selftests/bpf: Enable signature verification for some lskel tests
authorKP Singh <kpsingh@kernel.org>
Sun, 21 Sep 2025 16:01:20 +0000 (18:01 +0200)
committerAlexei Starovoitov <ast@kernel.org>
Tue, 23 Sep 2025 02:17:55 +0000 (19:17 -0700)
commitb720903e2b14d319268e1348a32c46a6fcbfd327
tree7c515a2899b5858afee0304dc397806916b69eb3
parent40863f4d6ef2c34bb00dd1070dfaf9d5f27a497e
selftests/bpf: Enable signature verification for some lskel tests

The test harness uses the verify_sig_setup.sh to generate the required
key material for program signing.

Generate key material for signing LSKEL some lskel programs and use
xxd to convert the verification certificate into a C header file.

Finally, update the main test runner to load this
certificate into the session keyring via the add_key() syscall before
executing any tests. Use the session keyring in the tests with signed
programs.

Signed-off-by: KP Singh <kpsingh@kernel.org>
Link: https://lore.kernel.org/r/20250921160120.9711-6-kpsingh@kernel.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
tools/testing/selftests/bpf/.gitignore
tools/testing/selftests/bpf/Makefile
tools/testing/selftests/bpf/prog_tests/atomics.c
tools/testing/selftests/bpf/prog_tests/fentry_fexit.c
tools/testing/selftests/bpf/prog_tests/fentry_test.c
tools/testing/selftests/bpf/prog_tests/fexit_test.c
tools/testing/selftests/bpf/test_progs.c
tools/testing/selftests/bpf/verify_sig_setup.sh