On Thu, Aug 18, 2022 at 03:16:30PM -0700, Boris Burkov wrote: > Test btrfs send/recv support for fs-verity. Includes tests for > signatures, salts, and interaction with chmod/caps. The last of those is > to ensure the various features that go in during inode_finalize interact > properly. > > This depends on the kernel patch adding support for send: > btrfs: send: add support for fs-verity > > And the btrfs-progs patch adding support for recv: > btrfs-progs: receive: add support for fs-verity > > Signed-off-by: Boris Burkov <boris@xxxxxx> > --- > Changes for v3: > - commit a few things from v2 that I left unstaged (277 in output, > true/false) > Changes for v2: > - btrfs/271 -> btrfs/277 > - YOUR NAME HERE -> Meta > - change 0/1 to false/true > - change drop caches to cycle mount > - get rid of unneeded _require_test > - compare file contents > > tests/btrfs/277 | 115 ++++++++++++++++++++++++++++++++++++++++++++ > tests/btrfs/277.out | 59 +++++++++++++++++++++++ > 2 files changed, 174 insertions(+) > create mode 100755 tests/btrfs/277 > create mode 100644 tests/btrfs/277.out > > diff --git a/tests/btrfs/277 b/tests/btrfs/277 > new file mode 100755 > index 00000000..251e2818 > --- /dev/null > +++ b/tests/btrfs/277 > @@ -0,0 +1,115 @@ > +#! /bin/bash > +# SPDX-License-Identifier: GPL-2.0 > +# Copyright (c) 2022 Meta, Inc. All Rights Reserved. > +# > +# FS QA Test 277 > +# > +# Test sendstreams involving fs-verity enabled files. > +# > +. ./common/preamble > +_begin_fstest auto quick verity send > + > +# Override the default cleanup function. > +_cleanup() > +{ > + cd / > + _restore_fsverity_signatures > + rm -r -f $tmp.* > +} > + > +# Import common functions. > +. ./common/filter > +. ./common/verity > + > +# real QA test starts here > + > +# Modify as appropriate. > +_supported_fs btrfs > +_require_scratch_verity > +_require_fsverity_builtin_signatures > +_require_command "$SETCAP_PROG" setcap > +_require_command "$GETCAP_PROG" getcap > + > +subv=$SCRATCH_MNT/subv > +fsv_file=$subv/file.fsv > +keyfile=$tmp.key.pem > +certfile=$tmp.cert.pem > +certfileder=$tmp.cert.der > +sigfile=$tmp.sig > +stream=$tmp.fsv.ss > + > +_test_send_verity() { > + local sig=$1 > + local salt=$2 > + local extra_args="" > + > + _scratch_mkfs >> $seqres.full > + _scratch_mount > + echo -e "\nverity send/recv test: sig: $sig salt: $salt" > + _disable_fsverity_signatures > + > + echo "create subvolume" > + $BTRFS_UTIL_PROG subv create $subv >> $seqres.full Please use full name of subcommands, ie. 'subvolume'
![]() |