selftests/bpf: Enable signature verification for some lskel tests

Browse source

The test harness uses the verify_sig_setup.sh to generate the required
key material for program signing.

Generate key material for signing LSKEL some lskel programs and use
xxd to convert the verification certificate into a C header file.

Finally, update the main test runner to load this
certificate into the session keyring via the add_key() syscall before
executing any tests. Use the session keyring in the tests with signed
programs.

Signed-off-by: KP Singh <kpsingh@kernel.org>
Link: https://lore.kernel.org/r/20250921160120.9711-6-kpsingh@kernel.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org>

...

This commit is contained in:

KP Singh 2025-09-21 18:01:20 +02:00 • committed by Alexei Starovoitov

parent 40863f4d6e

commit b720903e2b

8 changed files with 89 additions and 14 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

tools/testing/selftests/bpf/.gitignore vendored

View file

35

tools/testing/selftests/bpf/Makefile

View file

10

tools/testing/selftests/bpf/prog_tests/atomics.c

View file

15

tools/testing/selftests/bpf/prog_tests/fentry_fexit.c

View file

9

tools/testing/selftests/bpf/prog_tests/fentry_test.c

View file

9

tools/testing/selftests/bpf/prog_tests/fexit_test.c

View file

13

tools/testing/selftests/bpf/test_progs.c

View file

11

tools/testing/selftests/bpf/verify_sig_setup.sh

View file