test:docker: Create a common group for parsec users

Motive: The latest rust release (1.65) seems to handle the registry
differently.
It needs to write permissions to the registry for each command.
Even if the package is in the registry.

Solution: Create a common group for parsec clients users which grant them
r/w access to the registry (files in general).
Set the group owner of /opt/rust/registry to the common group and
set permissions to 775. i.e. "drwxrwxr-x 1 root parsec-clients registry"

Signed-off-by: Mohamed Omar Asaker <[email protected]>

Author: mohamedasaker-arm

ci.sh

@@ -393,7 +393,8 @@ if [ "$PROVIDER_NAME" = "all" ]; then
     # Needed because parsec-client-1 and 2 write to those locations owned by root
     chmod 777 /tmp/parsec/e2e_tests
     chmod 777 /tmp/
-    chmod -R 777 /opt/rust/registry
+    chmod -R 775 /opt/rust/registry
+    chgrp -R parsec-clients /opt/rust/registry
 
     # PATH is defined before each command for user to use their own version of the Rust toolchain
     su -c "PATH=\"/home/parsec-client-1/.cargo/bin:${PATH}\";RUST_BACKTRACE=1 cargo test $TEST_FEATURES --manifest-path ./e2e_tests/Cargo.toml --target-dir /home/parsec-client-1 all_providers::multitenancy::client1_before" parsec-client-1

e2e_tests/docker_image/parsec-service-test-all.Dockerfile

@@ -16,7 +16,6 @@ RUN apt install -y --fix-missing wget python3 cmake clang
 RUN apt install -y libini-config-dev libcurl4-openssl-dev curl libgcc1
 RUN apt install -y python3-distutils libclang-6.0-dev protobuf-compiler python3-pip
 RUN DEBIAN_FRONTEND=noninteractive TZ=Etc/UTC apt-get -y install tzdata
-
 WORKDIR /tmp
 
 # Download and install TSS 2.0
@@ -107,8 +106,13 @@ COPY _exec_wrapper /usr/local/bin/
 RUN ls /opt/rust/bin | xargs -n1 -I% ln -s /usr/local/bin/_exec_wrapper /usr/local/bin/$(basename %)
 
 # Add users for multitenancy tests
-RUN useradd -m parsec-client-1
-RUN useradd -m parsec-client-2
+RUN useradd -m parsec-client-1 \
+ && useradd -m parsec-client-2 \
+ && groupadd parsec-clients \
+ && usermod -g parsec-clients parsec-client-1 \
+ && usermod -g parsec-clients parsec-client-2 \
+ && sed -i '/^UMASK/s/022/002/' /etc/login.defs
+
 
 # Add `/usr/local/lib` to library path for Trusted service provider
 ENV LD_LIBRARY_PATH="/usr/local/lib"