Merge branch 'main' into deprecate-chisel-v1

tests/basic/task.yaml

@@ -4,16 +4,18 @@ execute: |
   rootfs_folder=rootfs_${RELEASE}
   mkdir -p $rootfs_folder
   chisel cut --release ${OS}-${RELEASE} \
-    --root $rootfs_folder ca-certificates_data openssl_bins
-  
+    --root $rootfs_folder base-passwd_data openssl_bins
+
   # make sure $rootfs_folder is not empty
   ls ${rootfs_folder}/*
 
-  # with the ca-certificates mutation script, we can assert that:
-  # - etc/ssl/certs/ca-certificates.crt is not empty
-  # - usr/share/ca-certificates/mozilla/ does not exist
-  test -s ${rootfs_folder}/etc/ssl/certs/ca-certificates.crt 
-  test ! -d ${rootfs_folder}/usr/share/ca-certificates/mozilla 
+  # with the base-passwd mutation script, we can assert that:
+  # - etc/{group,passwd} are not empty and not equal to FIXME
+  # - usr/share/base-passwd/{group.master,passwd.master} do not exist
+  test -s ${rootfs_folder}/etc/group && test "$(< ${rootfs_folder}/etc/group)" != "FIXME"
+  test -s ${rootfs_folder}/etc/passwd && test "$(< ${rootfs_folder}/etc/passwd)" != "FIXME"
+  test ! -e ${rootfs_folder}/usr/share/base-passwd/group.master
+  test ! -e ${rootfs_folder}/usr/share/base-passwd/passwd.master
 
   # with the openssl pkg, both internal and external dependencies need to be met, for:
   # - libc6_libs