🏡 index : quine-global-labs/mirror-coreos-fedora-coreos-config.git

#!/bin/bash
## kola:
##   # This test only runs on FCOS because RHCOS does not support `yescrypt`
##   # TODO-RHCOS: adapt to use different `crypt` scheme for RHCOS
##   distros:  fcos
##   exclusive: false
##   description: Verify that a user password provisioned by Ignition works.

set -xeuo pipefail

# shellcheck disable=SC1091
. "$KOLA_EXT_DATA/commonlib.sh"

OUTPUT=$(echo 'foobar' | setsid su - tester -c id)

if [[ $OUTPUT != "uid=1001(tester) gid=1001(tester) groups=1001(tester) context=system_u:system_r:unconfined_service_t:s0" ]]; then
    fatal "Failure when checking command output running with specified username and password"
fi
# https://fedoraproject.org/wiki/Changes/yescrypt_as_default_hashing_method_for_shadow
# Testing that passwd command creates a yescrypt password hash(starting with '$y$')
sudo useradd tester2
echo "42abcdef" | sudo passwd tester2 --stdin
PASSWD_CONFIRMATION=$(sudo grep tester2 /etc/shadow)
if [[ ${PASSWD_CONFIRMATION:0:11} != 'tester2:$y$' ]]; then
    fatal "passwd did not create a yescrypt password hash"
fi
ok "User-password provisioned and passwd command successfully tested"