tests: add iso ignition test suite

.cci.jenkinsfile

@@ -42,6 +42,7 @@ cosaPod(buildroot: true, runAsUser: 0) {
             shwrap("cd /srv/fcos && tar -cf - tmp/kola-testiso-metal4k/ | xz -c9 > ${env.WORKSPACE}/kola-testiso-metal4k.tar.xz")
             archiveArtifacts allowEmptyArchive: true, artifacts: 'kola-testiso*.tar.xz'
         }
+        shwrap("tests/iso-ignition.sh /srv/fcos/builds/latest/x86_64/*.iso")
         shwrap("tests/iso-kargs.sh /srv/fcos/builds/latest/x86_64/*.iso")
     }
 }

tests/iso-ignition.sh

@@ -0,0 +1,105 @@
+#!/bin/bash
+set -xeuo pipefail
+
+fatal() {
+    echo "$@" >&2
+    exit 1
+}
+
+digest() {
+    # Ignore filename
+    sha256sum "${1:--}" | awk '{print $1}'
+}
+
+iso=$1; shift
+iso=$(realpath "${iso}")
+
+tmpd=$(mktemp -d)
+trap 'rm -rf "${tmpd}"' EXIT
+cd "${tmpd}"
+
+cp --reflink=auto "${iso}" "test.iso"
+iso=test.iso
+out_iso="${iso}.out"
+orig_hash=$(digest "${iso}")
+
+config='{"ignition": {"version": "3.0.0"}'
+
+# Test all the modification operations.
+stdout_hash=$(echo "${config}" | coreos-installer iso ignition embed -o - "${iso}" | tee "${out_iso}" | digest)
+coreos-installer iso ignition show "${out_iso}" | cmp - <(echo "${config}")
+rm "${out_iso}"
+coreos-installer iso ignition embed -i <(echo "${config}") "${iso}" -o "${out_iso}"
+coreos-installer iso ignition show "${out_iso}" | cmp - <(echo "${config}")
+hash=$(digest "${out_iso}")
+if [ "${stdout_hash}" != "${hash}" ]; then
+    fatal "Streamed hash doesn't match copied hash: ${stdout_hash} vs ${hash}"
+fi
+coreos-installer iso ignition embed -i <(echo "${config}") "${iso}"
+coreos-installer iso ignition show "${iso}" | cmp - <(echo "${config}")
+hash=$(digest "${iso}")
+if [ "${stdout_hash}" != "${hash}" ]; then
+    fatal "Streamed hash doesn't match modified hash: ${stdout_hash} vs ${hash}"
+fi
+
+# Check the actual file bits.
+offset=$(coreos-installer iso ignition show --header "${iso}" | jq -r .offset)
+length=$(coreos-installer iso ignition show --header "${iso}" | jq -r .length)
+if [ "${config}" != "$(dd if=${iso} skip=${offset} count=${length} bs=1 | xzcat | cpio -i --to-stdout --quiet)" ]; then
+    fatal "Failed to manually round-trip Ignition config"
+fi
+
+# Test forcing
+(coreos-installer iso ignition embed -i <(echo "${config}") "${iso}" 2>&1 ||:) | grep -q "already has an embedded Ignition config"
+coreos-installer iso ignition embed -f -i <(echo "${config}") "${iso}"
+rm "${out_iso}"
+(coreos-installer iso ignition embed -i <(echo "${config}") "${iso}" -o "${out_iso}" 2>&1 ||:) | grep -q "already has an embedded Ignition config"
+coreos-installer iso ignition embed -f -i <(echo "${config}") "${iso}" -o "${out_iso}"
+(coreos-installer iso ignition embed -i <(echo "${config}") "${iso}" -o - 2>&1 ||:) | grep -q "already has an embedded Ignition config"
+coreos-installer iso ignition embed -f -i <(echo "${config}") "${iso}" -o - >/dev/null
+
+# Test `remove`
+hash=$(coreos-installer iso ignition remove "${iso}" -o - | digest)
+if [ "${orig_hash}" != "${hash}" ]; then
+    fatal "Hash doesn't match original hash: ${hash} vs ${orig_hash}"
+fi
+rm "${out_iso}"
+coreos-installer iso ignition remove "${iso}" -o "${out_iso}"
+hash=$(digest "${out_iso}")
+if [ "${orig_hash}" != "${hash}" ]; then
+    fatal "Hash doesn't match original hash: ${hash} vs ${orig_hash}"
+fi
+coreos-installer iso ignition remove "${iso}"
+hash=$(digest "${iso}")
+if [ "${orig_hash}" != "${hash}" ]; then
+    fatal "Hash doesn't match original hash: ${hash} vs ${orig_hash}"
+fi
+
+# Test an overlarge Ignition config.  Get some random data from /dev/urandom
+# to ensure it's sufficiently incompressible.
+embed_size=$(coreos-installer iso ignition show --header "${iso}" | jq .length)
+random=$(dd if=/dev/urandom bs=1 count=${embed_size} status=none | base64 -w0)
+large_config() {
+    # too large for sed argument list
+    cat <<EOF
+{"ignition": {"version": "3.0.0"}, "storage": {"files": [{"path": "/etc/foo", "contents": {"source": "data:,${random}"}}]}}
+EOF
+}
+(large_config | coreos-installer iso ignition embed -o - "${iso}" 2>&1 ||:) | grep -q "too large"
+rm "${out_iso}"
+(large_config | coreos-installer iso ignition embed -o "${out_iso}" "${iso}" 2>&1 ||:) | grep -q "too large"
+(large_config | coreos-installer iso ignition embed "${iso}" 2>&1 ||:) | grep -q "too large"
+
+# Clobber the **kargs** header magic and make sure we still succeed
+dd if=/dev/zero of="${iso}" seek=32672 count=8 bs=1 conv=notrunc status=none
+coreos-installer iso ignition embed -i <(echo "${config}") "${iso}" -o "${out_iso}"
+coreos-installer iso ignition embed -i <(echo "${config}") "${iso}" -o - >/dev/null
+coreos-installer iso ignition embed -i <(echo "${config}") "${iso}"
+coreos-installer iso ignition show "${iso}" >/dev/null
+coreos-installer iso ignition remove "${iso}" -o - >/dev/null
+rm "${out_iso}"
+coreos-installer iso ignition remove "${iso}" -o "${out_iso}"
+coreos-installer iso ignition remove "${iso}"
+
+# Done
+echo "Success."