DRIVER="${OV_STORE_DRIVER:-Directory}" +SERVICE_INFO_DIR="/var/lib/fdo/service-info/files" + DATABASE_DRIVER="None" [ "${OV_STORE_DRIVER}" != "Postgres" ] || DATABASE_DRIVER="postgresql" [ "${OV_STORE_DRIVER}" != "Sqlite" ] || DATABASE_DRIVER="sqlite" @@ -41,6 +43,56 @@ generate_fdo_certificates() { done } +generate_serviceinfo_files() { + mkdir -p ${SERVICE_INFO_DIR}/etc/{sudoers.d,pki/ca-trust/source/anchors} + cat > "${SERVICE_INFO_DIR}/etc/hosts" < "${SERVICE_INFO_DIR}/etc/sudoers.d/edge" < "${SERVICE_INFO_DIR}/etc/pki/ca-trust/source/anchors/isrg-root-x2-cross-signed.crt" < /etc/command-testfile1 + - command: bash + args: + - -c + - echo command-testfile1-content2 >> /etc/command-testfile1 + - command: mkdir + args: + - -p + - /etc/commands + - command: mv + args: + - /etc/command-testfile1 + - /etc/commands/ + - command: bash + args: + - -c + - echo command-testfile2-content1 > /etc/commands/command-testfile2 + - command: bash + args: + - -c + - echo command-testfile2-content2 >> /etc/commands/command-testfile2 + - command: rm + args: + - -rf + - /etc/commands + - command: find + args: + - /etc + - /var + - -type + - f + - -exec + - touch {} + - ; + - command: mkdir + args: + - -p + - /etc/sudoers.d /var/fdo /var/lib/fdo /var/fdo-test /var/lib/fdo-test + - command: /usr/bin/sed + args: + - -i + - -e + - s/^#PasswordAuthentication yes/PasswordAuthentication no/ + - /etc/ssh/sshd_config + may_fail: false + return_stdout: true + return_stderr: true + - command: systemctl + args: + - restart + - sshd + return_stdout: true + return_stderr: true + - command: systemctl + args: + - daemon-reload + return_stdout: true + return_stderr: true + files: + - path: /etc/hosts + permissions: 644 + source_path: ${SERVICE_INFO_DIR}/etc/hosts + - path: /etc/sudoers.d/edge + source_path: ${SERVICE_INFO_DIR}/etc/sudoers.d/edge + - path: /etc/pki/ca-trust/source/anchors/isrg-root-x2-cross-signed.crt + source_path: ${SERVICE_INFO_DIR}/etc/pki/ca-trust/source/anchors/isrg-root-x2-cross-signed.crt +# diskencryption_clevis: +# - disk_label: /dev/vda +# binding: +# pin: test +# config: "{}" +# reencrypt: true +# after_onboarding_reboot: true bind: 0.0.0.0:8083 service_info_auth_token: 2IOtlXsSqfcGjnhBLZjPiHIteskzZEW3lncRzpEmgqI= admin_auth_token: Va40bSkLcxwnfml1pmIuaWaOZG96mSMB6fu0xuzcueg= @@ -190,10 +321,12 @@ onboard() { [ "${OV_STORE_DRIVER}" != "Sqlite" ] || setup_sqlite [ "${OV_STORE_DRIVER}" != "Postgres" ] || setup_postgresql +SSH_PUB_KEY=$(generate_ssh_key) generate_fdo_certificates setup_manufacturing setup_owner setup_rendezvous +generate_serviceinfo_files setup_serviceinfo systemctl restart fdo-{manufacturing,owner-onboarding,rendezvous,serviceinfo-api}-server.service # Wait for servers to be up and running