xCAT/xcat-core
2
0
Fork 0
mirror of https://github.com/xcat2/xcat-core.git synced 2026-08-26 08:36:42 +00:00
Code Issues Releases Wiki Activity

test(genesis): cover signed extension bundles

Browse Source
This commit is contained in:
Vinícius Ferrão
2026-08-20 23:03:53 -03:00
parent 50c3b00bac
commit cef35ba5e1
1 changed files with 51 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
xCAT-test/unit/genesis_openembedded_extensions.t
+51 -1
View File
@@ -18,6 +18,13 @@ my $loader = File::Spec->catfile(
my $signer = File::Spec->catfile(
$repo_root, qw(xCAT-genesis-builder oe scripts sign-extension)
);
my $exporter = File::Spec->catfile(
$repo_root, qw(xCAT-genesis-builder oe export-extension)
);
my $extension_recipe = File::Spec->catfile(
$repo_root,
qw(xCAT-genesis-builder oe meta-xcat-genesis recipes-core xcat-genesis-extensions xcat-genesis-extensions_1.0.bb)
);
sub write_file {
my ( $path, $contents, $mode ) = @_;
@@ -64,7 +71,7 @@ my $root = tempdir( CLEANUP => 1 );
my $bin = File::Spec->catdir( $root, 'bin' );
my $keys = File::Spec->catdir( $root, 'keys' );
my $run_dir = File::Spec->catdir( $root, 'run' );
my $image = File::Spec->catfile( $root, 'xcat-smoke.raw' );
my $image = File::Spec->catfile( $root, 'xcat-smoke.squashfs-zst' );
my $manifest = File::Spec->catfile( $root, 'xcat-smoke.manifest.json' );
my $signature = File::Spec->catfile( $root, 'xcat-smoke.sig' );
my $private_key = File::Spec->catfile( $root, 'private.pem' );
@@ -103,6 +110,38 @@ my ( $sign_status, $sign_output ) =
run_command( $signer, $manifest, $private_key, $signature );
is( $sign_status, 0, 'extension manifest is signed' ) or diag($sign_output);
my $deploy = File::Spec->catdir( $root, 'deploy' );
my $machine = 'xcat-genesis-x86-64';
my $extension = 'xcat-genesis-extension-smoke';
my $stem = "$extension-$machine";
my $machine_dir = File::Spec->catdir( $deploy, 'images', $machine );
my $bundle = File::Spec->catdir( $root, 'bundle' );
make_path($machine_dir);
copy( $image, File::Spec->catfile( $machine_dir, "$stem.squashfs-zst" ) )
or die "Unable to stage extension image: $!";
copy( $manifest, File::Spec->catfile( $machine_dir, "$stem.manifest.json" ) )
or die "Unable to stage extension manifest: $!";
my ( $export_status, $export_output ) = run_command(
$exporter, 'x86_64', $extension, $deploy,
$private_key, $public_key, $bundle
);
is( $export_status, 0, 'built extension exports as a signed bundle' )
or diag($export_output);
for my $artifact (
[ extensions => "$stem.squashfs-zst" ],
[ extensions => "$stem.manifest.json" ],
[ extensions => "$stem.sig" ],
[ 'extension-keys' => 'xcat-release.pem' ],
) {
ok( -f File::Spec->catfile( $bundle, @{$artifact} ),
"extension bundle includes $artifact->[1]" );
}
my ( $bundle_checksum_status, undef ) = run_command(
'sh', '-c', 'cd "$1" && sha256sum -c SHA256SUMS >/dev/null',
'sh', $bundle
);
is( $bundle_checksum_status, 0, 'extension bundle checksums verify' );
local %ENV = (
%ENV,
PATH => "$bin:$ENV{PATH}",
@@ -231,4 +270,15 @@ like( $status_events,
qr/CODE=EXTENSION_VERIFICATION_FAILED .*RECOVERY=Check extension images, manifests, signatures, and trusted keys/m,
'extension failures include structured recovery data' );
my $recipe_text = do {
open( my $fh, '<', $extension_recipe )
or die "Unable to read $extension_recipe: $!";
local $/;
<$fh>;
};
like( $recipe_text, qr/\$\{localstatedir\}\/lib\/xcat\/genesis\/extensions/,
'the image creates the extension staging directory' );
like( $recipe_text, qr/^XCAT_GENESIS_EXTENSION_BUNDLE \?\?= ""$/m,
'site layers can stage an exported extension bundle' );
done_testing();