bdc973d085
This reverts commit2fe5e01d4dwith the exception of the changes in tools/provision.sh. This functionality is covered by unit tests in osbuild/images:aaa53adc3c/pkg/distrofactory/distrofactory_test.go (L9)
131 lines
3.9 KiB
Bash
131 lines
3.9 KiB
Bash
#!/usr/bin/bash
|
|
|
|
source /usr/libexec/tests/osbuild-composer/api/common/common.sh
|
|
|
|
function checkEnv() {
|
|
printenv CI_REGISTRY_USER > /dev/null
|
|
printenv CI_JOB_TOKEN > /dev/null
|
|
printenv CI_REGISTRY > /dev/null
|
|
printenv CI_PROJECT_PATH > /dev/null
|
|
}
|
|
|
|
# Global var for ostree ref
|
|
export OSTREE_REF="test/osbuild/edge"
|
|
export CONTAINER_SOURCE="registry.gitlab.com/redhat/services/products/image-builder/ci/osbuild-composer/fedora-minimal"
|
|
|
|
function cleanup() {
|
|
CONTAINER_NAME="${OSTREE_CONTAINER_NAME:-}"
|
|
if [ -n "${CONTAINER_NAME}" ]; then
|
|
sudo "${CONTAINER_RUNTIME}" kill "${CONTAINER_NAME}"
|
|
fi
|
|
}
|
|
|
|
function installClient() {
|
|
local WORKER_CONFIG_DIR="/etc/osbuild-worker"
|
|
local AUTH_FILE_PATH="${WORKER_CONFIG_DIR}/containerauth.json"
|
|
|
|
sudo mkdir -p "${WORKER_CONFIG_DIR}"
|
|
|
|
# store credentials in authfile and use the file in subsequent calls, see below
|
|
sudo "${CONTAINER_RUNTIME}" login --authfile "${AUTH_FILE_PATH}" --username "${CI_REGISTRY_USER}" --password "${CI_JOB_TOKEN}" "${CI_REGISTRY_IMAGE}"
|
|
|
|
cat <<EOF | sudo tee "${WORKER_CONFIG_DIR}/osbuild-worker.toml"
|
|
[containers]
|
|
auth_file_path="${AUTH_FILE_PATH}"
|
|
domain="${CI_REGISTRY}"
|
|
path_prefix="${CI_PROJECT_PATH}"
|
|
EOF
|
|
|
|
sudo systemctl restart "osbuild-remote-worker@localhost:8700"
|
|
}
|
|
|
|
function createReqFile() {
|
|
cat > "$REQUEST_FILE" << EOF
|
|
{
|
|
"distribution": "$DISTRO",
|
|
"customizations": {
|
|
"payload_repositories": [
|
|
{
|
|
"baseurl": "$PAYLOAD_REPO_URL"
|
|
}
|
|
],
|
|
"containers":[
|
|
{
|
|
"source": "$CONTAINER_SOURCE"
|
|
}
|
|
],
|
|
"packages": [
|
|
"postgresql",
|
|
"podman",
|
|
"dummy"
|
|
],
|
|
"users":[
|
|
{
|
|
"name": "user1",
|
|
"groups": ["wheel"],
|
|
"key": "$(cat "${WORKDIR}/usertest.pub")"
|
|
},
|
|
{
|
|
"name": "user2",
|
|
"key": "$(cat "${WORKDIR}/usertest.pub")"
|
|
}
|
|
]
|
|
},
|
|
"image_request": {
|
|
"architecture": "$ARCH",
|
|
"image_type": "${IMAGE_TYPE}",
|
|
"repositories": $(jq ".\"$ARCH\"" /usr/share/tests/osbuild-composer/repositories/"$DISTRO".json),
|
|
"ostree": {
|
|
"ref": "${OSTREE_REF}"
|
|
},
|
|
"upload_options": {
|
|
"name": "${DISTRO}-${IMAGE_TYPE}"
|
|
}
|
|
}
|
|
}
|
|
EOF
|
|
}
|
|
|
|
function checkUploadStatusOptions() {
|
|
local IMAGE_URL_WITHOUT_TAG
|
|
IMAGE_URL_WITHOUT_TAG=$(echo "$UPLOAD_OPTIONS" | jq -r '.url' | awk -F ":" '{print $1}')
|
|
|
|
test "${IMAGE_URL_WITHOUT_TAG}" = "${CI_REGISTRY}/${CI_PROJECT_PATH}/${DISTRO}-${IMAGE_TYPE}"
|
|
}
|
|
|
|
function verify() {
|
|
OSTREE_CONTAINER_NAME=osbuild-test
|
|
local IMAGE_URL
|
|
IMAGE_URL=$(echo "$UPLOAD_OPTIONS" | jq -r '.url')
|
|
|
|
sudo "${CONTAINER_RUNTIME}" run -d --name osbuild-test -p 8080:8080 "${IMAGE_URL}"
|
|
|
|
GET_METADATA_CURL_REQUEST="curl --silent \
|
|
--show-error \
|
|
--cacert /etc/osbuild-composer/ca-crt.pem \
|
|
--key /etc/osbuild-composer/client-key.pem \
|
|
--cert /etc/osbuild-composer/client-crt.pem \
|
|
https://localhost/api/image-builder-composer/v2/composes/${COMPOSE_ID}/metadata"
|
|
|
|
BUILD_OSTREE_COMMIT=$(${GET_METADATA_CURL_REQUEST} | jq -r '.ostree_commit')
|
|
SERVICED_OSTREE_COMMIT=$(curl http://localhost:8080/repo/refs/heads/${OSTREE_REF})
|
|
|
|
test "${BUILD_OSTREE_COMMIT}" = "${SERVICED_OSTREE_COMMIT}"
|
|
|
|
# check the commit contains the container, for this we pull the commit into
|
|
# a repo and poke into the container storage to see if the container we put
|
|
# in there matches the one we expect to be in there.
|
|
|
|
local CONFIG_DIGEST
|
|
CONFIG_DIGEST=$(skopeo inspect --raw "docker://$CONTAINER_SOURCE" | jq -r .config.digest)
|
|
|
|
ostree init --repo=repo
|
|
ostree remote --repo=repo add --no-gpg-verify container http://localhost:8080/repo
|
|
sudo ostree pull --repo=repo container "${OSTREE_REF}"
|
|
|
|
local EMBEDDED_ID
|
|
EMBEDDED_ID=$(sudo ostree cat --repo=repo "${BUILD_OSTREE_COMMIT}" /usr/share/containers/storage/overlay-images/images.json | jq -r .[0].id)
|
|
|
|
echo -e "have: sha256:${EMBEDDED_ID}\nwant: ${CONFIG_DIGEST}"
|
|
test "sha256:${EMBEDDED_ID}" = "${CONFIG_DIGEST}"
|
|
}
|