Skip to content

Commit f91b713

Browse files
bgartzibgartzi
committed
platforms: Ensure proper pcr prediction for azure
Adds test-fixtures for azure, and makes sure that tests for that platform are run in github ci. Adds the host-platform matrix variable to the tests job. For now, we will only test the azure platform with the fedora coreos 42 image as that's the only data we've gathered for now. It also excludes secureboot-disabled tests for the azure platform, as we haven't measured that case for now either. Signed-off-by: Beñat Gartzia Arruabarrena <[email protected]>
1 parent 624f665 commit f91b713

File tree

5 files changed

+189
-1
lines changed

5 files changed

+189
-1
lines changed

‎.github/workflows/tests.yml‎

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,14 @@ jobs:
3232
target-image-url:
3333
- "https://builds.coreos.fedoraproject.org/prod/streams/stable/builds/42.20250929.3.0/x86_64/fedora-coreos-42.20250929.3.0-ostree.x86_64.ociarchive"
3434
- "https://mirror.openshift.com/pub/openshift-v4/dependencies/rhcos/4.19/4.19.0/rhcos-4.19.0-x86_64-ostree.x86_64.ociarchive"
35+
test-finder:
36+
- grep -E "^ *test-.*$" | grep -v uki
37+
host-platform:
38+
- qemu-ovmf/fedora-42
39+
include:
40+
- target-image-url: "https://builds.coreos.fedoraproject.org/prod/streams/stable/builds/42.20250929.3.0/x86_64/fedora-coreos-42.20250929.3.0-ostree.x86_64.ociarchive"
41+
host-platform: azure/20251013
42+
test-finder: grep -E "^ *test-.*$" | grep -v uki | grep -v test-secureboot-disabled
3543
steps:
3644
- name: "Check out repository"
3745
uses: actions/checkout@v5
@@ -47,4 +55,8 @@ jobs:
4755
- name: "Cache build artifacts"
4856
uses: Swatinem/rust-cache@v2
4957
- name: "Run just tests"
50-
run: just --set image ${{ matrix.target-image-url }} -v $(just -l | grep -E "^ *test-.*$" | grep -v uki)
58+
run: |
59+
just -v \
60+
--set image ${{ matrix.target-image-url }} \
61+
--set host_platform ${{ matrix.host-platform }} \
62+
$(just -l | ${{ matrix.test-finder }})

‎test-fixtures/azure/20251013/fedora-42.20250929.3.0/all-pcrs.json‎

Lines changed: 90 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,90 @@
1+
{
2+
"pcrs": [
3+
{
4+
"id": 4,
5+
"value": "551bbd142a716c67cd78336593c2eb3b547b575e810ced4501d761082b5cd4a8",
6+
"parts": [
7+
{
8+
"name": "EV_EFI_ACTION",
9+
"hash": "3d6772b4f84ed47595d72a2c4c5ffd15f5bb72c7507fe26f2aaee2c69d5633ba"
10+
},
11+
{
12+
"name": "EV_SEPARATOR",
13+
"hash": "df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119"
14+
},
15+
{
16+
"name": "EV_EFI_BOOT_SERVICES_APPLICATION",
17+
"hash": "94896c17d49fc8c8df0cc2836611586edab1615ce7cb58cf13fc5798de56b367"
18+
},
19+
{
20+
"name": "EV_EFI_BOOT_SERVICES_APPLICATION",
21+
"hash": "bc6844fc7b59b4f0c7da70a307fc578465411d7a2c34b0f4dc2cc154c873b644"
22+
},
23+
{
24+
"name": "EV_EFI_BOOT_SERVICES_APPLICATION",
25+
"hash": "2b1dc59bc61dbbc3db11a6f3b0708c948efd46cceb7f6c8ea2024b8d1b8c829a"
26+
}
27+
]
28+
},
29+
{
30+
"id": 7,
31+
"value": "ab106842509649106881ac864d8ea4086b3f3bfc3fcc69f25e18083ffcaa6888",
32+
"parts": [
33+
{
34+
"name": "EV_EFI_VARIABLE_DRIVER_CONFIG",
35+
"hash": "ccfc4bb32888a345bc8aeadaba552b627d99348c767681ab3141f5b01e40a40e"
36+
},
37+
{
38+
"name": "EV_EFI_VARIABLE_DRIVER_CONFIG",
39+
"hash": "827f3ad1828bd20cc03a5624d4ce3f1cf74910715cc764f69800fefd8f406dc6"
40+
},
41+
{
42+
"name": "EV_EFI_VARIABLE_DRIVER_CONFIG",
43+
"hash": "f2ff789f4c200f638f38a453c3128398d4f30181c9c4b46ebb32ba5e19c73b0a"
44+
},
45+
{
46+
"name": "EV_EFI_VARIABLE_DRIVER_CONFIG",
47+
"hash": "c1bc3e1aeb319c357129dc6e8e51c9a92abd135aabec122fca5f6cae0e477686"
48+
},
49+
{
50+
"name": "EV_EFI_VARIABLE_DRIVER_CONFIG",
51+
"hash": "bcc3309a60c8fab0ed90e1c15deec7a18de9f65d318af79c0f3f7bb7701cc3ad"
52+
},
53+
{
54+
"name": "EV_SEPARATOR",
55+
"hash": "df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119"
56+
},
57+
{
58+
"name": "EV_EFI_VARIABLE_AUTHORITY",
59+
"hash": "4d4a8e2c74133bbdc01a16eaf2dbb5d575afeb36f5d8dfcf609ae043909e2ee9"
60+
},
61+
{
62+
"name": "EV_EFI_VARIABLE_AUTHORITY",
63+
"hash": "e8e9578f5951ef16b1c1aa18ef02944b8375ec45ed4b5d8cdb30428db4a31016"
64+
},
65+
{
66+
"name": "EV_EFI_VARIABLE_AUTHORITY",
67+
"hash": "ad5901fd581e6640c742c488083b9ac2c48255bd28a16c106c6f9df52702ee3f"
68+
}
69+
]
70+
},
71+
{
72+
"id": 14,
73+
"value": "17cdefd9548f4383b67a37a901673bf3c8ded6f619d36c8007562de1d93c81cc",
74+
"parts": [
75+
{
76+
"name": "EV_IPL",
77+
"hash": "e8e48e3ad10bc243341b4663c0057aef0ec7894ccc9ecb0598f0830fa57f7220"
78+
},
79+
{
80+
"name": "EV_IPL",
81+
"hash": "8d8a3aae50d5d25838c95c034aadce7b548c9a952eb7925e366eda537c59c3b0"
82+
},
83+
{
84+
"name": "EV_IPL",
85+
"hash": "4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a"
86+
}
87+
]
88+
}
89+
]
90+
}

‎test-fixtures/azure/20251013/fedora-42.20250929.3.0/pcr14.json‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
{
2+
"id": 14,
3+
"value": "17cdefd9548f4383b67a37a901673bf3c8ded6f619d36c8007562de1d93c81cc",
4+
"parts": [
5+
{
6+
"name": "EV_IPL",
7+
"hash": "e8e48e3ad10bc243341b4663c0057aef0ec7894ccc9ecb0598f0830fa57f7220"
8+
},
9+
{
10+
"name": "EV_IPL",
11+
"hash": "8d8a3aae50d5d25838c95c034aadce7b548c9a952eb7925e366eda537c59c3b0"
12+
},
13+
{
14+
"name": "EV_IPL",
15+
"hash": "4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a"
16+
}
17+
]
18+
}

‎test-fixtures/azure/20251013/fedora-42.20250929.3.0/pcr4.json‎

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
{
2+
"id": 4,
3+
"value": "551bbd142a716c67cd78336593c2eb3b547b575e810ced4501d761082b5cd4a8",
4+
"parts": [
5+
{
6+
"name": "EV_EFI_ACTION",
7+
"hash": "3d6772b4f84ed47595d72a2c4c5ffd15f5bb72c7507fe26f2aaee2c69d5633ba"
8+
},
9+
{
10+
"name": "EV_SEPARATOR",
11+
"hash": "df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119"
12+
},
13+
{
14+
"name": "EV_EFI_BOOT_SERVICES_APPLICATION",
15+
"hash": "94896c17d49fc8c8df0cc2836611586edab1615ce7cb58cf13fc5798de56b367"
16+
},
17+
{
18+
"name": "EV_EFI_BOOT_SERVICES_APPLICATION",
19+
"hash": "bc6844fc7b59b4f0c7da70a307fc578465411d7a2c34b0f4dc2cc154c873b644"
20+
},
21+
{
22+
"name": "EV_EFI_BOOT_SERVICES_APPLICATION",
23+
"hash": "2b1dc59bc61dbbc3db11a6f3b0708c948efd46cceb7f6c8ea2024b8d1b8c829a"
24+
}
25+
]
26+
}

‎test-fixtures/azure/20251013/fedora-42.20250929.3.0/pcr7-sb-enabled.json‎

Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
{
2+
"id": 7,
3+
"value": "ab106842509649106881ac864d8ea4086b3f3bfc3fcc69f25e18083ffcaa6888",
4+
"parts": [
5+
{
6+
"name": "EV_EFI_VARIABLE_DRIVER_CONFIG",
7+
"hash": "ccfc4bb32888a345bc8aeadaba552b627d99348c767681ab3141f5b01e40a40e"
8+
},
9+
{
10+
"name": "EV_EFI_VARIABLE_DRIVER_CONFIG",
11+
"hash": "827f3ad1828bd20cc03a5624d4ce3f1cf74910715cc764f69800fefd8f406dc6"
12+
},
13+
{
14+
"name": "EV_EFI_VARIABLE_DRIVER_CONFIG",
15+
"hash": "f2ff789f4c200f638f38a453c3128398d4f30181c9c4b46ebb32ba5e19c73b0a"
16+
},
17+
{
18+
"name": "EV_EFI_VARIABLE_DRIVER_CONFIG",
19+
"hash": "c1bc3e1aeb319c357129dc6e8e51c9a92abd135aabec122fca5f6cae0e477686"
20+
},
21+
{
22+
"name": "EV_EFI_VARIABLE_DRIVER_CONFIG",
23+
"hash": "bcc3309a60c8fab0ed90e1c15deec7a18de9f65d318af79c0f3f7bb7701cc3ad"
24+
},
25+
{
26+
"name": "EV_SEPARATOR",
27+
"hash": "df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119"
28+
},
29+
{
30+
"name": "EV_EFI_VARIABLE_AUTHORITY",
31+
"hash": "4d4a8e2c74133bbdc01a16eaf2dbb5d575afeb36f5d8dfcf609ae043909e2ee9"
32+
},
33+
{
34+
"name": "EV_EFI_VARIABLE_AUTHORITY",
35+
"hash": "e8e9578f5951ef16b1c1aa18ef02944b8375ec45ed4b5d8cdb30428db4a31016"
36+
},
37+
{
38+
"name": "EV_EFI_VARIABLE_AUTHORITY",
39+
"hash": "ad5901fd581e6640c742c488083b9ac2c48255bd28a16c106c6f9df52702ee3f"
40+
}
41+
]
42+
}

0 commit comments

Comments
 (0)