]> git.ipfire.org Git - thirdparty/systemd.git/blob - test/TEST-02-CRYPTSETUP/test.sh
Merge pull request #11975 from keszybz/fuzzer-fixes-n
[thirdparty/systemd.git] / test / TEST-02-CRYPTSETUP / test.sh
1 #!/bin/bash
2 # -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
3 # ex: ts=8 sw=4 sts=4 et filetype=sh
4 set -e
5 TEST_DESCRIPTION="cryptsetup systemd setup"
6 TEST_NO_NSPAWN=1
7
8 . $TEST_BASE_DIR/test-functions
9
10 check_result_qemu() {
11 ret=1
12 mkdir -p $TESTDIR/root
13 mount ${LOOPDEV}p1 $TESTDIR/root
14 [[ -e $TESTDIR/root/testok ]] && ret=0
15 [[ -f $TESTDIR/root/failed ]] && cp -a $TESTDIR/root/failed $TESTDIR
16 cryptsetup luksOpen ${LOOPDEV}p2 varcrypt <$TESTDIR/keyfile
17 mount /dev/mapper/varcrypt $TESTDIR/root/var
18 cp -a $TESTDIR/root/var/log/journal $TESTDIR
19 umount $TESTDIR/root/var
20 umount $TESTDIR/root
21 cryptsetup luksClose /dev/mapper/varcrypt
22 [[ -f $TESTDIR/failed ]] && cat $TESTDIR/failed
23 ls -l $TESTDIR/journal/*/*.journal
24 test -s $TESTDIR/failed && ret=$(($ret+1))
25 return $ret
26 }
27
28
29 test_setup() {
30 create_empty_image
31 echo -n test >$TESTDIR/keyfile
32 cryptsetup -q luksFormat --pbkdf pbkdf2 --pbkdf-force-iterations 1000 ${LOOPDEV}p2 $TESTDIR/keyfile
33 cryptsetup luksOpen ${LOOPDEV}p2 varcrypt <$TESTDIR/keyfile
34 mkfs.ext4 -L var /dev/mapper/varcrypt
35 mkdir -p $TESTDIR/root
36 mount ${LOOPDEV}p1 $TESTDIR/root
37 mkdir -p $TESTDIR/root/var
38 mount /dev/mapper/varcrypt $TESTDIR/root/var
39
40 # Create what will eventually be our root filesystem onto an overlay
41 (
42 LOG_LEVEL=5
43 eval $(udevadm info --export --query=env --name=/dev/mapper/varcrypt)
44 eval $(udevadm info --export --query=env --name=${LOOPDEV}p2)
45
46 setup_basic_environment
47
48 # mask some services that we do not want to run in these tests
49 ln -fs /dev/null $initdir/etc/systemd/system/systemd-hwdb-update.service
50 ln -fs /dev/null $initdir/etc/systemd/system/systemd-journal-catalog-update.service
51 ln -fs /dev/null $initdir/etc/systemd/system/systemd-networkd.service
52 ln -fs /dev/null $initdir/etc/systemd/system/systemd-networkd.socket
53 ln -fs /dev/null $initdir/etc/systemd/system/systemd-resolved.service
54 ln -fs /dev/null $initdir/etc/systemd/system/systemd-machined.service
55
56 # setup the testsuite service
57 cat >$initdir/etc/systemd/system/testsuite.service <<EOF
58 [Unit]
59 Description=Testsuite service
60 After=multi-user.target
61
62 [Service]
63 ExecStart=/bin/sh -x -c 'systemctl --state=failed --no-legend --no-pager > /failed ; echo OK > /testok'
64 Type=oneshot
65 EOF
66
67 setup_testsuite
68
69 install_dmevent
70 generate_module_dependencies
71 cat >$initdir/etc/crypttab <<EOF
72 $DM_NAME UUID=$ID_FS_UUID /etc/varkey
73 EOF
74 echo -n test > $initdir/etc/varkey
75 cat $initdir/etc/crypttab | ddebug
76
77 cat >>$initdir/etc/fstab <<EOF
78 /dev/mapper/varcrypt /var ext4 defaults 0 1
79 EOF
80 ) || return 1
81
82 ddebug "umount $TESTDIR/root/var"
83 umount $TESTDIR/root/var
84 cryptsetup luksClose /dev/mapper/varcrypt
85 ddebug "umount $TESTDIR/root"
86 umount $TESTDIR/root
87 }
88
89 test_cleanup() {
90 [ -d $TESTDIR/root/var ] && mountpoint $TESTDIR/root/var && umount $TESTDIR/root/var
91 [[ -b /dev/mapper/varcrypt ]] && cryptsetup luksClose /dev/mapper/varcrypt
92 umount $TESTDIR/root 2>/dev/null || true
93 [[ $LOOPDEV ]] && losetup -d $LOOPDEV
94 return 0
95 }
96
97 do_test "$@"