ZTS: Add LUKS sanity test

Add a LUKS sanity test to trigger: #16631

Reviewed-by: Tino Reichardt <milky-zfs@mcmilk.de>
Reviewed-by: Rob Norris <robn@despairlabs.com>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Reviewed-by: Alexander Motin <mav@FreeBSD.org>
Signed-off-by: Tony Hutter <hutter2@llnl.gov>
Closes #16681
This commit is contained in:
Tony Hutter 2024-10-25 09:07:44 -07:00
parent bdd1f72d9d
commit f2633144e9
5 changed files with 117 additions and 18 deletions

View File

@ -13,10 +13,10 @@ function archlinux() {
echo "##[endgroup]" echo "##[endgroup]"
echo "##[group]Install Development Tools" echo "##[group]Install Development Tools"
sudo pacman -Sy --noconfirm base-devel bc cpio dhclient dkms fakeroot \ sudo pacman -Sy --noconfirm base-devel bc cpio cryptsetup dhclient dkms \
fio gdb inetutils jq less linux linux-headers lsscsi nfs-utils parted \ fakeroot fio gdb inetutils jq less linux linux-headers lsscsi nfs-utils \
pax perf python-packaging python-setuptools qemu-guest-agent ksh samba \ parted pax perf python-packaging python-setuptools qemu-guest-agent ksh \
sysstat rng-tools rsync wget xxhash samba sysstat rng-tools rsync wget xxhash
echo "##[endgroup]" echo "##[endgroup]"
} }
@ -30,11 +30,11 @@ function debian() {
echo "##[group]Install Development Tools" echo "##[group]Install Development Tools"
sudo apt-get install -y \ sudo apt-get install -y \
acl alien attr autoconf bc cpio curl dbench dh-python dkms fakeroot \ acl alien attr autoconf bc cpio cryptsetup curl dbench dh-python dkms \
fio gdb gdebi git ksh lcov isc-dhcp-client jq libacl1-dev libaio-dev \ fakeroot fio gdb gdebi git ksh lcov isc-dhcp-client jq libacl1-dev \
libattr1-dev libblkid-dev libcurl4-openssl-dev libdevmapper-dev libelf-dev \ libaio-dev libattr1-dev libblkid-dev libcurl4-openssl-dev libdevmapper-dev \
libffi-dev libmount-dev libpam0g-dev libselinux-dev libssl-dev libtool \ libelf-dev libffi-dev libmount-dev libpam0g-dev libselinux-dev libssl-dev \
libtool-bin libudev-dev libunwind-dev linux-headers-$(uname -r) \ libtool libtool-bin libudev-dev libunwind-dev linux-headers-$(uname -r) \
lsscsi nfs-kernel-server pamtester parted python3 python3-all-dev \ lsscsi nfs-kernel-server pamtester parted python3 python3-all-dev \
python3-cffi python3-dev python3-distlib python3-packaging \ python3-cffi python3-dev python3-distlib python3-packaging \
python3-setuptools python3-sphinx qemu-guest-agent rng-tools rpm2cpio \ python3-setuptools python3-sphinx qemu-guest-agent rng-tools rpm2cpio \
@ -68,14 +68,15 @@ function rhel() {
echo "##[group]Install Development Tools" echo "##[group]Install Development Tools"
sudo dnf group install -y "Development Tools" sudo dnf group install -y "Development Tools"
sudo dnf install -y \ sudo dnf install -y \
acl attr bc bzip2 curl dbench dkms elfutils-libelf-devel fio gdb git \ acl attr bc bzip2 cryptsetup curl dbench dkms elfutils-libelf-devel fio \
jq kernel-rpm-macros ksh libacl-devel libaio-devel libargon2-devel \ gdb git jq kernel-rpm-macros ksh libacl-devel libaio-devel \
libattr-devel libblkid-devel libcurl-devel libffi-devel ncompress \ libargon2-devel libattr-devel libblkid-devel libcurl-devel libffi-devel \
libselinux-devel libtirpc-devel libtool libudev-devel libuuid-devel \ ncompress libselinux-devel libtirpc-devel libtool libudev-devel \
lsscsi mdadm nfs-utils openssl-devel pam-devel pamtester parted perf \ libuuid-devel lsscsi mdadm nfs-utils openssl-devel pam-devel pamtester \
python3 python3-cffi python3-devel python3-packaging kernel-devel \ parted perf python3 python3-cffi python3-devel python3-packaging \
python3-setuptools qemu-guest-agent rng-tools rpcgen rpm-build rsync \ kernel-devel python3-setuptools qemu-guest-agent rng-tools rpcgen \
samba sysstat systemd watchdog wget xfsprogs-devel xxhash zlib-devel rpm-build rsync samba sysstat systemd watchdog wget xfsprogs-devel xxhash \
zlib-devel
echo "##[endgroup]" echo "##[endgroup]"
} }

View File

@ -138,6 +138,12 @@ pre =
post = post =
tags = ['functional', 'largest_pool'] tags = ['functional', 'largest_pool']
[tests/functional/luks:Linux]
pre =
post =
tests = ['luks_sanity']
tags = ['functional', 'luks']
[tests/functional/mmap:Linux] [tests/functional/mmap:Linux]
tests = ['mmap_libaio_001_pos', 'mmap_sync_001_pos'] tests = ['mmap_libaio_001_pos', 'mmap_sync_001_pos']
tags = ['functional', 'mmap'] tags = ['functional', 'mmap']

View File

@ -128,6 +128,7 @@ export SYSTEM_FILES_LINUX='attr
blkdiscard blkdiscard
blockdev blockdev
chattr chattr
cryptsetup
exportfs exportfs
fallocate fallocate
flock flock

View File

@ -80,7 +80,8 @@ if BUILD_LINUX
nobase_dist_datadir_zfs_tests_tests_SCRIPTS += \ nobase_dist_datadir_zfs_tests_tests_SCRIPTS += \
functional/simd/simd_supported.ksh \ functional/simd/simd_supported.ksh \
functional/tmpfile/cleanup.ksh \ functional/tmpfile/cleanup.ksh \
functional/tmpfile/setup.ksh functional/tmpfile/setup.ksh \
functional/luks/luks_sanity.ksh
endif endif
nobase_dist_datadir_zfs_tests_tests_DATA += \ nobase_dist_datadir_zfs_tests_tests_DATA += \

View File

@ -0,0 +1,90 @@
#!/bin/ksh -p
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or https://opensource.org/licenses/CDDL-1.0.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
#
# Copyright (c) 2024 by Lawrence Livermore National Security, LLC.
# Use is subject to license terms.
#
# DESCRIPTION:
# Verify ZFS works on a LUKS-backed pool
#
# STRATEGY:
# 1. Create a LUKS device
# 2. Make a pool with it
# 3. Write files to the pool
# 4. Verify no errors
. $STF_SUITE/include/libtest.shlib
verify_runnable "both"
VDEV=$(mktemp --suffix=luks_sanity)
TESTPOOL=testpool
function cleanup
{
log_must zpool destroy $TESTPOOL
log_must cryptsetup luksClose /dev/mapper/luksdev
log_must rm -f $VDEV
}
log_assert "Verify ZFS on LUKS works"
log_onexit cleanup
PASS="fdsjfosdijfsdkjsldfjdlk"
# Make a small LUKS device since LUKS formatting takes time and we want to
# make this test run as quickly as possible.
truncate -s 100M $VDEV
log_must cryptsetup luksFormat --type luks2 $VDEV <<< $PASS
log_must cryptsetup luksOpen $VDEV luksdev <<< $PASS
log_must zpool create $TESTPOOL /dev/mapper/luksdev
CPUS=$(get_num_cpus)
# Use these specific size and offset ranges as they often cause errors with
# https://github.com/openzfs/zfs/issues/16631
# and we want to try to test for that.
for SIZE in {70..100} ; do
for OFF in {70..100} ; do
for i in {1..$CPUS} ; do
dd if=/dev/urandom of=/$TESTPOOL/file$i-bs$SIZE-off$OFF \
seek=$OFF bs=$SIZE count=1 &>/dev/null &
done
wait
done
sync_pool $TESTPOOL
rm -f /$TESTPOOL/file*
done
# Verify no read/write/checksum errors. Don't use JSON here so that we could
# could potentially backport this test case to the 2.2.x branch.
if zpool status -e | grep -q "luksdev" ; then
log_note "$(zpool status -v)"
log_fail "Saw errors writing to LUKS device"
fi
log_pass "Verified ZFS on LUKS works"