cli: Add new state wipe-ostree subcommand

[omertuc]

Solves #776

Right now the integration tests have some hacky code to clear out ostree stateroots (see reset_root function), it would be better if they could rely on a bootc command to take care of that for them instead

This commit adds a new state wipe-ostree subcommand to the CLI that removes all ostree deployments from the system using native ostree bindings. This makes it easier to later rm -rf the stateroots and have a clean slate for the next test.

[omertuc]

Tests failing because we need to check that /ostree even exists before attempting to mount

[vrothberg]

LGTM

[omertuc]

Is it normal for the tests to fail in this manner?

[vrothberg]

TASK [check secure boot status] ************************************************
fatal: [guest]: FAILED! => changed=true
cmd:

• mokutil
• --sb-state
  delta: '0:00:00.003638'
  end: '2024-09-06 08:17:47.889643'
  msg: non-zero return code
  rc: 255
  start: '2024-09-06 08:17:47.886005'
  stderr: This system doesn't support Secure Boot
  stderr_lines:
  stdout: ''
  stdout_lines:

@cgwalters WDYT?

[cgwalters]

Nice thanks!

[cgwalters]

The c10s tests are busted due to https://issues.redhat.com/browse/RHEL-56025 which should hopefully get sorted out soon

stderr: This system doesn't support Secure Boot

Not sure on this one, @henrywang ?

[henrywang]

stderr: This system doesn't support Secure Boot

Not sure on this one, @henrywang ?

Hi @cgwalters , could you please link me this log? Thanks.

[cgwalters]

I can't find it but @vrothberg where did you see that?

[henrywang]

OH! I know this secure boot checking case. It's from

bootc/tests/e2e/playbooks/check-system.yaml

Line 23 in 1ba8d1e

- name: check secure boot status

Secure boot is one of system checkings, such as bios/uefi, tpm device, partition size, and partition table.

C9s and C10s are all disabled secure boot

bootc/tests/e2e/bootc-install.sh

Line 47 in 1ba8d1e

BOOT_ARGS="uefi,firmware.feature0.name=secure-boot,firmware.feature0.enabled=no"

But fedora enabled secure boot.