Live tests

Run Korta against disposable systemd hosts in Docker. These containers are privileged; use them only on a development machine.

ssh-keygen -q -t ed25519 -N '' -f /tmp/xela-live/id
cp /tmp/xela-live/id.pub testdata/livehost/authorized_keys
docker build -t xela-livehost testdata/livehost
docker build -t xela-livehost-rocky -f testdata/livehost/Dockerfile.rocky testdata/livehost
docker run -d --name xela-live --privileged --cgroupns=host -v /sys/fs/cgroup:/sys/fs/cgroup:rw -p 127.0.0.1:2222:22 xela-livehost
docker exec xela-live cat /etc/ssh/ssh_host_ed25519_key.pub   # pin this host key

Register the host as 127.0.0.1 port 2222, user xela, then follow the README. A useful acceptance pass:

1. Apply a postgres deployment with access and "backup":{}.
2. Connect with the returned URL and CA (sslmode=verify-full). Check that a wrong password and sslmode=disable are rejected.
3. Create a table, note the time, drop it, run pg_switch_wal(), restore to the noted time and confirm the table is back.
4. Apply again and confirm it succeeds without changes.

Remove the containers afterwards: docker rm -f xela-live xela-live-rocky.