#!/usr/bin/env bash # For the license, see the LICENSE file in the root directory. if [ "$(id -u)" -ne 0 ]; then echo "Need to be root to run this test." exit 77 fi if [ "$(uname -s)" != "Linux" ]; then # Due to using /proc//root echo "This test only runs only Linux." exit 77 fi if [ -z "$(type -P df)" ]; then echo "This test requires the 'df' tool." exit 77 fi ROOT=${abs_top_builddir:-$(dirname "$0")/..} TESTDIR=${abs_top_testdir:-$(dirname "$0")} SWTPM=swtpm SWTPM_EXE=${SWTPM_EXE:-$ROOT/src/swtpm/$SWTPM} PID_FILE=/${SWTPM}.pid VTPM_NAME="vtpm-test-chroot" SWTPM_DEV_NAME="/dev/${VTPM_NAME}" source ${TESTDIR}/common source ${TESTDIR}/test_common source ${TESTDIR}/test_cuse skip_test_no_tpm20 "${SWTPM_EXE}" trap "cleanup" SIGTERM EXIT function cleanup() { rm -rf $TPMDIR if [ -n "$PID" ]; then kill_quiet -SIGTERM $PID 2>/dev/null fi } for OPTION in --chroot -R; do TPMDIR="$(mktemp -d)" || exit 1 # CUSE TPM will only work if the filesystem does not have 'nodev' option mnt=$(df $TPMDIR | tail -n 1 | gawk '{print $1" "$6}') if [ -z "${mnt}" ]; then echo " Error: Could not determine filesystem and mount point of $TPMDIR" exit 1 fi nodev="$(grep -E "^${mnt} " /proc/mounts | gawk '{print ","$4","}' | grep ",nodev,")" if [ -n "${nodev}" ]; then echo " Error: '${mnt}' is mounted with nodev option. Skipping test." exit 77 fi mkdir $TPMDIR/dev mknod -m 0666 $TPMDIR/dev/urandom c 1 9 mknod -m 0666 $TPMDIR/dev/cuse c 10 203 $SWTPM_EXE cuse \ -n "$SWTPM_DEV_NAME" \ "$OPTION" $TPMDIR \ --tpmstate dir=/ \ --pid file=$PID_FILE \ --tpm2 \ --flags not-need-init \ ${SWTPM_TEST_SECCOMP_OPT} &>/dev/null & if wait_for_file $TPMDIR/$PID_FILE 3; then echo "Error: CUSE TPM did not write pidfile." exit 1 fi PID=$(ps aux | grep "cuse" | grep " ${SWTPM_DEV_NAME}" | grep -v grep | gawk '{print $2}') validate_pidfile $PID $TPMDIR/$PID_FILE if [ "$(readlink /proc/$PID/root)" != $TPMDIR ]; then echo "Test 1 failed: Unexpected chroot dir" exit 1 fi if [ ! -f ${TPMDIR}/tpm2-00.permall ]; then echo "Missing state file" exit 1 fi echo "Test $OPTION passed" cleanup done