Comments (3)
I was thinking we'd primarily want to test local login, but it probably wouldn't hurt to test SSH for people who want to enable that. For the latter, we could add an internal kola test that uses SSHAgent.NewPasswordClient()
.
That sudo
command will check the password for the core
user, not testuser
. And since core
is in the sudo
group, we won't get a password prompt by default. echo password | setsid su - testuser
should work.
(su
falls back to stdin if there's no controlling terminal, and setsid
ensures there isn't one.)
from fedora-coreos-config.
Add a test that provisions a user password via Ignition (replicating docs) and checks that the password works for local login.
This particular part might be a bit tricky if we want to test SSH with password. AFAIU we'd need the sshpass
utility. Maybe just verifying via a local su -
is enough?
from fedora-coreos-config.
something like: echo 'mypassword' | sudo --stdin -u testuser id
from fedora-coreos-config.
Related Issues (20)
- s390x: /usr/lib/s390-tools/cpictl is installed group-writable HOT 2
- There are some flakes happening with ext.config.kubernetes.kube-watch HOT 3
- No LRO_URLS, LRO_MIRRORLISTURL nor LRO_METALINKURL specified HOT 2
- write validation to let us know when packages in `next-devel` are older than `testing-devel` HOT 6
- s390x: clhm.ignition-warnings test is failling because fetching ignition via virtio block device is still experimental HOT 6
- Find a safer alternative to check unit status HOT 1
- Add kola test to check for initrd udev rules HOT 1
- Make sure that we do not ship broken symlinks HOT 17
- Stop excluding `cowsay` HOT 3
- Add an allowlist test for non-root owned files and ensure their UID/GID are statically allocated HOT 9
- bad permissions on /etc/sudoers.d/coreos-sudo-group HOT 1
- Sharing information between FCOS and SCOS/RHCOS9 HOT 6
- adjust buildroot container to work same as cosa HOT 5
- tests: Convert to new "YAML format" for kola config
- Fix ShellCheck errors
- Add space after `!` in kola YAML fields that want to negate semantics
- Add kola test to verify change of SELinux to permissive mode
- Add kola test that uses a proxy and ostree
- Move downgrade test into separate CI job HOT 3
- Compose an ostree commit by rpm-ostree failed HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from fedora-coreos-config.