canonical / nullboot / 32835467124

69%

push

github

Pin goroutine to OS thread when reading the primary key

The keyring links established by KEYCTL_LINK are per-thread, but Go
may reschedule the goroutine onto a different OS thread between the
link and the subsequent key read, making the read intermittently
fail with permission denied:
final reseal failed: cannot obtain auth key from kernel: cannot read key from kernel: cannot determine size of key payload: permission denied

Wrap the link and read in runtime.LockOSThread()/UnlockOSThread() so
both syscalls run on the same thread.

Signed-off-by: Gerald Yang <gerald.yang@canonical.com>

3 of 3 new or added lines in 1 file covered. (100.0%)

920 of 1343 relevant lines covered (68.5%)

2.35 hits per line