Hi,
I have been looking into how to secure LAVA, as so far it's just been learning how it works. There's the obvious http/https stuff, and in the documentation mentions firewalls for remote workers (which we'll be using anyways). We already have things in place for physical security and plans on how to improve, so no worries there.
Is there anything not covered in the documentation that should be considered and how could we go about putting that into place?
Best regards,
Michael
I saw a file 'lava-dispatcher/actions/boot/gdb.py' in the LAVA source code, which seems to define a gdb method in action->boot. But I didn't find a description of it in the LAVA documentation. The document I checked is `https://docs.lavasoftware.org/lava/actions-boot.html?highlight=boot#boot-action-reference`.
Reading the source code may lead to some misunderstandings and is time-consuming. I hope someone who knows its function can explain to me what this new method does. Thank you very much!
I want to add some key:value pair in metadata of json that POST by notification of job, but I can not figure it out. I had tried add metadata in job defination and test defination, but the back json did not have my data in metadata field, it was just a [].
Then I read the lava source code, I find the metadata data are produced by method `get_metadata_dict()` in class `TestJob`. This method is called at method `create_job_data` in class `TestJob`, it creates the json data which will post to callback url. `get_metadata_dict()` check whether there is an attribute `testdata`, but I can not find the place where this attribute‘s assignment.
Could someone give me a way to do this? Thanks you very much! 🙏
Hello,
We are testing our custom debian image and have added banner messages before login and after login and after the implementation LAVA job is failing on auto-login.
Please find example banner messages:
|_ _/
| |
| |
_| |
|_____\
Info:
Example.....: ABC
Example......: ABC
IP:
etho.......:123
Info:
1. some info
Some Info:
1. ###
Some more info: ####
login :
It looks like due to a huge banner message before the login prompt it is getting confused and due to this, it gets stuck at auto login and timeouts. Please suggest if we can ignore this in LAVA to login and execute the test case
Please find the job details:
device_type: qemu
job_name: banner
timeouts:
job:
minutes: 30
action:
minutes: 25
connection:
minutes: 5
priority: medium
visibility: public
context:
arch: amd64
lava_test_results_dir: "/home/lava-%s"
actions:
- deploy:
timeout:
minutes: 15
to: tmpfs
images:
rootfs:
url: file:///home/image
image_arg: XXXX
- boot:
timeout:
minutes: 15
method: qemu
media: tmpfs
prompts:
- 'login:'
auto_login:
login_prompt: "login:"
username: abc
password_prompt: "Password:"
password: "abc"
- test:
timeout:
minutes: 15
definitions:
- repository: git(a)test.git
from: git
path: test.yaml
name: basic
Thanks,
Sweta
Hello,
I'm currently using version 2024.09, and when running the test monitor, I encounter the following error at the top of my job: ('Connection aborted.', RemoteDisconnected('Remote end closed connection without response')). I don't notice anything unusual in the test logs. Could this be a bug with the test monitor?
Best Regards,
Andy
Hi,
I think there is something terribly wrong with job timeouts in 2024.05
release. Total job timeout seems to be ignored. This was working fine
on 2024.01 release. I'll try to debug, but IMHO this is a pretty
critical bug that should be addressed immediately. I'll report it in
gitlab as well.
Best Regards,
Milosz
Hello,
I am spinning up debian image using Qemu and want to copy a custom package from my lava server to debian vm for testing. I could see that support for tar is planned https://docs.lavasoftware.org/lava/actions-test.html#inline-test-definition… . But is there any way I can include my custom package in tarbar created at Deploy Action to ship to my VM easily?
Hello,
I have multiple machines over which I test using LAVA job using primary ssh connection. As my devices OS gets installed every now and then I have to manually update the ssh public key before executing the job so that LAVA can connect to DUT over passwordless SSH.
Is there a way I can include a script in device dictionary to copy the keys automatically before requesting a ssh connection? As I understand password option is not there. Kindly suggest.
Hello,
I want to spin up an image with tpm enabled using qemu, and I need to execute swtpm socket command before image boot-ups via qemu. Please suggest if I could execute this command or script in qemu.jinja2 file or any other file.
Thanks,
Sweta
Hi,
I want clone a gitlab repo with id and token during job execution. To hide the token I am passing the value in my job. How can I export the value of GIT_TOKEN in environment file of LAVA? So that whenever job is executed it will read the value from its environment file. I tried to use export and tried to add "GIT_TOKEN=abcd" in env.yaml file. But I guess its not correct format. I couldn't find what kind of values we can add in env.yaml in documents. I also added GIT_TOKEN value in /etc/profile of the LAVA server still the job didn't pick it. Could you please suggest how can we clone the repo in LAVA job without exposing its password. Also I understand that ssh key of root will work but I want to avoid using ssh key of root. Kindly suggest
- test:
timeout:
minutes: 15
definitions:
- repository: https://gitid:$GIT_TOKEN@gitlab.com/lava-tests.git
from: git
path: tests/cisscan/cis.yaml
branch: pipeline
name: cis-benchmark