| #!/bin/bash |
| # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*- |
| # ex: ts=8 sw=4 sts=4 et filetype=sh |
| set -e |
| TEST_DESCRIPTION="cryptsetup systemd setup" |
| TEST_NO_NSPAWN=1 |
| |
| . $TEST_BASE_DIR/test-functions |
| |
| check_result_qemu() { |
| ret=1 |
| mkdir -p $TESTDIR/root |
| mount ${LOOPDEV}p1 $TESTDIR/root |
| [[ -e $TESTDIR/root/testok ]] && ret=0 |
| [[ -f $TESTDIR/root/failed ]] && cp -a $TESTDIR/root/failed $TESTDIR |
| cryptsetup luksOpen ${LOOPDEV}p2 varcrypt <$TESTDIR/keyfile |
| mount /dev/mapper/varcrypt $TESTDIR/root/var |
| cp -a $TESTDIR/root/var/log/journal $TESTDIR |
| umount $TESTDIR/root/var |
| umount $TESTDIR/root |
| cryptsetup luksClose /dev/mapper/varcrypt |
| [[ -f $TESTDIR/failed ]] && cat $TESTDIR/failed |
| ls -l $TESTDIR/journal/*/*.journal |
| test -s $TESTDIR/failed && ret=$(($ret+1)) |
| return $ret |
| } |
| |
| |
| test_setup() { |
| create_empty_image |
| echo -n test >$TESTDIR/keyfile |
| cryptsetup -q luksFormat ${LOOPDEV}p2 $TESTDIR/keyfile |
| cryptsetup luksOpen ${LOOPDEV}p2 varcrypt <$TESTDIR/keyfile |
| mkfs.ext4 -L var /dev/mapper/varcrypt |
| mkdir -p $TESTDIR/root |
| mount ${LOOPDEV}p1 $TESTDIR/root |
| mkdir -p $TESTDIR/root/var |
| mount /dev/mapper/varcrypt $TESTDIR/root/var |
| |
| # Create what will eventually be our root filesystem onto an overlay |
| ( |
| LOG_LEVEL=5 |
| eval $(udevadm info --export --query=env --name=/dev/mapper/varcrypt) |
| eval $(udevadm info --export --query=env --name=${LOOPDEV}p2) |
| |
| setup_basic_environment |
| |
| # mask some services that we do not want to run in these tests |
| ln -fs /dev/null $initdir/etc/systemd/system/systemd-hwdb-update.service |
| ln -fs /dev/null $initdir/etc/systemd/system/systemd-journal-catalog-update.service |
| ln -fs /dev/null $initdir/etc/systemd/system/systemd-networkd.service |
| ln -fs /dev/null $initdir/etc/systemd/system/systemd-networkd.socket |
| ln -fs /dev/null $initdir/etc/systemd/system/systemd-resolved.service |
| ln -fs /dev/null $initdir/etc/systemd/system/systemd-machined.service |
| |
| # setup the testsuite service |
| cat >$initdir/etc/systemd/system/testsuite.service <<EOF |
| [Unit] |
| Description=Testsuite service |
| After=multi-user.target |
| |
| [Service] |
| ExecStart=/bin/sh -x -c 'systemctl --state=failed --no-legend --no-pager > /failed ; echo OK > /testok' |
| Type=oneshot |
| EOF |
| |
| setup_testsuite |
| |
| install_dmevent |
| generate_module_dependencies |
| cat >$initdir/etc/crypttab <<EOF |
| $DM_NAME UUID=$ID_FS_UUID /etc/varkey |
| EOF |
| echo -n test > $initdir/etc/varkey |
| cat $initdir/etc/crypttab | ddebug |
| |
| cat >>$initdir/etc/fstab <<EOF |
| /dev/mapper/varcrypt /var ext4 defaults 0 1 |
| EOF |
| ) || return 1 |
| |
| ddebug "umount $TESTDIR/root/var" |
| umount $TESTDIR/root/var |
| cryptsetup luksClose /dev/mapper/varcrypt |
| ddebug "umount $TESTDIR/root" |
| umount $TESTDIR/root |
| } |
| |
| test_cleanup() { |
| [ -d $TESTDIR/root/var ] && mountpoint $TESTDIR/root/var && umount $TESTDIR/root/var |
| [[ -b /dev/mapper/varcrypt ]] && cryptsetup luksClose /dev/mapper/varcrypt |
| umount $TESTDIR/root 2>/dev/null || true |
| [[ $LOOPDEV ]] && losetup -d $LOOPDEV |
| return 0 |
| } |
| |
| do_test "$@" |