Merge pull request #169 from slimm609/add_photon

Add photon image to tests

.github/workflows/pull_request.yml

@@ -10,4 +10,6 @@ jobs:
       - name: ubuntu checksec
         run: docker-compose run checksec-ubuntu
       - name: arch checksec
-        run: docker-compose run checksec-arch
\ No newline at end of file
+        run: docker-compose run checksec-arch
+      - name: photon checksec
+        run: docker-compose run checksec-photon
\ No newline at end of file

.github/workflows/push.yml

@@ -13,4 +13,14 @@ jobs:
       - name: ubuntu checksec
         run: docker-compose run checksec-ubuntu
       - name: arch checksec
-        run: docker-compose run checksec-arch
\ No newline at end of file
+        run: docker-compose run checksec-arch
+      - name: photon checksec
+        run: docker-compose run checksec-photon
+      - name: docker build
+        run: docker build -t slimm609/checksec:latest .
+      - name: Push to Docker Hub
+        uses: docker/build-push-action@v1
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+          repository: slimm609/checksec:latest
\ No newline at end of file

Dockerfile

+FROM photon:3.0
+
+COPY checksec /bin/
+RUN tdnf update && tdnf remove -y toybox && tdnf upgrade -y && \
+    tdnf install -y coreutils util-linux sed tar texinfo procps-ng grep findutils gzip file which awk binutils && \
+    chmod +x /bin/checksec 

Dockerfile.photon

+FROM photon:3.0
+
+# Install dependencies
+RUN tdnf update -y && tdnf upgrade -y && tdnf remove toybox -y && \
+    tdnf install -y build-essential git rpm-build coreutils util-linux \
+    make autoconf automake gcc ncurses-devel sed tar texinfo procps-ng grep \
+    findutils gzip file which libxml2 python3 python3-pip && \
+    pip3 install --upgrade pip && pip3 install setuptools && \
+    pip3 install demjson
+
+COPY .  /root
+WORKDIR /root

checksec

@@ -1417,7 +1417,6 @@ FS_binary_check() {
     fi
   done
   echo_message "\033[31mNo\033[m\n" "No\n" " binary_compiled_with_fortify='no'>\n" ', "binary_compiled_with_fortify":"no"'
-  exit 1
 }
 
 FS_comparison() {

docker-compose.yml

@@ -15,6 +15,13 @@ services:
     image:  checksec-arch
     command: bash -c "./tests/test-checksec.sh"
 
+  checksec-photon:
+    build:
+      context: ./
+      dockerfile: Dockerfile.photon
+    image:  checksec-photon
+    command: bash -c "./tests/test-checksec.sh"
+
   shellcheck:
     volumes:
       - .:/mnt

kernel_configs/build_kernel_configs.sh

@@ -30,7 +30,7 @@ for i in {0..19}; do
   build_config 4.x 4 $i
 done
 
-#build configs for 5.x up to 5.5
-for i in {1..5}; do 
+#build configs for 5.x up to 5.10
+for i in {1..10}; do 
   build_config 5.x 5 $i
 done
\ No newline at end of file