1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
#!/bin/sh
# image-customize script to prepare a bots VM for testing cockpit
# The cockpit packages will be installed separately
set -eu
if type firewall-cmd >/dev/null 2>&1; then
firewall-cmd --add-service=cockpit --permanent
fi
. /usr/lib/os-release
# our tests expect cockpit.socket to not be running after boot, only after start_cockpit()
# socket isn't present on CoreOS or with cockpit/ws scenario
HAVE_COCKPIT_SOCKET=
if [ -n "$(systemctl --no-legend list-unit-files cockpit.socket || true)" ]; then
HAVE_COCKPIT_SOCKET=1
fi
if [ -n "$HAVE_COCKPIT_SOCKET" ]; then
systemctl disable cockpit.socket
fi
# OS specific hacks
if [ "$ID" = "debian" ] || [ "$ID" = "ubuntu" ]; then
# avoid random dpkg database locks, they break our package related tests
systemctl disable apt-daily-upgrade.timer
# create public firewalld zone for our firewall tests
systemctl start firewalld
firewall-cmd --zone=public --permanent --add-interface=eth1
# disarm 10-cloudimg-settings.conf
sed -i '/.*PasswordAuthentication no/d' /etc/ssh/sshd_config $(ls /etc/ssh/sshd_config.d/* 2>/dev/null || true)
fi
if [ "$ID" = "debian" ]; then
# make libpwquality less aggressive, so that our "foobar" password works
printf 'dictcheck = 0\nminlen = 6\n' >> /etc/security/pwquality.conf
# Allow libvirtd coredumps
echo '* soft core unlimited' >> /etc/security/limits.conf
fi
PLATFORM_ID="${PLATFORM_ID:-}"
if [ "${PLATFORM_ID#platform:el}" != "$PLATFORM_ID" ]; then
# allow /usr/local/bin/ in sudo shells, to use our installed tools like the Python bridge
# Fedora, Debian etc. do that
echo 'Defaults secure_path = /sbin:/usr/sbin:/usr/local/bin:/bin:/usr/bin' > /etc/sudoers.d/usr-local
fi
if [ "$PLATFORM_ID" = "platform:el10" ]; then
# HACK: https://bugzilla.redhat.com/show_bug.cgi?id=2273078
printf '[network]\nfirewall_driver = "nftables"\n' > /etc/containers/containers.conf
fi
# start cockpit once to ensure it works, and generate the certificate (to avoid re-doing that for each test)
if [ -n "$HAVE_COCKPIT_SOCKET" ]; then
systemctl start cockpit
systemctl stop cockpit
fi
# clean out the journal
journalctl --flush
journalctl --sync || killall systemd-journald
rm -rf /var/log/journal/*
rm -rf /var/lib/NetworkManager/dhclient-*.lease
|
