Paul Meyer
28a1975396
Check that credentials passed via systemd-vmspawn --set-credential and on the command line via systemd.set_credential= are successfully delivered on a SNP coco guest. Signed-off-by: Paul Meyer <katexochen0@gmail.com>
23 lines
892 B
Bash
23 lines
892 B
Bash
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
# shellcheck shell=bash
|
|
# Every constant here is consumed by whichever side sources this file, never by this file itself.
|
|
# shellcheck disable=SC2034
|
|
#
|
|
# Fixtures for the confidential computing integration test (TEST-94-COCO). Shared by the host-side
|
|
# boot scenarios, which deliver these credentials over trusted and untrusted channels alike, and by
|
|
# the guest-side checks, which assert where each one ended up, so the two sides cannot drift apart.
|
|
|
|
if [[ "${BASH_SOURCE[0]}" -ef "$0" ]]; then
|
|
echo >&2 "This file should not be executed directly"
|
|
exit 1
|
|
fi
|
|
|
|
# Name of the guest self-check unit lib.sh injects.
|
|
COCO_GUEST_UNIT="coco-guest.service"
|
|
|
|
# Credentials by channel
|
|
COCO_CRED_TRUSTED_ID="coco.trusted"
|
|
COCO_CRED_TRUSTED_VALUE="trusted-via-vmspawn"
|
|
COCO_CRED_CMDLINE_ID="coco.cmdline"
|
|
COCO_CRED_CMDLINE_VALUE="trusted-via-cmdline"
|