getcompanion-ai/computer-host
1
0
Fork 0
mirror of https://github.com/getcompanion-ai/computer-host.git synced 2026-04-15 10:05:13 +00:00
Code Issues 6 Projects Releases Packages Wiki Activity Actions

feat: add host-managed backend ssh key injection

Browse source
This commit is contained in:
Harivansh Rathi 2026-04-08 19:45:28 +00:00
parent a12f54ba5d
commit 9acbf232eb
4 changed files with 138 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

57
internal/daemon/daemon_test.go
View file

@ -75,7 +75,14 @@ func TestCreateMachineStagesArtifactsAndPersistsState(t *testing.T) {
}
kernelPayload := []byte("kernel-image")
rootFSPayload := []byte("rootfs-image")
rootFSImagePath := filepath.Join(root, "guest-rootfs.ext4")
if err := buildTestExt4Image(root, rootFSImagePath); err != nil {
t.Fatalf("build ext4 image: %v", err)
}
rootFSPayload, err := os.ReadFile(rootFSImagePath)
if err != nil {
t.Fatalf("read ext4 image: %v", err)
}
server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
switch r.URL.Path {
case "/kernel":
@ -94,6 +101,15 @@ func TestCreateMachineStagesArtifactsAndPersistsState(t *testing.T) {
KernelImageURL: server.URL + "/kernel",
RootFSURL: server.URL + "/rootfs",
},
GuestConfig: &contracthost.GuestConfig{
AuthorizedKeys: []string{
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAITestOverrideKey daemon-test",
},
LoginWebhook: &contracthost.GuestLoginWebhook{
URL: "https://example.com/login",
BearerToken: "token",
},
},
})
if err != nil {
t.Fatalf("create machine: %v", err)
@ -123,6 +139,20 @@ func TestCreateMachineStagesArtifactsAndPersistsState(t *testing.T) {
if _, err := os.Stat(runtime.lastSpec.RootFSPath); err != nil {
t.Fatalf("system disk not staged: %v", err)
}
hostAuthorizedKeyBytes, err := os.ReadFile(hostDaemon.backendSSHPublicKeyPath())
if err != nil {
t.Fatalf("read backend ssh public key: %v", err)
}
authorizedKeys, err := readExt4File(runtime.lastSpec.RootFSPath, "/etc/microagent/authorized_keys")
if err != nil {
t.Fatalf("read injected authorized_keys: %v", err)
}
if !strings.Contains(authorizedKeys, strings.TrimSpace(string(hostAuthorizedKeyBytes))) {
t.Fatalf("authorized_keys missing backend ssh key: %q", authorizedKeys)
}
if !strings.Contains(authorizedKeys, "daemon-test") {
t.Fatalf("authorized_keys missing request override key: %q", authorizedKeys)
}
artifact, err := fileStore.GetArtifact(context.Background(), response.Machine.Artifact)
if err != nil {
@ -154,6 +184,31 @@ func TestCreateMachineStagesArtifactsAndPersistsState(t *testing.T) {
}
}
func TestNewEnsuresBackendSSHKeyPair(t *testing.T) {
root := t.TempDir()
cfg := testConfig(root)
fileStore, err := store.NewFileStore(cfg.StatePath, cfg.OperationsPath)
if err != nil {
t.Fatalf("create file store: %v", err)
}
hostDaemon, err := New(cfg, fileStore, &fakeRuntime{})
if err != nil {
t.Fatalf("create daemon: %v", err)
}
if _, err := os.Stat(hostDaemon.backendSSHPrivateKeyPath()); err != nil {
t.Fatalf("stat backend ssh private key: %v", err)
}
publicKeyPayload, err := os.ReadFile(hostDaemon.backendSSHPublicKeyPath())
if err != nil {
t.Fatalf("read backend ssh public key: %v", err)
}
if !strings.HasPrefix(string(publicKeyPayload), "ssh-ed25519 ") {
t.Fatalf("unexpected backend ssh public key: %q", string(publicKeyPayload))
}
}
func TestCreateMachineRejectsNonHTTPArtifactURLs(t *testing.T) {
t.Parallel()