mirror of
https://github.com/xcat2/xcat-core.git
synced 2026-10-21 23:28:19 +00:00
Vinícius Ferrão
0766c7213b
Install rsyslog and create its xCAT log directory before installing xCAT. Wait for a unique syslog marker before changing test state, including when the log does not exist yet. Reuse that wait for the completion marker.
79 lines
2.1 KiB
Bash
79 lines
2.1 KiB
Bash
#!/bin/sh
|
|
|
|
set -eu
|
|
umask 077
|
|
|
|
fail()
|
|
{
|
|
echo "$*" >&2
|
|
exit 1
|
|
}
|
|
|
|
[ "$(id -u)" -eq 0 ] || fail 'Run this test as root on a management node.'
|
|
log=/var/log/xcat/cluster.log
|
|
work=$(mktemp -d /tmp/xcat-redaction.XXXXXXXX)
|
|
node=$(printf '%s' "xcat-redaction-${work##*.}" | tr '[:upper:]' '[:lower:]')
|
|
restore_debug=0
|
|
remove_node=0
|
|
|
|
cleanup()
|
|
{
|
|
status=$?
|
|
trap - 0 HUP INT TERM
|
|
if [ "$restore_debug" -eq 1 ]; then
|
|
chdef -t site "xcatdebugmode=$debug" || status=1
|
|
fi
|
|
if [ "$remove_node" -eq 1 ]; then
|
|
rmdef "$node" || status=1
|
|
fi
|
|
rm -rf "$work" || status=1
|
|
exit "$status"
|
|
}
|
|
trap cleanup 0
|
|
trap 'exit 1' HUP INT TERM
|
|
|
|
wait_for_log()
|
|
{
|
|
attempt=0
|
|
while :; do
|
|
if [ -e "$log" ]; then
|
|
if grep -F "$1" "$log" > /dev/null; then
|
|
return
|
|
else
|
|
status=$?
|
|
[ "$status" -eq 1 ] || fail 'Cannot read the syslog marker.'
|
|
fi
|
|
fi
|
|
attempt=$((attempt + 1))
|
|
[ "$attempt" -lt 30 ] || fail 'Timed out waiting for syslog.'
|
|
sleep 1
|
|
done
|
|
}
|
|
|
|
logger -p local4.debug -t xcat "$node ready"
|
|
wait_for_log "$node ready"
|
|
|
|
lsdef -t site -i xcatdebugmode > "$work/site"
|
|
debug=$(sed -n 's/^[[:space:]]*xcatdebugmode=//p' "$work/site")
|
|
mkdef "$node" groups=all mgt=ipmi
|
|
remove_node=1
|
|
restore_debug=1
|
|
chdef -t site xcatdebugmode=1
|
|
chdef "$node" "bmcpassword=SEKRET-$node"
|
|
lsdef "$node" -i bmcpassword > "$work/node"
|
|
grep -Fx " bmcpassword=SEKRET-$node" "$work/node" > /dev/null ||
|
|
fail 'Logging changed the password stored by chdef.'
|
|
logger -p local4.debug -t xcat "$node complete"
|
|
wait_for_log "$node complete"
|
|
|
|
grep -F "$node" "$log" > "$work/log"
|
|
if grep -F "SEKRET-$node" "$work/log" > /dev/null; then
|
|
fail 'The unmasked password reached syslog.'
|
|
else
|
|
status=$?
|
|
[ "$status" -eq 1 ] || fail 'Cannot check syslog for the password.'
|
|
fi
|
|
grep -F "xcatd: dispatch request 'chdef $node bmcpassword=xxxxxxxx' to plugin '" \
|
|
"$work/log" > /dev/null || fail 'The masked chdef dispatch trace is missing.'
|
|
echo 'The dispatch trace masks the password and keeps the command and node.'
|