mirror of
https://github.com/clearlinux/rkt.git
synced 2026-09-05 21:31:38 +00:00
Krzesimir Nowak
939006ff20
It is now known as test-auth-server and it contains an aci subpackage. Later we can add a docker package to test docker auth.
86 lines
2.5 KiB
Markdown
86 lines
2.5 KiB
Markdown
Before running `test-aci-auth-server` make sure that `go` and `actool` are in your
|
|
`$PATH`.
|
|
|
|
```
|
|
$ ./test-aci-auth-server start basic
|
|
|
|
{
|
|
"rktKind": "auth",
|
|
"rktVersion": "v1",
|
|
"domains": ["127.0.0.1:48608"],
|
|
"type": "basic",
|
|
"credentials":
|
|
{
|
|
"user": "bar",
|
|
"password": "baz"
|
|
}
|
|
}
|
|
|
|
Ready, waiting for connections at https://127.0.0.1:48608
|
|
```
|
|
|
|
(You can run `test-aci-auth-server start` with either `none`, `basic` or `oauth` parameter)
|
|
|
|
Copy the snippet to `/etc/rkt/auth.d/test.json` and run `rkt
|
|
--insecure-skip-verify run
|
|
https://127.0.0.1:48608/<WHATEVER>/prog.aci`. The `rkt` output ought
|
|
to be something like:
|
|
```
|
|
# rkt --insecure-skip-verify run https://127.0.0.1:48608/basic1/prog.aci
|
|
rkt: fetching image from https://127.0.0.1:48608/basic1/prog.aci
|
|
|
|
|
|
|
|
Authentication succeeded.
|
|
Sending SIGTERM to remaining processes...
|
|
Sending SIGKILL to remaining processes...
|
|
Unmounting file systems.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/pts.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/shm.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/sys.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/proc.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/console.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/tty.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/urandom.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/random.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/full.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/zero.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs/dev/null.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs.
|
|
Unmounting /proc/sys/kernel/random/boot_id.
|
|
Unmounting /opt/stage2/sha512-82d0d76f85d04a73e17a377c304ffbd8/rootfs.
|
|
All filesystems unmounted.
|
|
Halting system.
|
|
```
|
|
|
|
While the additional output from `test-aci-auth-server`:
|
|
```
|
|
Trying to serve "/basic10/prog.aci"
|
|
serving
|
|
done.
|
|
```
|
|
|
|
The `test-aci-auth-server start` with `oauth` will print something like this:
|
|
```
|
|
$ ./test-aci-auth-server start oauth
|
|
|
|
{
|
|
"rktKind": "auth",
|
|
"rktVersion": "v1",
|
|
"domains": ["127.0.0.1:48805"],
|
|
"type": "oauth",
|
|
"credentials":
|
|
{
|
|
"token": "sometoken"
|
|
}
|
|
}
|
|
|
|
Ready, waiting for connections at https://127.0.0.1:48805
|
|
```
|
|
|
|
To stop the `test-aci-auth-server` run stop command:
|
|
```
|
|
$ ./test-aci-auth-server stop https://127.0.0.1:60268
|
|
Response status: 200 OK
|
|
```
|