From 5d1da7a4b1f9e7e3786e4ce821710bc75bf1c655 Mon Sep 17 00:00:00 2001
From: Denis Pynkin <denis.pynkin@collabora.com>
Date: Sat, 18 Apr 2020 14:24:15 +0300
Subject: [PATCH] Add automatic test for signed OTA check

Ensure that only updates signed with valid key can be applied.

Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>
---
 test-cases/aum-ota-signed.yaml | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 test-cases/aum-ota-signed.yaml

diff --git a/test-cases/aum-ota-signed.yaml b/test-cases/aum-ota-signed.yaml
new file mode 100644
index 0000000..2094f25
--- /dev/null
+++ b/test-cases/aum-ota-signed.yaml
@@ -0,0 +1,34 @@
+metadata:
+  name: aum-ota-signed
+  format: "Apertis Test Definition 1.0"
+  image-types:
+    minimal: [ armhf ]
+  image-deployment:
+    - OSTree
+  type: functional
+  exec-type: automated
+  priority: critical
+  maintainer: "Apertis Project"
+  description: "Apertis update manager: check signed OTA upgrade test
+    This test ensures that the update manager uses commit signed with known key during OTA upgrades."
+
+  expected:
+    - "The automated test should succeed."
+
+  notes:
+    - "The automated test uses internet"
+
+install:
+  git-repos:
+    - url: https://gitlab.apertis.org/tests/aum-offline-upgrade.git
+      branch: apertis/v2021dev2
+
+run:
+  steps:
+    - "# Enter test directory:"
+    - cd aum-offline-upgrade
+    - "# Execute the following command:"
+    - common/run-test-in-systemd --timeout=900 --name=offline-upgrade env DEBUG=2 RELEASE=$RELEASE ARCH=$ARCH BASEURL=$BASEURL IMGPATH=$IMGPATH IMGDATE=$IMGDATE IMGTYPE=$IMGTYPE IMGNAME=$IMGNAME BOARD=$BOARD ./run-test-ota-signature.sh
+
+parse:
+  pattern: ^(?P<test_case_id>[a-zA-Z0-9_\-\./]+):\s*(?P<result>pass|fail|skip|unknown)$
-- 
GitLab