HIRS/.ci/setup/container/setup_tpmprovisioner.sh

#!/bin/bash

# Script to setup the TPM 1.2 Provisioner Docker Image for Integration Tests
set -e

# Wait for ACA to boot
echo "Waiting for ACA to spin up..."
until [ "`curl --silent --connect-timeout 1 -I -k https://${HIRS_ACA_PORTAL_IP}:${HIRS_ACA_PORTAL_PORT}/HIRS_AttestationCAPortal | grep '302 Found'`" != "" ]; do
  :
done
echo "ACA is up!"

# Function to install TPM 1.2 Provisioner packages
function InstallProvisioner {
   echo "===========Installing TPM 1.2 Provisioner Packages...==========="

   pushd /HIRS

   if [ ! -d package/rpm/RPMS ]; then
       ./package/package.centos.sh
   fi

   yum install -y package/rpm/RPMS/noarch/HIRS_Provisioner_TPM_1_2*.el7.noarch.rpm

   popd
}

# Function to initialize the TPM 1.2 Emulator
function InitTpmEmulator {
   echo "===========Initializing TPM 1.2 Emulator...==========="

   # Set variables for server
   export TPM_PATH=/tpm_emulator/tpm_storage
   export TPM_PORT=6543

   # Set variables for client utils
   export TPM_SERVER_NAME=localhost
   export TPM_SERVER_PORT=6543

   # Set variable for TrouSerS
   export TCSD_TCP_DEVICE_PORT=6543

   mkdir -p $TPM_PATH

   pushd /tpm_emulator

   echo "Activate Software TPM..."
   # Activate Software TPM
   ./tpm/tpm_server > tpm.log 2>&1 &
   ./libtpm/utils/tpmbios

   echo "Restarting Software TPM after Activation..."
   # Restart Software TPM after Activation
   pkill tpm_server
   ./tpm/tpm_server > tpm.log 2>&1 &
   ./libtpm/utils/tpmbios

   echo "Creating EK on Software TPM..."
   # Create EK on Software TPM
   ./libtpm/utils/createek

   echo "Initializing last memory address..."
   # Initialize last memory address
   ./libtpm/utils/nv_definespace -in ffffffff -sz 0

   popd

   echo "Starting TrouSerS Daemon..."
   tcsd -e

   echo "Taking TPM 1.2 Ownership..."
   tpm_takeownership -y -z

   echo "Testing TPM 1.2 Connectivity..."
   tpm_selftest

   echo "TPM 1.2 NV info..."
   tpm_nvinfo

   echo "===========TPM 1.2 Emulator Initialization Complete!==========="
}

# Function to update the hirs-site.config file
function UpdateHirsSiteConfigFile {
   HIRS_SITE_CONFIG="/etc/hirs/hirs-site.config"

   echo ""
   echo "===========Updating ${HIRS_SITE_CONFIG}, using values from /HIRS/.ci/docker/.env file...==========="
   cat /HIRS/.ci/docker/.env

   cat <<DEFAULT_SITE_CONFIG_FILE > $HIRS_SITE_CONFIG
#*******************************************
#* HIRS site configuration properties file
#*******************************************
CLIENT_HOSTNAME=${HIRS_ACA_PROVISIONER_IP}
TPM_ENABLED=${TPM_ENABLED}
IMA_ENABLED=${IMA_ENABLED}

# Site-specific configuration
ATTESTATION_CA_FQDN=${HIRS_ACA_HOSTNAME}
ATTESTATION_CA_PORT=${HIRS_ACA_PORTAL_PORT}
BROKER_FQDN=${HIRS_ACA_PORTAL_IP}
BROKER_PORT=${HIRS_BROKER_PORT}
PORTAL_FQDN=${HIRS_ACA_PORTAL_IP}
PORTAL_PORT=${HIRS_ACA_PORTAL_PORT}

DEFAULT_SITE_CONFIG_FILE

  echo "===========New HIRS Config File==========="
  cat /etc/hirs/hirs-site.config
}

function UpdateLoggingConfigFile {
   LOGGING_CONFIG="/etc/hirs/logging.properties"

   echo ""
   echo "===========Updating ${LOGGING_CONFIG} file...==========="
   cat /etc/hirs/logging.properties

   cat <<DEFAULT_LOGGING_CONFIG_FILE > $LOGGING_CONFIG
root.level=DEBUG
hirs.level=DEBUG
org.hibernate.level=
org.springframework.level=
org.apache.activemq.level=
tpm2_provisioner.level=DEBUG

DEFAULT_LOGGING_CONFIG_FILE

  echo ""
  echo "===========New Logging Properties File==========="
  cat /etc/hirs/logging.properties
}

# Install packages
InstallProvisioner

# Install TPM 1.2 Emulator
InitTpmEmulator

# Update the hirs-site.config file
UpdateHirsSiteConfigFile

# Update the logging.properties file
UpdateLoggingConfigFile

# Set alias to use python3
echo "===========Python Version==========="
python3 --version
alias python='/usr/bin/python3.6'
alias

echo ""
echo "===========HIRS ACA TPM 1.2 Provisioner Setup Complete!==========="