mirror of
https://github.com/clearlinux/rkt.git
synced 2026-06-16 02:05:48 +00:00
Jonathan Boulle
9685f37575
Inspired by a similar change in the Kubernetes project [1], this changes the copyright header to the more generic "The rkt Authors" rather than "CoreOS, Inc.", which is only sometimes correct. https://github.com/GoogleCloudPlatform/kubernetes/commit/6b3a6e6b983f967c88d14d26542ec6e30c49ebd3
Before running test-aci-auth-server make sure that go and actool are in your
$PATH.
$ ./test-aci-auth-server start basic
{
"rktKind": "auth",
"rktVersion": "v1",
"domains": ["127.0.0.1:48608"],
"type": "basic",
"credentials":
{
"user": "bar",
"password": "baz"
}
}
Ready, waiting for connections at https://127.0.0.1:48608
(You can run test-aci-auth-server start with either none, basic or oauth parameter)
Copy the snippet to /etc/rkt/auth.d/test.json and run rkt --insecure-skip-verify run https://127.0.0.1:48608/<WHATEVER>/prog.aci. The rkt output ought
to be something like:
# rkt --insecure-skip-verify run https://127.0.0.1:48608/basic1/prog.aci
rkt: fetching image from https://127.0.0.1:48608/basic1/prog.aci
Authentication succeeded.
Sending SIGTERM to remaining processes...
Sending SIGKILL to remaining processes...
Unmounting file systems.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/pts.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/shm.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/sys.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/proc.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/console.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/tty.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/urandom.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/random.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/full.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/zero.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/null.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs.
Unmounting /proc/sys/kernel/random/boot_id.
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs.
All filesystems unmounted.
Halting system.
While the additional output from test-aci-auth-server:
Trying to serve "/basic10/prog.aci"
serving
done.
The test-aci-auth-server start with oauth will print something like this:
$ ./test-aci-auth-server start oauth
{
"rktKind": "auth",
"rktVersion": "v1",
"domains": ["127.0.0.1:48805"],
"type": "oauth",
"credentials":
{
"token": "sometoken"
}
}
Ready, waiting for connections at https://127.0.0.1:48805
To stop the test-aci-auth-server run stop command:
$ ./test-aci-auth-server stop https://127.0.0.1:60268
Response status: 200 OK