Skip to content

tests/kola: add soft-reboot test for LUKS root encryption #4201

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
prestist wants to merge 2 commits into
base: testing-devel
Choose a base branch
from
+51 −0
Open

tests/kola: add soft-reboot test for LUKS root encryption #4201

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
fe85b89
tests/kola: add soft-reboot test for LUKS root encryption
prestist Jun 2, 2026
23c74ba
tests/kola: temporarily add x-initrd.attach workaround to soft-reboot…
prestist Jun 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions tests/kola/root-reprovision/luks/soft-reboot/config.ign
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
../config.ign
1 change: 1 addition & 0 deletions tests/kola/root-reprovision/luks/soft-reboot/data
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
../data
49 changes: 49 additions & 0 deletions tests/kola/root-reprovision/luks/soft-reboot/test.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
#!/bin/bash
## kola:
## # This test reprovisions the rootfs.
## tags: "platform-independent reprovision"
## # Root reprovisioning requires at least 4GiB of memory.
## minMemory: 4096
## # A TPM backend device is not available on s390x to support TPM.
## architectures: "! s390x"
## # This test includes a lot of disk I/O and needs a higher
## # timeout value than the default.
## timeoutMin: 15
## description: Verify that soft-reboot works with LUKS root encryption.

set -xeuo pipefail

# shellcheck disable=SC1091
. "$KOLA_EXT_DATA/commonlib.sh"

case "${AUTOPKGTEST_REBOOT_MARK:-}" in
"")
srcdev=$(findmnt -nvr /sysroot -o SOURCE)
[[ ${srcdev} == /dev/mapper/myluksdev ]]

blktype=$(lsblk -o TYPE "${srcdev}" --noheadings)
[[ ${blktype} == crypt ]]
ok "root is on LUKS device"

# Workaround: manually add x-initrd.attach to crypttab if not
# already present. This can be removed once coreos/ignition#2219

@marmijo marmijo Jul 6, 2026

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: since this is intentionally temporary and depends on the ignition PR, could we use the full PR URL here? It'll make it easier for someone cleaning this up later to find the dependency directly.

# is included in the base image.
if ! grep -q x-initrd.attach /etc/crypttab; then
sed -i '/^myluksdev /s/$/,x-initrd.attach/' /etc/crypttab
systemctl daemon-reload
fi

/tmp/autopkgtest-soft-reboot soft-rebooted
;;

soft-rebooted)
srcdev=$(findmnt -nvr /sysroot -o SOURCE)
[[ ${srcdev} == /dev/mapper/myluksdev ]]

blktype=$(lsblk -o TYPE "${srcdev}" --noheadings)
[[ ${blktype} == crypt ]]
ok "soft-reboot successful with LUKS root"
;;

*) fatal "unexpected mark: ${AUTOPKGTEST_REBOOT_MARK}";;
esac
Comment thread
prestist marked this conversation as resolved.