1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
|
#!/bin/bash
# This script is intended to be executed by automation or humans
# under a hack/get_ci_vm.sh context. Use under any other circumstances
# is unlikely to function.
set -e
if [[ -r "/etc/automation_environment" ]]; then
source /etc/automation_environment
source $AUTOMATION_LIB_PATH/common_lib.sh
else
(
echo "WARNING: It does not appear that containers/automation was installed."
echo " Functionality of most of ${BASH_SOURCE[0]} will be negatively"
echo " impacted."
) > /dev/stderr
fi
export "PATH=$PATH:$GOPATH/bin"
_run_setup() {
req_env_vars SKOPEO_PATH SKOPEO_CI_BRANCH GOSRC
project_module=$(go list .)
make tools
rm -rf "${SKOPEO_PATH}"
git clone -b ${SKOPEO_CI_BRANCH} \
https://github.com/containers/skopeo.git ${SKOPEO_PATH}
cd "${SKOPEO_PATH}"
if [[ -n "$SKOPEO_PR" ]] && [[ $SKOPEO_PR -gt 1000 ]]; then
warn "Fetching and checking out code from skopeo pull-request #$SKOPEO_PR"
git fetch origin "+refs/pull/$SKOPEO_PR/head"
git checkout FETCH_HEAD
fi
msg "Replacing upstream skopeo $SKOPEO_CI_BRANCH branch $project_module module"
go mod edit -replace ${project_module}=$GOSRC
"${SKOPEO_PATH}/${SCRIPT_BASE}/runner.sh" setup
}
_run_image_tests() {
req_env_vars GOPATH GOSRC
# Hacky solution to find test that must be run as root.
# This looks for the ensureTestCanCreateImages() test function call and gets the
# function name where it is called via git grep,
# then trims the line to only show the actual function name and add "^$" around it
# since go test commands only accepts a single regex.
# Then join all names with "|" with paste to again build up a single regex string
# that matches all these names.
# With that we don't have to run everything twice and can just run the ones that
# actually need to be root.
# Note we must run git before we switch/chown to the user because it will error
# out otherwise since the file ownership doesn't match.
test_filter=$(git grep -h --show-function ensureTestCanCreateImages ./storage |
sed -n 's/func \(Test[[:alnum:]]*\)(.*/^\1\$\$/p' |
paste -sd "|" -)
showrun make test "BUILDTAGS='$BUILDTAGS'" "TESTFLAGS=-v -run '$test_filter'" TEST_PACKAGES=./storage
# Most tests in this repo are intended to run as a regular user.
ROOTLESS_USER="testuser$RANDOM"
msg "Setting up rootless user '$ROOTLESS_USER'"
cd $GOSRC || exit 1
# Guarantee independence from specific values
rootless_uid=$((RANDOM+1000))
rootless_gid=$((RANDOM+1000))
msg "Creating $rootless_uid:$rootless_gid $ROOTLESS_USER user"
groupadd -g $rootless_gid $ROOTLESS_USER
useradd -g $rootless_gid -u $rootless_uid --no-user-group --create-home $ROOTLESS_USER
msg "Setting ownership of $GOPATH and $GOSRC"
chown -R $ROOTLESS_USER:$ROOTLESS_USER "$GOPATH" "$GOSRC"
msg "Creating ssh key pairs"
mkdir -p "/root/.ssh" "/home/$ROOTLESS_USER/.ssh"
ssh-keygen -t ed25519 -P "" -f "/root/.ssh/id_ed25519"
msg "Setup authorized_keys"
cat /root/.ssh/*.pub >> /home/$ROOTLESS_USER/.ssh/authorized_keys
msg "Configure ssh file permissions"
chmod -R 700 "/root/.ssh"
chmod -R 700 "/home/$ROOTLESS_USER/.ssh"
chown -R $ROOTLESS_USER:$ROOTLESS_USER "/home/$ROOTLESS_USER/.ssh"
msg "Ensure the ssh daemon is up and running within 5 minutes"
systemctl is-active sshd || \
systemctl start sshd
msg "Setup known_hosts for root"
ssh-keyscan localhost > /root/.ssh/known_hosts \
msg "Start rekor server as $ROOTLESS_USER"
showrun ssh $ROOTLESS_USER@localhost $GOSRC/signature/sigstore/rekor/testdata/start-rekor.sh ci
# remove rekor server on function exit
trap "ssh $ROOTLESS_USER@localhost $GOSRC/signature/sigstore/rekor/testdata/start-rekor.sh ci remove" RETURN
msg "Executing tests as $ROOTLESS_USER"
showrun ssh $ROOTLESS_USER@localhost make -C $GOSRC test "BUILDTAGS='$BUILDTAGS'" "TESTFLAGS=-v" "REKOR_SERVER_URL='http://127.0.0.1:3000'"
}
req_env_vars GOSRC
handler="_run_${1}"
if [ "$(type -t $handler)" != "function" ]; then
die "Unknown/Unsupported command-line argument '$1'"
fi
msg "************************************************************"
msg "Runner executing $1 on $OS_REL_VER"
msg "************************************************************"
cd "$GOSRC"
$handler
|
