QA (public) » openQA Project (public) » openQA Tests (public)

Tumbleweed and MicroOS has already a FDE based on systemd, using TPM2 and FIDO2 keys for the unlock the encrypted devices. With the default of grub2-bls, this system can now be used with systemd-boot and grub2-bls.

Ideally, we should have a matrix of tests with this axes:

• OS: Tumbleweed, MicroOS
• Boot loader: grub2-bls, systemd-boot
• Policy: NVIndex policy (systemd-pcrlock), signed policy (pcr-oracle)
• Tests
  • Installation of FDE via YaST (WIP)
  • Install LUKS2 devices (cr_root and cr_swap for Tumbleweed, cr_root for MicroOS) in YaST and do the enrollment manually
  • Basic (smoke) test of all sdbootutil commands
  • Update the system and reboot
  • Change default snapshot and reboot
  • Rollback and reboot
  • Generate multiple (>10) snapshots and reboot
  • Migrate bootloader
  • Migrate kind of policy