[PATCH v2 3/9] meta-isar: Add a recipe that configures ci user

[Uladzimir Bely <ubely@ilbers.de>]

This creates `ci` user on a target and configures it for
non-interactive access to the image via SSH.

Non-interactive access is provided by placing testsuite's public part
of ssh key to `authorized_keys`.

This allows non-interactive SSH access to the machine with executing
custom commands on the guest VM.

Also, NetworkManager is installed to the image to make ethernet on
target auto configured and thus port forwarding from host to qemu
machine would work.

Signed-off-by: Uladzimir Bely <ubely@ilbers.de>
---
 .../isar-ci-ssh-setup/files/postinst          | 18 +++++++++++++++
 .../isar-ci-ssh-setup_0.1.bb                  | 22 +++++++++++++++++++
 2 files changed, 40 insertions(+)
 create mode 100644 meta-isar/recipes-ci/isar-ci-ssh-setup/files/postinst
 create mode 100644 meta-isar/recipes-ci/isar-ci-ssh-setup/isar-ci-ssh-setup_0.1.bb

diff --git a/meta-isar/recipes-ci/isar-ci-ssh-setup/files/postinst b/meta-isar/recipes-ci/isar-ci-ssh-setup/files/postinst
new file mode 100644
index 00000000..37d1bcb0
--- /dev/null
+++ b/meta-isar/recipes-ci/isar-ci-ssh-setup/files/postinst
@@ -0,0 +1,18 @@
+#!/bin/sh
+
+set -e
+
+if ! getent group ci >/dev/null; then
+    groupadd --system ci
+fi
+
+if ! getent passwd ci >/dev/null; then
+    useradd --system --gid ci --create-home \
+        --home-dir /var/lib/isar-ci --no-user-group \
+        --comment "Isar CI user" \
+        ci
+fi
+
+# since the homedir was part of the package, useradd did not include skel
+cp -RTn /etc/skel ~ci
+chown -R ci:ci ~ci
diff --git a/meta-isar/recipes-ci/isar-ci-ssh-setup/isar-ci-ssh-setup_0.1.bb b/meta-isar/recipes-ci/isar-ci-ssh-setup/isar-ci-ssh-setup_0.1.bb
new file mode 100644
index 00000000..74fecf92
--- /dev/null
+++ b/meta-isar/recipes-ci/isar-ci-ssh-setup/isar-ci-ssh-setup_0.1.bb
@@ -0,0 +1,22 @@
+# This software is a part of ISAR.
+
+DESCRIPTION = "Setup user with non-interactive SSH access"
+MAINTAINER = "Uladzimir Bely <uladzimir.bely@ilbers.de>"
+
+SRC_URI = " \
+    file://postinst \
+"
+
+DEPENDS += "sshd-regen-keys"
+DEBIAN_DEPENDS = "adduser, apt (>= 0.4.2), network-manager, sshd-regen-keys"
+
+inherit dpkg-raw
+
+do_install() {
+    # Install authorized SSH keys
+    install -v -d ${D}/var/lib/isar-ci/.ssh/
+    install -v -m 644 ${TESTSUITEDIR}/keys/ssh/id_rsa.pub ${D}/var/lib/isar-ci/.ssh/authorized_keys
+
+    # Manage all interfaces (including ethernet) by NetworkManager
+    install -D -m 644 /dev/null ${D}/etc/NetworkManager/conf.d/10-globally-managed-devices.conf
+}
-- 
2.20.1