From: Roberto Sassu <email@example.com> To: <firstname.lastname@example.org> Cc: <email@example.com>, <firstname.lastname@example.org>, <email@example.com>, Roberto Sassu <firstname.lastname@example.org> Subject: [RFC][PATCH ima-evm-utils 0/7] ima-evm-utils: Add UML support and tests for EVM portable signatures Date: Thu, 22 Jul 2021 19:34:07 +0200 [thread overview] Message-ID: <email@example.com> (raw) During the development of the tests for the 'evm: Improve usability of portable signatures' patch set, it became clear that a testing environment available to a regular user was not sufficient. First, because some operations needs to be executed with the privileges of the root user (for example, writing to securityfs), which not always is available (for example in a public testing plaform). Second, because some configuration steps performed on the kernel cannot be undone. The first goal of this patch set is to overcome these limitations by adding support for running tests with a UML (User Mode Linux) kernel. In this environment, a test script might operate as root with the objects created in the new environment. It still has the limitations of the user that launched the UML kernel, if the test script interacts with the rest of the system. The second goal of this patch set is to introduce the tests for the 'evm: Improve usability of portable signatures' patch set. Patches 1-2 download the UML kernel, its signing key and mount-idmapped (to perform the tests on an idmapped mount). Patch 3 adds additional options for the container engine to execute the UML kernel. Patch 4-5 adds the infrastructure necessary to launch the UML kernel. Patch 6 adds the possibility of executing tests individually and, lastly, Patch 7 adds the tests for the 'evm: Improve usability of portable signatures' patch set. To test this patch set, a new workflow for Github Actions has been defined in the kernel repository. The patches to introduce it and the UML kernel configuration are available at: https://github.com/robertosassu/linux/commit/b3122b23a1e5f3ef5e3f1932204da39974a50257 https://github.com/robertosassu/linux/commit/9ccb667217fd1fdd933a5d6816ba0281a09bf980 Roberto Sassu (7): Download UML kernel and signing key Download mount-idmapped Add additional options to the container engine Add functions to the testing library to run a test script with UML Signal failures of tests executed by UML kernel with unclean shutdown Introduce TST_LIST variable to select a test to execute Add tests for EVM portable signatures .github/workflows/ci.yml | 21 + .travis.yml | 19 +- build.sh | 1 + ci/alpine.sh | 8 +- ci/alt.sh | 1 + ci/debian.sh | 8 + ci/fedora.sh | 16 +- ci/tumbleweed.sh | 9 +- tests/Makefile.am | 3 +- tests/functions.sh | 67 ++ tests/portable_signatures.test | 1157 ++++++++++++++++++++++++++++++++ 11 files changed, 1305 insertions(+), 5 deletions(-) create mode 100755 tests/portable_signatures.test -- 2.25.1
next reply other threads:[~2021-07-22 17:34 UTC|newest] Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top 2021-07-22 17:34 Roberto Sassu [this message] 2021-07-22 17:34 ` [RFC][PATCH ima-evm-utils 1/7] Download UML kernel and signing key Roberto Sassu 2021-07-22 17:34 ` [RFC][PATCH ima-evm-utils 2/7] Download mount-idmapped Roberto Sassu 2021-07-22 17:34 ` [RFC][PATCH ima-evm-utils 3/7] Add additional options to the container engine Roberto Sassu 2021-07-22 17:34 ` [RFC][PATCH ima-evm-utils 4/7] Add functions to the testing library to run a test script with UML Roberto Sassu 2021-07-22 17:34 ` [RFC][PATCH ima-evm-utils 5/7] Signal failures of tests executed by UML kernel with unclean shutdown Roberto Sassu 2021-07-22 17:34 ` [RFC][PATCH ima-evm-utils 6/7] Introduce TST_LIST variable to select a test to execute Roberto Sassu 2021-07-22 17:34 ` [RFC][PATCH ima-evm-utils 7/7] Add tests for EVM portable signatures Roberto Sassu
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --firstname.lastname@example.org \ --email@example.com \ --firstname.lastname@example.org \ --email@example.com \ --firstname.lastname@example.org \ --email@example.com \ --subject='Re: [RFC][PATCH ima-evm-utils 0/7] ima-evm-utils: Add UML support and tests for EVM portable signatures' \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).