Adolfo Delorenzo
6c15ba7776
The stock TinyCore kernel config has "# CONFIG_SECURITY is not set" which caused make olddefconfig to silently revert all security configs in a single pass. Fix by applying security configs (AppArmor, Audit, LSM) after the first olddefconfig resolves base dependencies, then running a second pass. Added mandatory verification that exits on missing critical configs. All QEMU test scripts converted from broken -cdrom + -append pattern to direct kernel boot (-kernel + -initrd) via shared test/lib/qemu-helpers.sh helper library. The -append flag only works with -kernel, not -cdrom. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
143 lines
3.7 KiB
Bash
Executable File
143 lines
3.7 KiB
Bash
Executable File
#!/bin/bash
|
|
# test-local-storage.sh — Verify PVC with local-path provisioner works
|
|
# Usage: ./test/integration/test-local-storage.sh <iso-path>
|
|
# Requires: kubectl on host, QEMU
|
|
set -euo pipefail
|
|
|
|
ISO="${1:?Usage: $0 <path-to-iso>}"
|
|
TIMEOUT_K8S=${TIMEOUT_K8S:-300}
|
|
TIMEOUT_PVC=${TIMEOUT_PVC:-120}
|
|
API_PORT=6443
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
|
|
. "$SCRIPT_DIR/../lib/qemu-helpers.sh"
|
|
|
|
DATA_DISK=$(mktemp /tmp/kubesolo-data-XXXXXX.img)
|
|
dd if=/dev/zero of="$DATA_DISK" bs=1M count=2048 2>/dev/null
|
|
mkfs.ext4 -q -L KSOLODATA "$DATA_DISK" 2>/dev/null
|
|
|
|
SERIAL_LOG=$(mktemp /tmp/kubesolo-storage-XXXXXX.log)
|
|
|
|
QEMU_PID=""
|
|
EXTRACT_DIR=""
|
|
KUBECTL="kubectl --server=https://localhost:${API_PORT} --insecure-skip-tls-verify"
|
|
|
|
cleanup() {
|
|
# Clean up K8s resources
|
|
$KUBECTL delete pod test-storage --grace-period=0 --force 2>/dev/null || true
|
|
$KUBECTL delete pvc test-pvc 2>/dev/null || true
|
|
[ -n "$QEMU_PID" ] && kill "$QEMU_PID" 2>/dev/null || true
|
|
rm -f "$DATA_DISK" "$SERIAL_LOG"
|
|
[ -n "$EXTRACT_DIR" ] && rm -rf "$EXTRACT_DIR"
|
|
}
|
|
trap cleanup EXIT
|
|
|
|
echo "==> Local storage test: $ISO"
|
|
|
|
# Extract kernel from ISO
|
|
EXTRACT_DIR="$(mktemp -d /tmp/kubesolo-extract-XXXXXX)"
|
|
extract_kernel_from_iso "$ISO" "$EXTRACT_DIR"
|
|
|
|
KVM_FLAG=$(detect_kvm)
|
|
|
|
# Launch QEMU
|
|
# shellcheck disable=SC2086
|
|
qemu-system-x86_64 \
|
|
-m 2048 -smp 2 \
|
|
-nographic \
|
|
$KVM_FLAG \
|
|
-kernel "$VMLINUZ" \
|
|
-initrd "$INITRAMFS" \
|
|
-drive "file=$DATA_DISK,format=raw,if=virtio" \
|
|
-net "nic,model=virtio" \
|
|
-net "user,hostfwd=tcp::${API_PORT}-:6443" \
|
|
-serial "file:$SERIAL_LOG" \
|
|
-append "console=ttyS0,115200n8 kubesolo.data=/dev/vda" \
|
|
&
|
|
QEMU_PID=$!
|
|
|
|
# Wait for K8s API
|
|
echo " Waiting for K8s API..."
|
|
ELAPSED=0
|
|
while [ "$ELAPSED" -lt "$TIMEOUT_K8S" ]; do
|
|
if $KUBECTL get nodes 2>/dev/null | grep -q "Ready"; then
|
|
break
|
|
fi
|
|
sleep 5
|
|
ELAPSED=$((ELAPSED + 5))
|
|
done
|
|
|
|
if [ "$ELAPSED" -ge "$TIMEOUT_K8S" ]; then
|
|
echo "==> FAIL: K8s not ready within ${TIMEOUT_K8S}s"
|
|
exit 1
|
|
fi
|
|
echo " K8s ready (${ELAPSED}s)"
|
|
|
|
# Create PVC
|
|
echo "==> Creating PersistentVolumeClaim..."
|
|
$KUBECTL apply -f - << 'YAML'
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: test-pvc
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 64Mi
|
|
YAML
|
|
|
|
# Create pod that uses the PVC
|
|
echo "==> Creating pod with PVC..."
|
|
$KUBECTL apply -f - << 'YAML'
|
|
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: test-storage
|
|
spec:
|
|
containers:
|
|
- name: writer
|
|
image: busybox:latest
|
|
command: ["sh", "-c", "echo 'kubesolo-storage-test' > /data/test.txt && sleep 3600"]
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: /data
|
|
volumes:
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: test-pvc
|
|
YAML
|
|
|
|
# Wait for pod Running
|
|
echo " Waiting for storage pod..."
|
|
ELAPSED=0
|
|
STATUS=""
|
|
while [ "$ELAPSED" -lt "$TIMEOUT_PVC" ]; do
|
|
STATUS=$($KUBECTL get pod test-storage -o jsonpath='{.status.phase}' 2>/dev/null || echo "")
|
|
if [ "$STATUS" = "Running" ]; then
|
|
break
|
|
fi
|
|
sleep 5
|
|
ELAPSED=$((ELAPSED + 5))
|
|
done
|
|
|
|
if [ "$STATUS" != "Running" ]; then
|
|
echo "==> FAIL: Storage pod did not reach Running (status: $STATUS)"
|
|
$KUBECTL describe pod test-storage 2>/dev/null | tail -20 || true
|
|
exit 1
|
|
fi
|
|
|
|
# Verify data was written
|
|
sleep 3
|
|
DATA=$($KUBECTL exec test-storage -- cat /data/test.txt 2>/dev/null || echo "")
|
|
if [ "$DATA" = "kubesolo-storage-test" ]; then
|
|
echo "==> PASS: Local storage provisioning works"
|
|
echo " PVC bound, pod running, data written and read back successfully"
|
|
exit 0
|
|
else
|
|
echo "==> FAIL: Data verification failed (got: '$DATA')"
|
|
exit 1
|
|
fi
|