From e7f2681b1cf839ea73b61cd4aaa0a3898681d8e1 Mon Sep 17 00:00:00 2001 From: Fabian Koller Date: Wed, 14 Jan 2026 16:02:23 +0100 Subject: [PATCH] ci: creaete dummy libvirt TLS CA certificate This fixes the libvirt 11.10 startup failures. --- .github/actions/test/integration/build/action.yml | 9 +++++++++ .../actions/test/integration/build/dev-user-butane.yaml | 6 ++++++ 2 files changed, 15 insertions(+) diff --git a/.github/actions/test/integration/build/action.yml b/.github/actions/test/integration/build/action.yml index adcf018c..dd60bbac 100644 --- a/.github/actions/test/integration/build/action.yml +++ b/.github/actions/test/integration/build/action.yml @@ -100,10 +100,19 @@ runs: SSH_KEY=$(cat /opt/ssh_host_ed25519_key.pub) echo "SSH_KEY=$SSH_KEY" >> $GITHUB_ENV sed -i "s|SSH_KEY_GOES_HERE|$SSH_KEY|g" ./.github/actions/test/integration/build/dev-user-butane.yaml + PASSWORD=$(openssl passwd "password") echo "PASSWORD=$PASSWORD" >> $GITHUB_ENV sed -i "s|PASSWORD_GOES_HERE|$PASSWORD|g" ./.github/actions/test/integration/build/dev-user-butane.yaml sed -i "s|TAG_GOES_HERE|${{ inputs.image_tag }}|g" ./.github/actions/test/integration/build/dev-user-butane.yaml + + openssl req -new -x509 -days 3650 -nodes -sha256 \ + -subj "/C=XX/ST=State/L=City/O=GardenLinux/CN=Test CA" \ + -keyout "$RUNNER_TEMP/dummy-cakey.pem" -out "$RUNNER_TEMP/dummy-cacert.pem" + CA_CERT_B64=$(base64 -w 0 "$RUNNER_TEMP/dummy-cacert.pem") + sed -i "s|CA_CERT_BASE64_GOES_HERE|$CA_CERT_B64|g" ./.github/actions/test/integration/build/dev-user-butane.yaml + rm -f "$RUNNER_TEMP/dummy-cakey.pem" + butane --pretty --strict ./.github/actions/test/integration/build/dev-user-butane.yaml > "/opt/${TAG}.ign" - name: Download ubuntu cloud image diff --git a/.github/actions/test/integration/build/dev-user-butane.yaml b/.github/actions/test/integration/build/dev-user-butane.yaml index b8486454..3e852c8f 100644 --- a/.github/actions/test/integration/build/dev-user-butane.yaml +++ b/.github/actions/test/integration/build/dev-user-butane.yaml @@ -85,3 +85,9 @@ storage: kernel.core_pattern=|/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h kernel.core_pipe_limit=16 fs.suid_dumpable=2 + # Dummy CA certificate for libvirt TLS + - path: /etc/pki/CA/cacert.pem + mode: 0644 + contents: + compression: "" + source: data:;base64,CA_CERT_BASE64_GOES_HERE