new file mode 100644
@@ -0,0 +1,74 @@
+device_type: qemu
+job_name: qemu #architecture# IEC layer testing
+timeouts:
+ job:
+ minutes: 30
+ action:
+ minutes: 20
+ actions:
+ power-off:
+ seconds: 60
+priority: medium
+tags:
+- swtpm-jobs
+visibility: public
+notify:
+ criteria:
+ status: finished
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@lists.cip-project.org
+
+# ACTION BLOCK
+actions:
+- command:
+ name: start_tpm
+ timeout:
+ minutes: 20
+
+# DEPLOY BLOCK
+- deploy:
+ timeout:
+ minutes: 15
+ to: tmpfs
+ images:
+ system:
+ image_arg: '-drive file={system},discard=unmap,if=none,id=disk,format=raw -m 1G -serial mon:stdio -smp 4
+ -nographic -netdev user,id=net,hostfwd=tcp:127.0.0.1:22222-:22 -chardev socket,id=chrtpm,path=/tmp/qemu-swtpm.sock
+ -tpmdev emulator,id=tpm0,chardev=chrtpm #imageargs#'
+ url: #project_url#/#branch#/qemu-#architecture#/cip-core-image-security-cip-core-#distribution#-qemu-#architecture#.wic.xz
+ compression: xz
+
+ #Firmware#
+ #Firmware_args#
+ #Firmware_url#
+
+# BOOT BLOCK
+- boot:
+ timeout:
+ minutes: 15
+ method: qemu
+ media: tmpfs
+ prompts: ["root@demo:~#"]
+ auto_login:
+ login_prompt: "demo login:"
+ username: "root"
+ password_prompt: "Password:"
+ password: "CIPsecurity@123"
+
+# TEST_BLOCK
+- test:
+ timeout:
+ minutes: 30
+ definitions:
+ - repository: https://gitlab.com/cip-project/cip-testing/cip-security-tests.git
+ from: git
+ branch: master
+ path: iec-security-tests/Singlenode-TestDefinition.yaml
+ name: Security-Testcases
+
+context:
+ arch: #architecture#
+ guestfs_interface: virtio
+ lava_test_results_dir: '/home/lava-%s'
new file mode 100644
@@ -0,0 +1,65 @@
+device_type: qemu
+job_name: qemu #architecture# secure boot testing
+timeouts:
+ job:
+ minutes: 30
+ action:
+ minutes: 20
+ actions:
+ power-off:
+ seconds: 60
+priority: medium
+tags:
+- swtpm-jobs
+visibility: public
+notify:
+ criteria:
+ status: finished
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@lists.cip-project.org
+
+# ACTION BLOCK
+actions:
+- command:
+ name: start_tpm
+ timeout:
+ minutes: 20
+
+# DEPLOY BLOCK
+- deploy:
+ timeout:
+ minutes: 15
+ to: tmpfs
+ images:
+ system:
+ image_arg: '-drive file={system},discard=unmap,if=none,id=disk,format=raw -m 1G -serial mon:stdio -smp 4
+ -nographic -netdev user,id=net,hostfwd=tcp:127.0.0.1:22222-:22 -chardev socket,id=chrtpm,path=/tmp/qemu-swtpm.sock
+ -tpmdev emulator,id=tpm0,chardev=chrtpm #imageargs#'
+ url: #project_url#/#branch#/qemu-#architecture#/cip-core-image-security-cip-core-#distribution#-qemu-#architecture#.wic.xz
+ compression: xz
+
+ #Firmware#
+ #Firmware_args#
+ #Firmware_url#
+
+# BOOT BLOCK
+- boot:
+ timeout:
+ minutes: 15
+ method: qemu
+ media: tmpfs
+ prompts: ["root@demo:~#"]
+ auto_login:
+ login_prompt: "demo login:"
+ username: "root"
+ password_prompt: "Password:"
+ password: "CIPsecurity@123"
+ parameters:
+ kernel-start-message: "EFI stub: UEFI Secure Boot is enabled."
+
+context:
+ arch: #architecture#
+ guestfs_interface: virtio
+ lava_test_results_dir: '/home/lava-%s'
new file mode 100644
@@ -0,0 +1,125 @@
+device_type: qemu
+job_name: qemu #architecture# software update testing
+timeouts:
+ job:
+ minutes: 30
+ action:
+ minutes: 20
+ actions:
+ power-off:
+ seconds: 60
+tags:
+- swtpm-jobs
+priority: medium
+visibility: public
+notify:
+ criteria:
+ status: finished
+ recipients:
+ - to:
+ method: email
+ email: cip-testing-results@lists.cip-project.org
+
+# ACTION BLOCK
+actions:
+- command:
+ name: start_tpm
+ timeout:
+ minutes: 20
+
+# DEPLOY BLOCK
+- deploy:
+ timeout:
+ minutes: 15
+ to: tmpfs
+ images:
+ system:
+ image_arg: '-drive file={system},discard=unmap,if=none,id=disk,format=raw -m 1G -serial mon:stdio -smp 4
+ -nographic -netdev user,id=net,hostfwd=tcp:127.0.0.1:22222-:22 -chardev socket,id=chrtpm,path=/tmp/qemu-swtpm.sock
+ -tpmdev emulator,id=tpm0,chardev=chrtpm #imageargs#'
+ url: #project_url#/#branch#/qemu-#architecture#/cip-core-image-security-cip-core-#distribution#-qemu-#architecture#.wic.xz
+ compression: xz
+
+ #Firmware#
+ #Firmware_args#
+ #Firmware_url#
+
+# BOOT BLOCK
+- boot:
+ timeout:
+ minutes: 15
+ method: qemu
+ media: tmpfs
+ prompts: ["root@demo:~#"]
+ auto_login:
+ login_prompt: "demo login:"
+ username: "root"
+ password_prompt: "Password:"
+ password: "CIPsecurity@123"
+
+# TEST_BLOCK
+# Sleep 200s is added to make the job incomplete with a timeout if software update application failed
+- test:
+ timeout:
+ minutes: 5
+ definitions:
+ - repository:
+ metadata:
+ format: Lava-Test Test Definition 1.0
+ name: sample-test
+ description: "Test software update"
+ run:
+ steps:
+ - if swupdate -d "-u #project_url#/#branch#/qemu-#architecture#/cip-core-image-security-cip-core-#distribution#-qemu-#architecture#.swu"; then echo software update is successful!!; else sleep 200s; fi
+ from: inline
+ name: sample-test-1
+ path: inline/sample-test.yaml
+
+# qemu-swtpm.sock will be gone after soft reboot.
+# So the swtpm socket need to be started again for proper reboot
+# To start the swtpm daemon, first the existing one should be killed
+- command:
+ name: manual_kill
+ timeout:
+ minutes: 1
+# Start the swtpm daemon
+- command:
+ name: start_tpm
+ timeout:
+ minutes: 1
+
+- boot:
+ timeout:
+ minutes: 5
+ method: qemu
+ media: tmpfs
+ prompts: ["root@demo:~#"]
+ auto_login:
+ login_prompt: "demo login:"
+ username: "root"
+ password_prompt: "Password:"
+ password: "CIPsecurity@123"
+ parameters:
+ kernel-start-message: "kernel: C:BOOT1:linux.efi"
+
+# sleep 180s is added to make the job incomplete if ustate is not 2 in the updated partition
+- test:
+ timeout:
+ minutes: 5
+ definitions:
+ - repository:
+ metadata:
+ format: Lava-Test Test Definition 1.0
+ name: sample-test
+ description: "check boot loader environment variables"
+ run:
+ steps:
+ - if [ $(bg_printenv | grep ustate | awk 'FNR == 2{print $2}') = 2 ]; then bg_setenv -c; else sleep 180s; fi
+ from: inline
+ name: sample-test-2
+ path: inline/sample-test.yaml
+
+context:
+ arch: #architecture#
+ guestfs_interface: virtio
+ lava_test_results_dir: '/home/lava-%s'