7767f16e31
To check embedding containers via the cloud API works, embed a known test container from our gitlab CI and check that it is indeed embedded in the image by pulling the commit and poking into the container storage.
130 lines
3.8 KiB
Bash
130 lines
3.8 KiB
Bash
#!/usr/bin/bash
|
|
|
|
source /usr/libexec/tests/osbuild-composer/api/common/common.sh
|
|
|
|
function checkEnv() {
|
|
printenv CI_REGISTRY_USER > /dev/null
|
|
printenv CI_JOB_TOKEN > /dev/null
|
|
printenv CI_REGISTRY > /dev/null
|
|
printenv CI_PROJECT_PATH > /dev/null
|
|
}
|
|
|
|
# Global var for ostree ref
|
|
export OSTREE_REF="test/osbuild/edge"
|
|
export CONTAINER_SOURCE="registry.gitlab.com/redhat/services/products/image-builder/ci/osbuild-composer/fedora-minimal"
|
|
|
|
function cleanup() {
|
|
CONTAINER_NAME="${OSTREE_CONTAINER_NAME:-}"
|
|
if [ -n "${CONTAINER_NAME}" ]; then
|
|
sudo "${CONTAINER_RUNTIME}" kill "${CONTAINER_NAME}"
|
|
fi
|
|
}
|
|
|
|
function installClient() {
|
|
local WORKER_CONFIG_DIR="/etc/osbuild-worker"
|
|
local AUTH_FILE_PATH="${WORKER_CONFIG_DIR}/containerauth.json"
|
|
|
|
sudo mkdir -p "${WORKER_CONFIG_DIR}"
|
|
|
|
sudo "${CONTAINER_RUNTIME}" login --authfile "${AUTH_FILE_PATH}" --username "${CI_REGISTRY_USER}" --password "${CI_JOB_TOKEN}" "${CI_REGISTRY_IMAGE}"
|
|
|
|
cat <<EOF | sudo tee "${WORKER_CONFIG_DIR}/osbuild-worker.toml"
|
|
[containers]
|
|
auth_file_path="${AUTH_FILE_PATH}"
|
|
domain="${CI_REGISTRY}"
|
|
path_prefix="${CI_PROJECT_PATH}"
|
|
EOF
|
|
|
|
sudo systemctl restart "osbuild-remote-worker@localhost:8700"
|
|
}
|
|
|
|
function createReqFile() {
|
|
cat > "$REQUEST_FILE" << EOF
|
|
{
|
|
"distribution": "$DISTRO",
|
|
"customizations": {
|
|
"payload_repositories": [
|
|
{
|
|
"baseurl": "$PAYLOAD_REPO_URL"
|
|
}
|
|
],
|
|
"containers":[
|
|
{
|
|
"source": "$CONTAINER_SOURCE"
|
|
}
|
|
],
|
|
"packages": [
|
|
"postgresql",
|
|
"podman",
|
|
"dummy"
|
|
],
|
|
"users":[
|
|
{
|
|
"name": "user1",
|
|
"groups": ["wheel"],
|
|
"key": "$(cat "${WORKDIR}/usertest.pub")"
|
|
},
|
|
{
|
|
"name": "user2",
|
|
"key": "$(cat "${WORKDIR}/usertest.pub")"
|
|
}
|
|
]
|
|
},
|
|
"image_request": {
|
|
"architecture": "$ARCH",
|
|
"image_type": "${IMAGE_TYPE}",
|
|
"repositories": $(jq ".\"$ARCH\"" /usr/share/tests/osbuild-composer/repositories/"$DISTRO".json),
|
|
"ostree": {
|
|
"ref": "${OSTREE_REF}"
|
|
},
|
|
"upload_options": {
|
|
"name": "${DISTRO}-${IMAGE_TYPE}"
|
|
}
|
|
}
|
|
}
|
|
EOF
|
|
}
|
|
|
|
function checkUploadStatusOptions() {
|
|
local IMAGE_URL_WITHOUT_TAG
|
|
IMAGE_URL_WITHOUT_TAG=$(echo "$UPLOAD_OPTIONS" | jq -r '.url' | awk -F ":" '{print $1}')
|
|
|
|
test "${IMAGE_URL_WITHOUT_TAG}" = "${CI_REGISTRY}/${CI_PROJECT_PATH}/${DISTRO}-${IMAGE_TYPE}"
|
|
}
|
|
|
|
function verify() {
|
|
OSTREE_CONTAINER_NAME=osbuild-test
|
|
local IMAGE_URL
|
|
IMAGE_URL=$(echo "$UPLOAD_OPTIONS" | jq -r '.url')
|
|
|
|
sudo "${CONTAINER_RUNTIME}" run -d --name osbuild-test -p 8080:8080 "${IMAGE_URL}"
|
|
|
|
GET_METADATA_CURL_REQUEST="curl --silent \
|
|
--show-error \
|
|
--cacert /etc/osbuild-composer/ca-crt.pem \
|
|
--key /etc/osbuild-composer/client-key.pem \
|
|
--cert /etc/osbuild-composer/client-crt.pem \
|
|
https://localhost/api/image-builder-composer/v2/composes/${COMPOSE_ID}/metadata"
|
|
|
|
BUILD_OSTREE_COMMIT=$(${GET_METADATA_CURL_REQUEST} | jq -r '.ostree_commit')
|
|
SERVICED_OSTREE_COMMIT=$(curl http://localhost:8080/repo/refs/heads/${OSTREE_REF})
|
|
|
|
test "${BUILD_OSTREE_COMMIT}" = "${SERVICED_OSTREE_COMMIT}"
|
|
|
|
# check the commit contains the container, for this we pull the commit into
|
|
# a repo and poke into the container storage to see if the container we put
|
|
# in there matches the one we expect to be in there.
|
|
|
|
local CONFIG_DIGEST
|
|
CONFIG_DIGEST=$(skopeo inspect --raw "docker://$CONTAINER_SOURCE" | jq -r .config.digest)
|
|
|
|
ostree init --repo=repo
|
|
ostree remote --repo=repo add --no-gpg-verify container http://localhost:8080/repo
|
|
sudo ostree pull --repo=repo container "${OSTREE_REF}"
|
|
|
|
local EMBEDDED_ID
|
|
EMBEDDED_ID=$(sudo ostree cat --repo=repo "${BUILD_OSTREE_COMMIT}" /usr/share/containers/storage/overlay-images/images.json | jq -r .[0].id)
|
|
|
|
echo -e "have: sha256:${EMBEDDED_ID}\nwant: ${CONFIG_DIGEST}"
|
|
test "sha256:${EMBEDDED_ID}" = "${CONFIG_DIGEST}"
|
|
}
|