kairos/kcrypt-challenger
1
0
Fork 0
mirror of https://github.com/kairos-io/kcrypt-challenger.git synced 2025-04-27 11:30:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
97 Commits 15 Branches 17 Tags 13 MiB
update_ghw
Commit Graph

97 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Itxaka
155f1c5283 Add /tmp/oem to scan dirs for config 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-09 23:02:56 +02:00
Itxaka
f62b4d5667 debug 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-09 12:37:53 +02:00
Itxaka
5ef3125cd2 Debug 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-09 11:53:42 +02:00
Itxaka
12837ce5ea 🤖 run in github CI 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-09 11:11:37 +02:00
Itxaka
fb04ff1c99 debug 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-04 21:43:47 +02:00
Itxaka
a58886aba3 debug logs 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-04 20:48:00 +02:00
Itxaka
2c9ae0cbca This confirms Im dumb and dont know how to program 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-04 19:50:53 +02:00
Itxaka
782333c175 Dont build the iso 5 times 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-04 16:26:03 +02:00
Itxaka
cb17bf4fd3 [Will drop]Allow building kcrypt from branches 
Otherwise any changes that need both wont pass tests.

Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-04 15:39:51 +02:00
Itxaka
e6b9b37f8e docker login 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-04 15:14:00 +02:00
Itxaka
bcc9b37749 Rework ginkgo 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-04 14:20:22 +02:00
Itxaka
ae0e1ba0b3 bump deps 
Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-04 14:18:31 +02:00
Itxaka
fb51593514 Bump ghw and fix label 
old label was the new FilesystemLabel. Now the label refers to the
partition label which is different

Signed-off-by: Itxaka <itxaka.garcia@spectrocloud.com>
 2023-05-04 11:35:19 +02:00
Itxaka
40267d4c24
Merge pull request #13 from kairos-io/bump-go-version-to-1.20.2 
⬆️ Bump go to 1.20
 2023-03-30 21:37:09 +02:00
Mauro Morales
e0ae7a12a4
Remove golint cuz it has some issues with cgo 
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
 2023-03-30 09:21:09 +02:00
Mauro Morales
c2c50877da
Remove patch number from defined go version 
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
 2023-03-30 09:19:58 +02:00
Mauro Morales
7a2627fcc8
Add go version to workflow 
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
 2023-03-29 15:47:00 +02:00
Mauro Morales
a0c4462f99
Update setup-go to v4 
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
 2023-03-29 15:44:09 +02:00
Mauro Morales
145dd400b1
Add lint workflow 
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
 2023-03-29 15:33:27 +02:00
Mauro Morales
95dbb0d0be
Add yamllint 
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
 2023-03-29 14:33:29 +02:00
Mauro Morales
0e56e52cbf
Bump go to 1.20 
Signed-off-by: Mauro Morales <mauro.morales@spectrocloud.com>
 2023-03-29 14:28:45 +02:00
Dimitris Karakasilis
3a22134226
Run tests with sudo to be able to access /dev/kvm 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-20 12:33:44 +02:00
Dimitris Karakasilis
7b561efed8
Try KVM on CI 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-17 17:59:38 +02:00
Dimitris Karakasilis
6ff6262459
Configure earthly to use the docker mirror in CI 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-17 17:11:26 +02:00
Dimitris Karakasilis
816013d33d
Don't use the earthly script 
in order to avoid nested docker and use the deployed docker mirror

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-17 16:06:51 +02:00
Dimitris Karakasilis
8d0fb0148d
export KUBECONFIG so that it's set when running commands in go tests 
Error:

```
  [FAILED] Error from server (NotFound): namespaces "actions-runner-system" not found
```
coming from: /runner/_work/kcrypt-challenger/kcrypt-challenger/tests/encryption_test.go:157

is suspicious. That namespace shouldn't exist in the test k3d cluster,
no idea why it was looked up. I suspect the env for the following
command somehow pointed to the "outer" cluster:

```
cmd := exec.Command("kubectl", "get", "secrets", ...)
```

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-17 15:53:02 +02:00
Dimitris Karakasilis
ffd5f18bcf
Fix error interface conversion: interface {} is []uint8, not string 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-17 15:20:18 +02:00
Dimitris Karakasilis
3b89def5b4
Make sure we run command in bash to avoid error in Ubuntu 
```
set: Illegal option -o pipefail
```

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-17 12:38:22 +02:00
Dimitris Karakasilis
887d67907b
Avoid the host cluster CIDR to let DNS work in k3d 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-17 11:52:14 +02:00
Dimitris Karakasilis
b0a7aa5fdf
Revert "Try to fix the MTU problem in a hackish way (tmp)" 
This reverts commit 40875bbae1.
 2023-02-16 11:14:30 +02:00
Dimitris Karakasilis
40875bbae1
Try to fix the MTU problem in a hackish way (tmp) 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-16 10:36:45 +02:00
Dimitris Karakasilis
7166b14c7e
Revert "Bump earthly" 
This reverts commit 9eb5d9b086.
 2023-02-16 09:57:25 +02:00
Dimitris Karakasilis
9eb5d9b086
Bump earthly 
hoping to get this fix:
https://github.com/earthly/earthly/issues/1934#issuecomment-1160819298

and see if it makes any difference

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-16 09:53:30 +02:00
Dimitris Karakasilis
4da6a4f3b0 "Modernize" the +iso target 
according to this example:
4e2dd37e70/Earthfile (L114)

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-16 09:08:15 +02:00
Dimitris Karakasilis
74fc9c62b4
Switch to ubuntu because opensuse repos time out 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-15 18:41:15 +02:00
Dimitris Karakasilis
f3f10b4919
Don't prompt 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-15 18:10:01 +02:00
Dimitris Karakasilis
3d4829859b
Run e2e tests on self-hosted runners 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-15 17:52:14 +02:00
Dimitris Karakasilis
8a17ff714c
Merge pull request #12 from kairos-io/346-tls-support 
346 tls support
 2023-02-15 12:28:20 +02:00
Dimitris Karakasilis
27114b8db8
Run e2e tests without earthly 
getting closer to running them with KVM enabled. This will require self
hosted runners with KVM enabled but we will get there eventually.

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-15 11:00:24 +02:00
Dimitris Karakasilis
1e3efb57cc
Split scenarios in different GA jobs 
to parallelise better and allow re-running just the failed tests

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-15 09:58:16 +02:00
Dimitris Karakasilis
0c236b6145
Let OnFailure handle abnormal VM termination 
now that peg gracefully terminates the VM when `Destroy` is called.

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-14 16:15:11 +02:00
Dimitris Karakasilis
d390f77688
Bump peg (after merging PR#9) 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-14 10:48:08 +02:00
Dimitris Karakasilis
266c4f20e9
Handle unexpected VM exit better and use a core image with working DNS 
Also print serial output when something goes wrong

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-14 10:09:46 +02:00
Dimitris Karakasilis
4c0b40d3a0
Add gettext-runtime in Earthly image 
which provides the `envsubst` command needed in the e2e test script

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-09 12:10:38 +02:00
Dimitris Karakasilis
08bb62f94e
Remove TODO 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-09 12:03:24 +02:00
Dimitris Karakasilis
0d3406fa7b
Fallback to system CAs 
No automated test for this case because it's complicated to get a
properly signed certificate in tests:

- the domain we use is sslip.io (not sure if letsencrypt would sign it)
- we need to use the letsencrypt production and that has quotas not
  suitable for CI

Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-09 11:48:59 +02:00
Dimitris Karakasilis
1cd4d9a7af
Implement test that checks invalid cert case 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-09 11:48:59 +02:00
Dimitris Karakasilis
d875e54171
Implement pinned certs 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-09 11:48:59 +02:00
Dimitris Karakasilis
2967fb0a6c
[WIP] Implement failing test for pinned cert 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-09 11:48:59 +02:00
Dimitris Karakasilis
e9433d2ba7
Move challenger server inside the cluster and serve with TLS 
Signed-off-by: Dimitris Karakasilis <dimitris@karakasilis.me>
 2023-02-09 11:48:59 +02:00