1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
|
# Run the installed binaries and libraries through the full upstream test suite.
Features: test-name=upstream-testsuite
Test-Command:
dh_update_autotools_config &&
dh_autoreconf &&
make -f debian/rules override_dh_auto_configure DEB_BUILD_OPTIONS="nocheck nodoc" DEB_BUILD_PROFILES="noudeb" &&
make libcrypto_backend.la &&
cd ./tests &&
gcc -I ../lib -c ./crypto-check.c &&
gcc -o ./crypto-check ./crypto-check.o ../.libs/libcrypto_backend.a -lcrypto &&
make -f Makefile.localtest -j tests CRYPTSETUP_PATH=/sbin TESTSUITE_NOSKIP=y
RUN_KEYRING_TRUSTED_TEST=y
RUN_SYSTEMD_PLUGIN_TEST=y
Depends: cryptsetup-bin,
# to compile tests/*.c
libcryptsetup-dev,
@builddeps@,
# for hexdump(1)
bsdextrautils,
# for dmsetup(8)
dmsetup,
# for expect(1)
expect,
# for jq(1)
jq,
# for keyctl(1)
keyutils,
# for modprobe(8) and rmmod(8)
kmod,
# for legacy hash algorithms such as whirlpool, see OSSL_PROVIDER-legacy(7ssl)
openssl-provider-legacy,
# for free(1)
procps,
# for uuencode(1)
sharutils,
# for swtpm(8) and swtpm_ioctl(8)
swtpm,
swtpm-tools,
tpm2-tools,
# for systemd-cryptenroll(1)
systemd-cryptsetup,
# for xxd(1)
xxd
#
# Use machine-level isolation since some extra tests want to interact
# with the kernel, load modules, and create/remove loop devices
Restrictions: allow-stderr, needs-root, isolation-machine, rw-build-tree
# Run ./tests/ssh-test-plugin on its own since it has its own dependency set.
Features: test-name=ssh-test-plugin
Test-Command: cd ./tests && CRYPTSETUP_PATH=/sbin TESTSUITE_NOSKIP=y RUN_SSH_PLUGIN_TEST=y ./ssh-test-plugin
Depends: cryptsetup-bin,
cryptsetup-ssh,
netcat-openbsd,
openssh-client,
openssh-server,
openssl,
sshpass
Restrictions: needs-root, isolation-machine
Tests: cryptdisks, cryptdisks.init
Depends: cryptsetup, xxd
Restrictions: allow-stderr, needs-root, isolation-machine
# This test doesn't replace the cryptroot-* tests below which mock a
# complete system incl. unlocking at initramfs stage, but it's also
# significantly faster so we use it for crude checks of our initramfs
# hook and the initramfs image itself.
Tests: initramfs-hook
Depends: cryptsetup-initramfs, e2fsprogs, zstd
Restrictions: allow-stderr, needs-root, isolation-machine
Tests: initramfs-hook-legacy
Depends: cryptsetup-initramfs, e2fsprogs, openssl-provider-legacy, zstd
Restrictions: allow-stderr, needs-root, isolation-machine
Tests: cryptroot-lvm, cryptroot-legacy
# Only dependencies required to set the VM here are listed here;
# cryptsetup is not listed since we only install it in the VM.
Depends: cryptsetup-bin,
dosfstools [arm64 armhf],
e2fsprogs,
fdisk,
genext2fs,
initramfs-tools-core,
libjson-perl,
lvm2,
qemu-efi-aarch64 [arm64],
qemu-efi-arm [armhf],
qemu-system-arm [arm64 armhf] | qemu-system-x86 [amd64 i386] | qemu-system,
udev
# We only need root to create /dev/kvm, really. And while it works
# locally and on debci, it doesn't work on salsa CI..
Restrictions: allow-stderr, needs-root
Architecture: amd64
Tests: cryptroot-md
Depends: cryptsetup-bin,
dosfstools [arm64 armhf],
e2fsprogs,
fdisk,
genext2fs,
initramfs-tools-core,
libjson-perl,
lvm2,
mdadm,
qemu-efi-aarch64 [arm64],
qemu-efi-arm [armhf],
qemu-system-arm [arm64 armhf] | qemu-system-x86 [amd64 i386] | qemu-system,
udev
Restrictions: allow-stderr, needs-root
Architecture: amd64
Tests: cryptroot-nested
Depends: btrfs-progs,
cryptsetup-bin,
dosfstools [arm64 armhf],
e2fsprogs,
fdisk,
genext2fs,
initramfs-tools-core,
libjson-perl,
lvm2,
mdadm,
qemu-efi-aarch64 [arm64],
qemu-efi-arm [armhf],
qemu-system-arm [arm64 armhf] | qemu-system-x86 [amd64 i386] | qemu-system,
udev
Restrictions: allow-stderr, needs-root
Architecture: amd64
Tests: cryptroot-sysvinit
Depends: cryptsetup-bin,
dosfstools [arm64 armhf],
e2fsprogs,
fdisk,
genext2fs,
initramfs-tools-core,
libjson-perl,
qemu-efi-aarch64 [arm64],
qemu-efi-arm [armhf],
qemu-system-arm [arm64 armhf] | qemu-system-x86 [amd64 i386] | qemu-system,
udev
Restrictions: allow-stderr, needs-root
Architecture: amd64
# Dummy test so that kernel updates trigger our other autopkgtests on debci
Features: test-name=hint-testsuite-triggers
Test-Command: false
Depends: linux-image-generic,
linux-image-amd64 [amd64],
linux-image-arm64 [arm64],
linux-image-armmp-lpae [armhf],
linux-image-686-pae [i386]
Restrictions: hint-testsuite-triggers
Architecture: amd64 i386
Tests: crypto-backend
Depends: cryptsetup-bin
Restrictions: superficial
|
