Merge pull request #18960 from ricardobranco777/softfail_bsc1220269

pc: Add swap unconditionally to hardened tests
os-autoinst · Mar 26, 2024 · 7ccf3b6 · 7ccf3b6
2 parents c3f77af + f8a0053
commit 7ccf3b6
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/tests/publiccloud/img_proof.pm b/tests/publiccloud/img_proof.pm
@@ -63,6 +63,24 @@ sub run {
         $instance->ssh_assert_script_run('sudo systemctl restart sshd');
     }
 
+    if (is_hardened) {
+        # Workaround for https://github.com/OpenSCAP/openscap/issues/1796
+        my $swap_file = "/swapfile";
+        my $fstype = $instance->ssh_script_output(cmd => 'findmnt -no fstype /');
+        # Follow steps in https://btrfs.readthedocs.io/en/latest/Swapfile.html
+        my @cmds;
+        push(@cmds, "btrfs subvolume create $swap_file") if ($fstype eq "btrfs");
+        push(@cmds, "truncate -s 0 $swap_file");
+        push(@cmds, "chattr +C $swap_file") if ($fstype eq "btrfs");
+        push(@cmds, "fallocate -l 4G $swap_file");
+        push(@cmds, "chmod 600 $swap_file");
+        push(@cmds, "mkswap $swap_file");
+        push(@cmds, "swapon -v $swap_file");
+        foreach my $cmd (@cmds) {
+            $instance->ssh_assert_script_run("sudo $cmd");
+        }
+    }
+
     my $img_proof = $provider->img_proof(
         instance => $instance,
         tests => $tests,