Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set upload data size explicitly #69

Closed
wants to merge 1,288 commits into from
Closed

Set upload data size explicitly #69

wants to merge 1,288 commits into from

Conversation

mike-sul
Copy link

No description provided.

pattivacek and others added 30 commits June 16, 2021 13:26
Validate OSTree objects before uploading them
"ninja qa" was failing for Release builds because the assert() calls get
compiled out in release and clang-tidy couldn't see a reason why this needed to
be a member function. Disable the lint rule for this line.

Signed-off-by: Phil Wise <[email protected]>
The test code was generating a Uptane root.json that was already expired. This
caused tests to fail. Bump the expiry date by a few years.

Signed-off-by: Phil Wise <[email protected]>
Bump 'expires' in test code to the future
These tests only need a credentials.zip that looks sane: it doesn't need to
actually work. Use the 'tests/test_data/credentials.zip' to provide it. There
is one test for garage-deploy that needs a credentials.zip that authenticates
in order to get to the point where it triggers the error message we are looking
for. Move that one to be conditional on having SOTA_PACKED_CREDENTIALS.

Signed-off-by: Phil Wise <[email protected]>
It really isn't safe to move or copy...

Signed-off-by: Phil Wise <[email protected]>
In my machine the test run (ctest -j8) takes 192s, which is the entire length
of the t_uptane_network test. ctest is smart enough to schedule it first, but
it still finishes last. The slow test case is the 'NoConnection' one, which is
caused by a bunch of 60s timeouts.

Fix this by reducing the timeouts to 1s, but only in this test.

These tests also had a bunch of duplication around setting
StorageType::kSqlite. I think at one point there were also tests for
StorageType::kFileSystem, but these have since been deleted. While I was at it
I renamed the tests to not include underscores, as per the Googletest FAQ:

http://google.github.io/googletest/faq.html

Finally, ensure aktualizr-get is built by the build_tests target.

Signed-off-by: Phil Wise <[email protected]>
Speed up the entire test run by reducing timeouts in t_uptane_network
Make CommandQueue non-movable and non-copyable
Also mark the include_directories for all libraries in cmake as 'SYSTEM'. A
couple were already like this: this makes the change to the rest of those.
Bump GoogleTest to release-1.11.0
This allows setups without a Director to still use aktualizr-info for
printing Image repo metadata.

Signed-off-by: Patti Vacek <[email protected]>
…adata

aktualizr-info: Check for Image Root metadata.
Signed-off-by: Patti Vacek <[email protected]>
And update an email account that no longer exists.

Signed-off-by: Patti Vacek <[email protected]>
Fix docker namespace used in github CI.
aktualizr-secondary: Retry downloads just like the Primary.
Fix 404 errors for broken URLs in docs

Refresh documentation by fixing 404 Page Not Found errors.

Signed-off-by: Yaroslav Stefinko <[email protected]>
Update documentation.

Relates-To: OTA-5502

Signed-off-by: Yaroslav Stefinko <[email protected]>
mike-sul and others added 29 commits July 21, 2022 09:54
As done for u-boot masked, manage the upgrade_available variable logic
via fiovb, to help improving the bootcount management in u-boot.

Signed-off-by: Ricardo Salveti <[email protected]>
Lite/TUF has different storage requirements than Uptane; however we
want to keep all code common and backwards compatible so we can
benefit from existing regression tests.

To that end, this commit makes the storage subsytem aware that it is
executing for TUF client.
That allows us to taylor it to the TUF needs.

Signed-off-by: Jorge Ramirez-Ortiz <[email protected]>
Add an additional parameter to set the storage client (tuf/uptane)

By default, aktualizer-get will be set to TUF while the tests will be
set to Uptane; this is because we do not want to affect the default
test suite.

Signed-off-by: Jorge Ramirez-Ortiz <[email protected]>
Signed-off-by: Igor Opaniuk <[email protected]>
Signed-off-by: Jorge Ramirez <[email protected]>
Signed-off-by: Mike Sul <[email protected]>
Add a new method to the TUF/Image repo that exposes already existing
protected method aimed to update/fetch root role metadata.

Signed-off-by: Mike <[email protected]>
Add a method that extracts Subject's businessCategory from a
certificate.

Signed-off-by: Mike <[email protected]>
Allow limiting a number of events to be send in a scope of a single
request. This helps to avoid sending a big body if events have got
accumulated in the DB somehow. It's needed if a server, receiving events,
has a size limit of request body it can digest.

Signed-off-by: Mike <[email protected]>
- Send fewer events in a single HTTP POST /events request if 413 is
  received.
- If just one event is posted and still 413 is received then just drop
  the event.
- Add a unit test to cover the 413 handling business logic.

Signed-off-by: Mike <[email protected]>
This prevents aktualizr from using 1st initialized pkcs11 token and
forces it to use the one with given label. Label is defined in [p11]
section of the config.

Signed-off-by: Milosz Wasilewski <[email protected]>
Signed-off-by: Milosz Wasilewski <[email protected]>
Catch and return the specified http response headers
to the `httpclient` caller.

Signed-off-by: Mike <[email protected]>
The finalization should return OK not NeedReboot if the hash a device is
currently booted on matches the pending Target hash. It means that a
device was rebooted but the Target is still marked as a pending target
in the DB (e.g. unexpected reboot during finalization).

Signed-off-by: Mike <[email protected]>
Commit 9b8a74d ([fio extras] Update default config values, 2020-09-18)
adjusted default polling_sec from 10 to 300. This commit makes
test_config unit test pass again by adjusting the expected values.

Signed-off-by: Andre Detsch <[email protected]>
Current test credentials use the RC2-40-CBC algorithm for encryption of
the PKCS7 data inside the PKCS12 archive. This commit replaces it with
AES-256-CBC, allowing OpenSSL 3.x to be used without the need of
enabling the legacy provider, while still keeping compatibility with
OpenSSL 1.x.
The keys and certificates themselves were not affected.

Signed-off-by: Andre Detsch <[email protected]>
My environment:
meta-updater: master branch [c10f9f]
yocto poky: master branch [303421]
ARCH: arm64

When I take :
    bitbake aktualizr

Output error said :
    uint8_t does not name a type

Add the header file cstdint to asn1-cer.h to fix it.

Signed-off-by: dudengke <[email protected]>
Previous timestamp signature was never being actually compared to the
new one, because the timestamp object was accessed after being reset.
This caused the timestamp metadata to be stored on every updateMeta
call, instead of only on changes.

Signed-off-by: Andre Detsch <[email protected]>
The test depends on a new debug message that was added to the
SQLStorage::storeNonRoot method.

Signed-off-by: Andre Detsch <[email protected]>
This commit differentiates, based on the client state, the severity of
some log messages shown when the content of snapshot or targets metadata
files do not match the expected hash. During a typical update, when the
hash verification is expected to fail, the messages are logged as info.
Otherwise, they are logged as errors, keeping the current behavior.

Signed-off-by: Andre Detsch <[email protected]>
This commit adds a new HttpClientWithShare class, which extends
HttpClient, and allows sharing of TLS connections among HTTP
requests, speeding up operations and saving network resources.

Signed-off-by: Andre Detsch <[email protected]>
@mike-sul mike-sul closed this Sep 23, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.