scutzbot: deploy pre-generated SSL certs for testing

osbuild-composer.spec

@@ -166,9 +166,13 @@ install -m 0644 -vp test/azure-deployment-template.json         %{buildroot}%{_d
 
 install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/cases
 install -m 0644 -vp test/cases/*                                %{buildroot}%{_datadir}/tests/osbuild-composer/cases/
+
 install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/keyring
 install -m 0600 -vp test/keyring/*                              %{buildroot}%{_datadir}/tests/osbuild-composer/keyring/
 
+install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/ca
+install -m 0600 -vp test/ca/*                                   %{buildroot}%{_datadir}/tests/osbuild-composer/ca/
+
 install -m 0755 -vd                                             %{buildroot}%{_datadir}/tests/osbuild-composer/cloud-init
 install -m 0644 -vp test/cloud-init/*                           %{buildroot}%{_datadir}/tests/osbuild-composer/cloud-init/
 

schutzbot/deploy.sh

@@ -60,8 +60,7 @@ sudo dnf repository-packages osbuild-mock list
 
 greenprint "Installing the Image Builder packages"
 # Note: installing only -tests to catch missing dependencies
-# TODO: remove make to fulfill the previous line's statement
-retry sudo dnf -y install osbuild-composer-tests make
+retry sudo dnf -y install osbuild-composer-tests
 
 greenprint "Setting up a directory to hold repository overrides"
 sudo mkdir -p /etc/osbuild-composer/repositories
@@ -82,9 +81,10 @@ sudo mkdir -p /etc/osbuild-composer
 sudo cp test/image-tests/osbuild-composer.toml \
     /etc/osbuild-composer/
 
-greenprint "Generating SSL certificates"
-sudo make composer-key-pair
-sudo make worker-key-pair
+greenprint "Copying pre-generated SSL certificates"
+sudo cp /usr/share/tests/osbuild-composer/ca/* \
+    /etc/osbuild-composer/
+sudo chown _osbuild-composer /etc/osbuild-composer/composer-*.pem
 
 greenprint "Starting services"
 sudo systemctl enable --now osbuild-remote-worker.socket

test/ca/ca-crt.pem

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/ca/ca-key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCvjOc9KN9JcnL+
+AI65zTorW6eixijgWbDGPI5Xu7XAZR9VRUczZ66CsODaV3a6bGgCPD25djAgFLPa
+09t9gT0yVdjx6gk7bWEcaufZnJ2faceTWMEkSnRUBXJALnWvj58C50rsrDB1x6i+
+iDs6D/f+4ffvdu2m18Tj2FgiqxM86Wt14AtPdj+nqRS7e1FuHiuKwoFvSfxV+8uU
+C6ZVAvQk49uDsCVYtr45ju+2S82E5icBkXxFLXJXR7PVK5bKaMRggpHPotBEEI6C
+mNYYJYwIczQlFmg+//YcrMLQDZMazb0BP9ci5w76AJ1FgkfhvraCM0ljeC2SJrzJ
+E1oSTxBZAgMBAAECggEAV3MikiX1LTpVLFEMyGQCsSykUoLSRAiJ9gaehffdL21w
+cWLkeCgTF8mTCVF+tJliKpLl0Kieiqyld8IH2fpyiMuZGdGTLcZsFOLwgkfxgUMJ
+h040UKbCUkSwSGace4tZE/IyMboJHfMLDXcBwgfIa3EXuHOPKYjc7P+N0B9WowV0
+3iBvPtnVSmjZ/ZTonR24gWcz6kLKNlvJzP3WTL0n5rMYZ05ckH/G7gSLxgVTy1Nm
+hSk8y8qWCQ/JEDTD8W8byBX9AJJDb9mkOc7FPF7RyE/4NY5Rx0FLAuuGMmGwhwfx
+W6WasrKZ/RiNuZ7NPasuHCV3agOec65HQ9e6+9ZhgQKBgQDfrTNFE8/dLvqEs2g2
+EhN0rqNReDnkUqSwHowYXiZfaTEV8Wc2bPATavGxt4EBB06NtClRKKmKtmnumlh4
+JasX+gR1BCFzv50MXja74Gw1Zyzj/FoM0wW3KMaQFvdNCnNGvoThtb4A8z4mI1aE
+REZA9fLNwEHMQPv8wxdeq1BRUQKBgQDI60zm2+u7vpZcWlsXA+K1zN9a/M4csXe1
+9f2+q8CrERmCfBBlvF8sHUKiwun+WWsDdqOhaEjEEfUI+OEflTroWsd//ii2s3nN
+8SOrHGloxCfIQTZwKG5AFIn7UOYCnyiERMr74qmIGsRLOE+jznXtmRV12MbzDFQ3
+VIY8cVfMiQKBgDabkmjK7XSSg5biNg79WsKh4D2DnJ6hjpNw4cMROU0R4Wn6BbjD
+39jdwyQgKN6XahYuZefqhXnYDwSxqeerSpoP8Aahe4lGvpDGb5Zus/xVtB/0/Acl
+fb+5tMB42ud0JbCf0tFIDZstx36IIhcok/5IDX8t8OJs+xg6iPoT2QgBAoGADPDC
+wje15iCvVIFpToEsj+MDG7wellCD0k9mqWosfZgbWYEeGT9ZreCwkwUUxxIBR3bT
+sSijTyWM76f/7+XPpnl6Ue8Ptjy3AqGeV337+AhyO36fv/eKqkvoWyxptA+GL4ay
+wChoHOEEdYfJ8VXx2Hy8mht9LNhFcE7cWnY+XmkCgYATd8bA9r6yf4yVA4u4swfQ
+v95+dCw8xaaSDw9nrLU3ubETtlnU4rqh7q+tmWYJw88ICGf7cn3BH4ZzMcNB+AMS
+YrDdv/bV3Q46AnwKtffUS7frVtp8PuPwpTHpgFxah5+zmU7qXzcfb6LE0CzFrKfd
+kfl1uOXJnqe4gkf7GctA4Q==
+-----END PRIVATE KEY-----

test/ca/composer-crt.pem

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/ca/composer-key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

test/ca/worker-crt.pem

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/ca/worker-key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----