mirror of
https://github.com/ultravioletrs/cocos.git
synced 2026-06-23 04:10:25 +00:00
4e8057f481
CI / ci (push) Has been cancelled
* Implement IMAMeasurements method in agentSDK and add corresponding unit tests Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add unit tests for NewIMAMeasurements command in CLI Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add error assertion for command execution in NewIMAMeasurements test Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Fix nil pointer dereference in Close method and update NewCreateVMCmd logic for manager client initialization Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Refactor file permission settings to use octal notation and improve cleanup handling in NewCreateVMCmd test Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add comprehensive unit tests for state machine functionality Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add mock implementation for Algorithm interface and corresponding test cases Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Refactor file permission settings to use octal notation in TestStopComputationIntegration Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Remove redundant reset test cases from TestStateMachine_Reset Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Fix race condition in action call verification in TestStateMachine_HandleEvent Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Enhance state machine with reset functionality and improve thread safety in event handling Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Improve error handling in state machine start function during tests Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Remove concurrent reset and send event test from state machine tests Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Remove error logging for Start function in transition tests Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add mock implementations for AgentService_IMAMeasurementsClient and Service Shutdown method; enhance progress tests for IMA measurements handling Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add comprehensive tests for FileStorage functionality including loading, saving, and concurrent access Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Enhance tests by adding dataset and algorithm hashes in handleRunReqChunks; improve error handling in TestFileStorage_ErrorHandling cleanup Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Enhance TestManagerClient_Process by adding new test cases for Agent state and Disconnect requests; update setupMocks to include grpcClient Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Fix graceful shutdown in gRPC server by adding nil checks for health and server instances Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Enhance TestAttestation by adding mock expectations for VTpmAttestation and Attestation methods; update service call to include platform parameter Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Enhance gRPC Server by adding synchronization for start/stop methods; prevent multiple starts and ensure graceful shutdown Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add unit tests for gRPC server methods including VM creation, removal, and info retrieval Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add tests for SEVSNP and TDX host capabilities; remove unused vsock code Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add a newline for better readability in vm_test.go Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add integration tests for gRPC client in cvm_test.go Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Remove unused vsock dependencies and add comprehensive unit tests for GCP attestation functions Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Skip GCP tests if credentials are not set Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add tests for error handling in attestation configuration and GCP commands Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Improve error handling in Azure VM test response writing Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Skip tests in GCP functions if credentials are not set Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add comprehensive unit tests for Azure attestation provider and verifier Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add unit tests for TPM functionality and improve error handling Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add comprehensive tests for attestation functionality and improve error handling Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add validation for teeNonce in TeeAttestation and implement comprehensive tests for provider methods Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Refactor error messages in TDX attestation tests for clarity Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Fix error message in TeeAttestation test for valid nonce case Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add MeasurementProvider mock and update mockery configuration Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Add logging for product in parseUints and rename test functions for clarity Signed-off-by: Sammy Oina <sammyoina@gmail.com> * Refactor TestSevsnpverify to reset configuration and improve error logging Signed-off-by: Sammy Oina <sammyoina@gmail.com> --------- Signed-off-by: Sammy Oina <sammyoina@gmail.com>
151 lines
3.8 KiB
Go
151 lines
3.8 KiB
Go
// Copyright (c) Ultraviolet
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
package cli
|
|
|
|
import (
|
|
"os"
|
|
"time"
|
|
|
|
"github.com/fatih/color"
|
|
"github.com/spf13/cobra"
|
|
"github.com/ultravioletrs/cocos/manager"
|
|
)
|
|
|
|
const (
|
|
serverURL = "server-url"
|
|
serverCA = "server-ca"
|
|
clientKey = "client-key"
|
|
clientCrt = "client-crt"
|
|
caUrl = "ca-url"
|
|
logLevel = "log-level"
|
|
ttlFlag = "ttl"
|
|
)
|
|
|
|
var (
|
|
agentCVMServerUrl string
|
|
agentCVMServerCA string
|
|
agentCVMClientKey string
|
|
agentCVMClientCrt string
|
|
agentCVMCaUrl string
|
|
agentLogLevel string
|
|
ttl time.Duration
|
|
)
|
|
|
|
func (c *CLI) NewCreateVMCmd() *cobra.Command {
|
|
cmd := &cobra.Command{
|
|
Use: "create-vm",
|
|
Short: "Create a new virtual machine",
|
|
Example: `create-vm`,
|
|
Args: cobra.ExactArgs(0),
|
|
Run: func(cmd *cobra.Command, args []string) {
|
|
if c.managerClient == nil || c.connectErr != nil {
|
|
if err := c.InitializeManagerClient(cmd); err != nil {
|
|
printError(cmd, "Failed to connect to manager: %v ❌ ", c.connectErr)
|
|
return
|
|
}
|
|
}
|
|
defer c.Close()
|
|
|
|
createReq, err := loadCerts()
|
|
if err != nil {
|
|
printError(cmd, "Error loading certs: %v ❌ ", err)
|
|
return
|
|
}
|
|
|
|
createReq.AgentCvmServerUrl = agentCVMServerUrl
|
|
createReq.AgentLogLevel = agentLogLevel
|
|
createReq.AgentCvmCaUrl = agentCVMCaUrl
|
|
|
|
if ttl > 0 {
|
|
createReq.Ttl = ttl.String()
|
|
}
|
|
|
|
cmd.Println("🔗 Creating a new virtual machine")
|
|
|
|
res, err := c.managerClient.CreateVm(cmd.Context(), createReq)
|
|
if err != nil {
|
|
printError(cmd, "Error creating virtual machine: %v ❌ ", err)
|
|
return
|
|
}
|
|
|
|
cmd.Println(color.New(color.FgGreen).Sprintf("✅ Virtual machine created successfully with id %s and port %s", res.CvmId, res.ForwardedPort))
|
|
},
|
|
}
|
|
|
|
cmd.Flags().StringVar(&agentCVMServerUrl, serverURL, "", "CVM server URL")
|
|
cmd.Flags().StringVar(&agentCVMServerCA, serverCA, "", "CVM server CA")
|
|
cmd.Flags().StringVar(&agentCVMClientKey, clientKey, "", "CVM client key")
|
|
cmd.Flags().StringVar(&agentCVMClientCrt, clientCrt, "", "CVM client crt")
|
|
cmd.Flags().StringVar(&agentCVMCaUrl, caUrl, "", "CVM CA service URL")
|
|
cmd.Flags().StringVar(&agentLogLevel, logLevel, "", "Agent Log level")
|
|
cmd.Flags().DurationVar(&ttl, ttlFlag, 0, "TTL for the VM")
|
|
if err := cmd.MarkFlagRequired(serverURL); err != nil {
|
|
printError(cmd, "Error marking flag as required: %v ❌ ", err)
|
|
return cmd
|
|
}
|
|
|
|
return cmd
|
|
}
|
|
|
|
func (c *CLI) NewRemoveVMCmd() *cobra.Command {
|
|
return &cobra.Command{
|
|
Use: "remove-vm",
|
|
Short: "Remove a virtual machine",
|
|
Example: `remove-vm <cvm_id>`,
|
|
Args: cobra.ExactArgs(1),
|
|
Run: func(cmd *cobra.Command, args []string) {
|
|
if c.managerClient == nil || c.connectErr != nil {
|
|
if err := c.InitializeManagerClient(cmd); err == nil {
|
|
defer c.Close()
|
|
}
|
|
}
|
|
|
|
if c.connectErr != nil {
|
|
printError(cmd, "Failed to connect to manager: %v ❌ ", c.connectErr)
|
|
return
|
|
}
|
|
|
|
cmd.Println("🔗 Removing virtual machine")
|
|
|
|
_, err := c.managerClient.RemoveVm(cmd.Context(), &manager.RemoveReq{CvmId: args[0]})
|
|
if err != nil {
|
|
printError(cmd, "Error removing virtual machine: %v ❌ ", err)
|
|
return
|
|
}
|
|
|
|
cmd.Println(color.New(color.FgGreen).Sprintf("✅ Virtual machine removed successfully"))
|
|
},
|
|
}
|
|
}
|
|
|
|
func fileReader(path string) ([]byte, error) {
|
|
if path == "" {
|
|
return nil, nil
|
|
}
|
|
|
|
return os.ReadFile(path)
|
|
}
|
|
|
|
func loadCerts() (*manager.CreateReq, error) {
|
|
clientKey, err := fileReader(agentCVMClientKey)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
clientCrt, err := fileReader(agentCVMClientCrt)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
serverCA, err := fileReader(agentCVMServerCA)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return &manager.CreateReq{
|
|
AgentCvmServerCaCert: serverCA,
|
|
AgentCvmClientKey: clientKey,
|
|
AgentCvmClientCert: clientCrt,
|
|
}, nil
|
|
}
|