blob: ecebf4b9f686b2dd18f4b99e98b1001be9f44dd6 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
#!/bin/sh
# image-customize script to prepare a bots VM for testing cockpit
# The cockpit packages will be installed separately
set -eu
if type firewall-cmd >/dev/null 2>&1; then
firewall-cmd --add-service=cockpit --permanent
fi
. /usr/lib/os-release
# our tests expect cockpit.socket to not be running after boot, only after start_cockpit()
if ! type rpm-ostree >/dev/null 2>&1; then
systemctl disable cockpit.socket
fi
# OS specific hacks
if [ "$ID" = "debian" ] || [ "$ID" = "ubuntu" ]; then
# avoid random dpkg database locks, they break our package related tests
systemctl disable apt-daily-upgrade.timer
# create public firewalld zone for our firewall tests
systemctl start firewalld
firewall-cmd --zone=public --permanent --add-interface=eth1
# HACK: tuned breaks QEMU (https://launchpad.net/bugs/1774000)
systemctl disable tuned.service 2>/dev/null || true
# disarm 10-cloudimg-settings.conf
sed -i '/.*PasswordAuthentication no/d' /etc/ssh/sshd_config $(ls /etc/ssh/sshd_config.d/* 2>/dev/null || true)
fi
if [ "$ID" = "debian" ]; then
# make libpwquality less aggressive, so that our "foobar" password works
printf 'dictcheck = 0\nminlen = 6\n' >> /etc/security/pwquality.conf
# Allow libvirtd coredumps
echo '* soft core unlimited' >> /etc/security/limits.conf
fi
PLATFORM_ID="${PLATFORM_ID:-}"
if [ "${PLATFORM_ID#platform:el}" != "$PLATFORM_ID" ]; then
# allow /usr/local/bin/ in sudo shells, to use our installed tools like the Python bridge
# Fedora, Debian etc. do that
echo 'Defaults secure_path = /sbin:/usr/sbin:/usr/local/bin:/bin:/usr/bin' > /etc/sudoers.d/usr-local
fi
# start cockpit once to ensure it works, and generate the certificate (to avoid re-doing that for each test)
systemctl start cockpit
systemctl stop cockpit
# clean out the journal
journalctl --flush
journalctl --sync || killall systemd-journald
rm -rf /var/log/journal/*
rm -rf /var/lib/NetworkManager/dhclient-*.lease
|
