122 lines
3.5 KiB
Bash
Executable File
122 lines
3.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# test-greeter-qemu.sh — bounded QEMU proof for the Red Bear greeter/auth surface.
|
|
|
|
set -euo pipefail
|
|
|
|
usage() {
|
|
cat <<'USAGE'
|
|
Usage: test-greeter-qemu.sh [--check]
|
|
|
|
Boot redbear-full in QEMU, log in on the fallback console, and verify the greeter daemon/socket
|
|
surface, invalid-login handling, and a bounded successful-login return-to-greeter proof.
|
|
USAGE
|
|
}
|
|
|
|
check_mode=0
|
|
for arg in "$@"; do
|
|
case "$arg" in
|
|
--help|-h|help)
|
|
usage
|
|
exit 0
|
|
;;
|
|
--check)
|
|
check_mode=1
|
|
;;
|
|
*)
|
|
echo "ERROR: unsupported argument $arg" >&2
|
|
usage >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
done
|
|
|
|
firmware=""
|
|
for candidate in \
|
|
/usr/share/ovmf/x64/OVMF.4m.fd \
|
|
/usr/share/OVMF/x64/OVMF.4m.fd \
|
|
/usr/share/ovmf/OVMF.fd \
|
|
/usr/share/OVMF/OVMF_CODE.fd \
|
|
/usr/share/qemu/edk2-x86_64-code.fd
|
|
do
|
|
if [[ -f "$candidate" ]]; then
|
|
firmware="$candidate"
|
|
break
|
|
fi
|
|
done
|
|
|
|
if [[ -z "$firmware" ]]; then
|
|
echo "ERROR: no usable x86_64 UEFI firmware found" >&2
|
|
exit 1
|
|
fi
|
|
|
|
arch="${ARCH:-$(uname -m)}"
|
|
image="build/$arch/redbear-full/harddrive.img"
|
|
|
|
if [[ ! -f "$image" ]]; then
|
|
echo "ERROR: missing image $image" >&2
|
|
echo "Build it first with: ./local/scripts/build-redbear.sh redbear-full" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [[ "$check_mode" -eq 0 ]]; then
|
|
exec qemu-system-x86_64 \
|
|
-name "Red Bear Greeter Validation" \
|
|
-device qemu-xhci \
|
|
-smp 4 \
|
|
-m 2048 \
|
|
-bios "$firmware" \
|
|
-chardev stdio,id=debug,signal=off,mux=on \
|
|
-serial chardev:debug \
|
|
-mon chardev=debug \
|
|
-machine q35 \
|
|
-device ich9-intel-hda -device hda-output \
|
|
-device virtio-net,netdev=net0 \
|
|
-netdev user,id=net0 \
|
|
-vga none \
|
|
-device virtio-gpu \
|
|
-drive file="$image",format=raw,if=none,id=drv0 \
|
|
-device nvme,drive=drv0,serial=NVME_SERIAL \
|
|
-enable-kvm -cpu host
|
|
fi
|
|
|
|
expect <<EOF
|
|
log_user 1
|
|
set timeout 240
|
|
spawn qemu-system-x86_64 -name {Red Bear Greeter Validation} -device qemu-xhci -smp 4 -m 2048 -bios $firmware -chardev stdio,id=debug,signal=off,mux=on -serial chardev:debug -mon chardev=debug -machine q35 -device ich9-intel-hda -device hda-output -device virtio-net,netdev=net0 -netdev user,id=net0 -vga none -device virtio-gpu -drive file=$image,format=raw,if=none,id=drv0 -device nvme,drive=drv0,serial=NVME_SERIAL -enable-kvm -cpu host
|
|
|
|
proc expect_or_fail {pattern description} {
|
|
expect {
|
|
-nocase -re \$pattern { return }
|
|
timeout {
|
|
puts stderr "ERROR: timed out waiting for \$description"
|
|
exit 1
|
|
}
|
|
eof {
|
|
puts stderr "ERROR: QEMU exited while waiting for \$description"
|
|
exit 1
|
|
}
|
|
}
|
|
}
|
|
|
|
expect_or_fail {login:} {login prompt}
|
|
send "root\r"
|
|
expect_or_fail {assword:} {password prompt}
|
|
send "password\r"
|
|
expect_or_fail {Type 'help' for available commands\.} {shell startup banner}
|
|
send "redbear-greeter-check\r"
|
|
expect_or_fail {Red Bear Greeter Runtime Check} {greeter check banner}
|
|
expect_or_fail {GREETER_HELLO=ok} {greeter hello marker}
|
|
send "redbear-greeter-check --invalid root wrong\r"
|
|
expect_or_fail {GREETER_INVALID=ok} {invalid-login marker}
|
|
send "redbear-greeter-check --valid root password\r"
|
|
expect_or_fail {GREETER_VALID=ok} {valid-login marker}
|
|
send "shutdown\r"
|
|
expect {
|
|
eof { exit 0 }
|
|
timeout {
|
|
puts stderr "ERROR: timed out waiting for QEMU shutdown"
|
|
exit 1
|
|
}
|
|
}
|
|
EOF
|