acceptance: bazelify trc ceremony tests (#4209)

Bazelify TRC ceremony tests.
The motivation/goal is that developers can run all integration tests locally with a single command.

Change invocation of test in CI to explicitly run these tests with bazel; this will be streamlined by combining this with the acceptance test steps in a follow up PR.

.bazelrc

@@ -23,7 +23,7 @@ test:unit --test_tag_filters=unit
 test:unit_all --config=unit //...
 
 test:integration --test_tag_filters=integration,-lint
-test:integration_go --config=integration -- //... -//acceptance/... -//demo/...
-test:acceptance_all --config=integration //acceptance/... //demo/...
+test:integration_go --config=integration -- //... -//acceptance/... -//demo/... -//tools/cryptoplayground/...
+test:acceptance_all --config=integration //acceptance/... //demo/... //tools/cryptoplayground/...
 
 test:lint --test_tag_filters=lint --test_summary=terse --noshow_progress --experimental_convenience_symlinks=ignore //...

.buildkite/pipeline.yml

@@ -160,16 +160,10 @@ steps:
       automatic:
         - exit_status: -1 # Agent was lost
         - exit_status: 255 # Forced agent shutdown
-  - label: "TRC ceremony :bash:"
+  - label: "TRC ceremony :bazel:"
     if: build.message !~ /\[doc\]/
     command:
-      - echo "--- build"
-      - make scion-topo
-      - echo "--- run test"
-      - mkdir -p /tmp/test-artifacts/trc-ceremony
-      - export SAFEDIR="/tmp/test-artifacts/trc-ceremony"
-      - ./tools/cryptoplayground/trc_ceremony.sh
-      - ./tools/cryptoplayground/trc_ceremony_sensitive.sh
+      - bazel test //tools/cryptoplayground:trc_ceremony_test //tools/cryptoplayground:trc_ceremony_sensitive_test
     timeout_in_minutes: 15
     key: trc_ceremony_test
     artifact_paths:

tools/cryptoplayground/BUILD.bazel

@@ -1,3 +1,36 @@
 exports_files([
     "crypto_lib.sh",
 ])
+
+sh_test(
+    name = "trc_ceremony_test",
+    srcs = ["trc_ceremony.sh"],
+    data = [
+        ":crypto_lib.sh",
+        "//scion-pki/cmd/scion-pki",
+    ],
+    env = {
+        "SCION_PKI_BIN": "$(location //scion-pki/cmd/scion-pki)",
+    },
+    tags = [
+        "exclusive",
+        "integration",
+    ],
+)
+
+sh_test(
+    name = "trc_ceremony_sensitive_test",
+    srcs = ["trc_ceremony_sensitive.sh"],
+    data = [
+        "trc_ceremony.sh",
+        ":crypto_lib.sh",
+        "//scion-pki/cmd/scion-pki",
+    ],
+    env = {
+        "SCION_PKI_BIN": "$(location //scion-pki/cmd/scion-pki)",
+    },
+    tags = [
+        "exclusive",
+        "integration",
+    ],
+)

tools/cryptoplayground/crypto_lib.sh

@@ -54,7 +54,7 @@ start_docker() {
 
     docker run --name $name \
         -v $(pwd):/workdir \
-        -v $PLAYGROUND:/scripts \
+        -v $PLAYGROUND/crypto_lib.sh:/scripts/crypto_lib.sh \
         -d emberstack/openssl tail -f /dev/null
 }
 
@@ -86,7 +86,7 @@ in_docker() {
         -e KEYDIR=/keydir  \
         -v $PUBDIR:/pubdir \
         -e PUBDIR=/pubdir  \
-        -v $PLAYGROUND:/scripts \
+        -v $PLAYGROUND/crypto_lib.sh:/scripts/crypto_lib.sh \
         -e STARTDATE=$STARTDATE \
         -e ENDDATE=$ENDDATE \
         -e TRCID=$TRCID \

tools/cryptoplayground/trc_ceremony.sh

@@ -4,9 +4,10 @@
 # Do not remove or modify them!
 
 export SCION_ROOT=${SCION_ROOT:-$(pwd)}
-export PLAYGROUND=${PLAYGROUND:-$SCION_ROOT/tools/cryptoplayground}
+export PLAYGROUND=$(realpath "${PLAYGROUND:-$SCION_ROOT/tools/cryptoplayground}")
 export SAFEDIR=${SAFEDIR:-$(mktemp -d)}
-export PATH="$PATH:$SCION_ROOT/bin"
+export SCION_PKI_BIN=${SCION_PKI_BIN:-$SCION_ROOT/bin/scion-pki}
+export PATH="$(realpath $(dirname "$SCION_PKI_BIN")):$PATH"
 
 . $PLAYGROUND/crypto_lib.sh
 

tools/cryptoplayground/trc_ceremony_sensitive.sh

@@ -4,12 +4,15 @@
 # Do not remove or modify them!
 
 export SCION_ROOT=${SCION_ROOT:-$(pwd)}
-export PLAYGROUND=${PLAYGROUND:-$SCION_ROOT/tools/cryptoplayground}
+export PLAYGROUND=$(realpath "${PLAYGROUND:-$SCION_ROOT/tools/cryptoplayground}")
 export SAFEDIR=${SAFEDIR:-$(mktemp -d)}
-export PATH="$PATH:$SCION_ROOT/bin"
+export SCION_PKI_BIN=${SCION_PKI_BIN:-$SCION_ROOT/bin/scion-pki}
+export PATH="$(realpath $(dirname "$SCION_PKI_BIN")):$PATH"
 
 . $PLAYGROUND/crypto_lib.sh
 
+set -e
+
 if [ ! -d "$SAFEDIR/admin" ]; then
     echo "#########################"
     echo "# Running Base Ceremony #"
@@ -24,8 +27,6 @@ if [ ! -d "$SAFEDIR/admin" ]; then
     echo ""
 fi
 
-set -e
-
 STARTDATE="20210524120000Z"
 ENDDATE="20220524120000Z"
 PREDID="ISD1-B1-S1"