Using swtpm with qemu currently depends on starting swtpm as root before each runqemu invocation. This is incompatible with the "no root" requirement for automated testing. A solution is being developed to connect qemu to swtpm through a unix domain datagram socket so no root rights are needed. The purpose of this item is to track the development of a test suite to validate the following conditions are met on the qemu to swtpm connection: - Read/write can work correctly. - ioctls could be mapped to out-of-band messages. - If the unix domain socket pair is created by qemu and passed to swtpm as stdin/out, then it is guaranteed that swtpm stops when qemu gets killed.
After an agreement with the Refkit team, the progress on the minimal required sanity tests to release a feature will be tracked on the same bug issue used to track the feature's development. Analogous QA bugs like this one may be created if required, and will be used to track the development of more extensive test cases. According to this, the dependence will be inverted in relation to the feature bug.
No more tests for this are considered at the moment aside of the core ones which already being described as part of a different bug. Closing for now.