test: add VM boot test framework and system tests
Create comprehensive system testing infrastructure for runtime verification of the KNEL-Football ISO. test-iso.sh (VM test framework): - VM creation via virt-install with UEFI support - Prerequisite checking (libvirt group, virsh, ISO) - Boot test automation with timeout handling - Secure Boot and FDE test commands - Console access via virsh console - Color-coded logging for clarity tests/system/boot_test.bats (14 tests): - Libvirt availability and access verification - ISO existence and size validation - SHA256 and MD5 checksum verification - test-iso.sh framework validation tests/system/secureboot_test.bats (10 tests): - Secure Boot package verification in package list - UEFI/GPT partitioning configuration tests - LUKS2 encryption configuration validation tests/system/fde_test.bats (23 tests): - Encryption setup script existence tests - LUKS2 configuration validation - AES-256-XTS cipher verification - 512-bit key length verification - Initramfs and crypttab configuration - Helper scripts creation validation - Password policy enforcement tests - Runtime FDE test placeholders (skip if no VM) Test execution: - All tests pass with appropriate skips when prerequisites (libvirt group, ISO) are not met - Zero failures in static analysis portion Total: 47 new system tests 💘 Generated with Crush Assisted-by: GLM-5 via Crush <crush@charm.land>
This commit is contained in:
Charles N Wyble
272
test-iso.sh
Executable file
272
test-iso.sh
Executable file
@@ -0,0 +1,272 @@
|
||||
#!/bin/bash
|
||||
# KNEL-Football ISO VM Testing Framework
|
||||
# Uses libvirt/virsh to test ISO boot and runtime behavior
|
||||
# Copyright © 2026 Known Element Enterprises LLC
|
||||
# License: GNU Affero General Public License v3.0 only
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
# Configuration
|
||||
SCRIPT_DIR=""
|
||||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||
readonly SCRIPT_DIR
|
||||
readonly ISO_PATH="${SCRIPT_DIR}/output/knel-football-secure-v1.0.0.iso"
|
||||
readonly VM_NAME="knel-football-test"
|
||||
readonly VM_RAM="2048"
|
||||
readonly VM_CPUS="2"
|
||||
readonly VM_DISK_SIZE="10G"
|
||||
readonly VM_DISK_PATH="/tmp/${VM_NAME}.qcow2"
|
||||
|
||||
# Colors for output
|
||||
readonly RED='\033[0;31m'
|
||||
readonly GREEN='\033[0;32m'
|
||||
readonly YELLOW='\033[1;33m'
|
||||
readonly NC='\033[0m' # No Color
|
||||
|
||||
# Logging functions
|
||||
log_info() { echo -e "${GREEN}[INFO]${NC} $1"; }
|
||||
log_warn() { echo -e "${YELLOW}[WARN]${NC} $1"; }
|
||||
log_error() { echo -e "${RED}[ERROR]${NC} $1"; }
|
||||
|
||||
# Check prerequisites
|
||||
check_prerequisites() {
|
||||
log_info "Checking prerequisites..."
|
||||
|
||||
# Check if user is in libvirt group
|
||||
if ! groups | grep -q libvirt; then
|
||||
log_error "User is NOT in the libvirt group"
|
||||
log_error "Run: sudo usermod -aG libvirt \$USER"
|
||||
log_error "Then logout and login again"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# Check for virsh command
|
||||
if ! command -v virsh &> /dev/null; then
|
||||
log_error "virsh command not found"
|
||||
log_error "Install libvirt: sudo apt install libvirt-clients libvirt-daemon-system qemu-system-x86"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# Check for qemu-img command
|
||||
if ! command -v qemu-img &> /dev/null; then
|
||||
log_error "qemu-img command not found"
|
||||
log_error "Install qemu: sudo apt install qemu-utils"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# Check if libvirtd is running
|
||||
if ! systemctl is-active --quiet libvirtd 2>/dev/null; then
|
||||
log_warn "libvirtd service not active, attempting to start..."
|
||||
sudo systemctl start libvirtd || {
|
||||
log_error "Could not start libvirtd"
|
||||
return 1
|
||||
}
|
||||
fi
|
||||
|
||||
# Check ISO exists
|
||||
if [[ ! -f "$ISO_PATH" ]]; then
|
||||
log_error "ISO not found at: $ISO_PATH"
|
||||
log_error "Build the ISO first: ./run.sh iso"
|
||||
return 1
|
||||
fi
|
||||
|
||||
log_info "All prerequisites satisfied"
|
||||
return 0
|
||||
}
|
||||
|
||||
# Create VM disk image
|
||||
create_disk() {
|
||||
log_info "Creating disk image: $VM_DISK_PATH"
|
||||
rm -f "$VM_DISK_PATH"
|
||||
qemu-img create -f qcow2 "$VM_DISK_PATH" "$VM_DISK_SIZE"
|
||||
}
|
||||
|
||||
# Create and start VM
|
||||
create_vm() {
|
||||
log_info "Creating VM: $VM_NAME"
|
||||
|
||||
# Destroy existing VM if present
|
||||
virsh destroy "$VM_NAME" 2>/dev/null || true
|
||||
virsh undefine "$VM_NAME" 2>/dev/null || true
|
||||
|
||||
# Create disk
|
||||
create_disk
|
||||
|
||||
# Create and define VM
|
||||
virt-install \
|
||||
--name "$VM_NAME" \
|
||||
--ram "$VM_RAM" \
|
||||
--vcpus "$VM_CPUS" \
|
||||
--disk path="$VM_DISK_PATH",format=qcow2 \
|
||||
--cdrom "$ISO_PATH" \
|
||||
--os-variant debian12 \
|
||||
--network network=default \
|
||||
--graphics vnc,listen=0.0.0.0 \
|
||||
--boot uefi \
|
||||
--noautoconsole \
|
||||
--virt-type kvm
|
||||
}
|
||||
|
||||
# Connect to VM console
|
||||
connect_console() {
|
||||
log_info "Connecting to VM console..."
|
||||
virsh console "$VM_NAME"
|
||||
}
|
||||
|
||||
# Get VM status
|
||||
vm_status() {
|
||||
log_info "VM Status for: $VM_NAME"
|
||||
virsh dominfo "$VM_NAME" 2>/dev/null || log_error "VM not running"
|
||||
}
|
||||
|
||||
# Check if VM is running
|
||||
is_vm_running() {
|
||||
virsh domstate "$VM_NAME" 2>/dev/null | grep -q "running"
|
||||
}
|
||||
|
||||
# Wait for boot and capture screenshot
|
||||
capture_boot_screen() {
|
||||
local output_dir="${SCRIPT_DIR}/tmp/vm-screenshots"
|
||||
mkdir -p "$output_dir"
|
||||
|
||||
log_info "Capturing boot screen..."
|
||||
virsh screenshot "$VM_NAME" "${output_dir}/boot-screen.ppm" 2>/dev/null || {
|
||||
log_warn "Could not capture screenshot"
|
||||
}
|
||||
}
|
||||
|
||||
# Destroy VM and cleanup
|
||||
destroy_vm() {
|
||||
log_info "Destroying VM: $VM_NAME"
|
||||
virsh destroy "$VM_NAME" 2>/dev/null || true
|
||||
virsh undefine "$VM_NAME" 2>/dev/null || true
|
||||
rm -f "$VM_DISK_PATH"
|
||||
log_info "Cleanup complete"
|
||||
}
|
||||
|
||||
# Run automated boot test
|
||||
run_boot_test() {
|
||||
log_info "Running automated boot test..."
|
||||
|
||||
if ! check_prerequisites; then
|
||||
return 1
|
||||
fi
|
||||
|
||||
create_vm
|
||||
|
||||
log_info "Waiting for VM to boot (30 seconds)..."
|
||||
sleep 30
|
||||
|
||||
if is_vm_running; then
|
||||
log_info "VM is running - boot test PASSED"
|
||||
vm_status
|
||||
capture_boot_screen
|
||||
return 0
|
||||
else
|
||||
log_error "VM not running - boot test FAILED"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
# Test Secure Boot
|
||||
test_secure_boot() {
|
||||
log_info "Testing Secure Boot..."
|
||||
|
||||
if ! is_vm_running; then
|
||||
log_error "VM not running, start it first"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# Check if VM booted with Secure Boot
|
||||
# This is a basic check - more sophisticated checks would require
|
||||
# parsing the boot logs or using expect scripts
|
||||
log_info "Secure Boot verification requires manual console inspection"
|
||||
log_info "Use: $0 console"
|
||||
log_info "Then check: dmesg | grep -i secure"
|
||||
}
|
||||
|
||||
# Test FDE passphrase prompt
|
||||
test_fde_prompt() {
|
||||
log_info "Testing FDE passphrase prompt..."
|
||||
|
||||
if ! is_vm_running; then
|
||||
log_error "VM not running, start it first"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# FDE prompt appears during boot, requires console access
|
||||
log_info "FDE prompt verification requires manual console inspection"
|
||||
log_info "Use: $0 console"
|
||||
log_info "Watch for 'Please unlock disk' prompt during boot"
|
||||
}
|
||||
|
||||
# Show usage
|
||||
usage() {
|
||||
cat <<EOF
|
||||
KNEL-Football ISO VM Testing Framework
|
||||
|
||||
Usage: $0 <command>
|
||||
|
||||
Commands:
|
||||
check Check prerequisites (libvirt, ISO, etc.)
|
||||
create Create and start test VM
|
||||
console Connect to VM console
|
||||
status Show VM status
|
||||
destroy Destroy VM and cleanup
|
||||
boot-test Run automated boot test
|
||||
secure-boot Test Secure Boot (manual verification)
|
||||
fde-test Test FDE passphrase prompt (manual verification)
|
||||
help Show this help message
|
||||
|
||||
Prerequisites:
|
||||
- User must be in libvirt group
|
||||
- libvirtd service must be running
|
||||
- ISO must exist in output/
|
||||
|
||||
Examples:
|
||||
$0 check # Verify environment is ready
|
||||
$0 boot-test # Create VM, boot ISO, verify boot
|
||||
$0 console # Connect to running VM
|
||||
$0 destroy # Clean up test VM
|
||||
|
||||
Note: After adding user to libvirt group, logout and login again.
|
||||
EOF
|
||||
exit 1
|
||||
}
|
||||
|
||||
# Main entry point
|
||||
main() {
|
||||
local command="${1:-help}"
|
||||
|
||||
case "$command" in
|
||||
check)
|
||||
check_prerequisites
|
||||
;;
|
||||
create)
|
||||
check_prerequisites && create_vm
|
||||
;;
|
||||
console)
|
||||
connect_console
|
||||
;;
|
||||
status)
|
||||
vm_status
|
||||
;;
|
||||
destroy)
|
||||
destroy_vm
|
||||
;;
|
||||
boot-test)
|
||||
run_boot_test
|
||||
;;
|
||||
secure-boot)
|
||||
test_secure_boot
|
||||
;;
|
||||
fde-test)
|
||||
test_fde_prompt
|
||||
;;
|
||||
help|*)
|
||||
usage
|
||||
;;
|
||||
esac
|
||||
}
|
||||
|
||||
main "$@"
|
||||
Reference in New Issue
Block a user