install apparmor

Author: manodnyab

buildspec/linuxUiTests.yml

@@ -46,6 +46,17 @@ phases:
         
       - chmod +x gradlew
 
+      - |
+        >/etc/apparmor.d/jcef
+        abi <abi/4.0>,
+          include <tunables/global>
+          
+          profile /usr/lib/jvm/java-21-amazon-corretto.x86_64/bin/java flags=(unconfined) {
+          userns,
+        
+          include if exists <local/chrome>
+        }
+      - apparmor_parser -r /etc/apparmor.d/jcef
       - ffmpeg -loglevel quiet -nostdin -f x11grab -video_size ${SCREEN_WIDTH}x${SCREEN_HEIGHT} -i ${DISPLAY} -codec:v libx264 -pix_fmt yuv420p -vf drawtext="fontsize=48:box=1:[email protected]:boxborderw=5:fontcolor=white:x=0:y=h-text_h:text='%{gmtime\:%H\\\\\:%M\\\\\:%S}'" -framerate 12 -g 12 /tmp/screen_recording.mp4 &
       - ./gradlew -PideProfileName=$ALTERNATIVE_IDE_PROFILE_NAME :ui-tests-starter:uiTest coverageReport --console plain --info
 

settings.gradle.kts

@@ -100,10 +100,11 @@ include("sandbox-all")
 include("ui-tests-starter")
 when (providers.gradleProperty("ideProfileName").get()) {
     // FIX_WHEN_MIN_IS_242: `tmp-all` test module no longer needed in 242+
-    "2023.3", "2024.1" -> {
+    "2024.1" -> {
         include("tmp-all")
-
-        // only available 242+
+    }
+    "2024.1", "2024.2" -> {
+        // only available 243+
         project(":ui-tests-starter").projectDir = file("noop")
     }
 }

ui-tests-starter/build.gradle.kts

@@ -2,14 +2,15 @@
 // SPDX-License-Identifier: Apache-2.0
 
 import org.jetbrains.intellij.platform.gradle.TestFrameworkType
+import org.jetbrains.intellij.platform.gradle.tasks.aware.RuntimeAware
 import software.aws.toolkits.gradle.findFolders
 import software.aws.toolkits.gradle.intellij.IdeVersions
 
 plugins {
     id("toolkit-kotlin-conventions")
     id("toolkit-intellij-plugin")
 
-    id("org.jetbrains.intellij.platform.module")
+    id("org.jetbrains.intellij.platform")
 }
 
 val ideProfile = IdeVersions.ideProfile(project)
@@ -100,3 +101,44 @@ val action = Action<TaskExecutionGraph> {
     }
 }
 gradle.taskGraph.whenReady(action)
+//
+//abstract class InstallCefAppArmor : DefaultTask(), RuntimeAware {
+//    @TaskAction
+//    fun execute() {
+//        println(runtimeLauncher.get().executablePath)
+//    }
+//}
+//tasks.register("installCefAppArmor") {
+//    description = "Install AppArmor profile for JBCef"
+//    group = "Security"
+//    val osName = System.getProperty("os.name").lowercase()
+//    doFirst {
+//        if (!osName.contains("linux")) {
+//            println("Skipping AppArmor installation - not running on Linux")
+//            return@doFirst
+//        }
+//    }
+//
+//    doLast {
+//        val profile = """
+//            # This profile is autogenerated to allow running sandboxed JCEF
+//      abi <abi/4.0>,
+//      include <tunables/global>
+//
+//      profile %s flags=(unconfined) {
+//        userns,
+//
+//        include if exists <local/chrome>
+//        }
+//        """.trimIndent()
+//        profile.format("/usr/lib/jvm/java-21-amazon-corretto.x86_64/bin/java")
+//        val profileAction = JBCefAppArmorUtils.getInstallInstallAppArmorProfileAction()
+//        if (profileAction != null) {
+//            profileAction.run()
+//            println("AppArmor profile installation completed")
+//        } else {
+//            println("No AppArmor profile installation action available")
+//        }
+//    }
+//
+//}