#1 Add CI tests using the standard test interface
Merged a year ago by rharwood. Opened a year ago by yshapovalov.
git://fedorapeople.org/~yshapovalov/krb5 add_tests  into  master

add tests with standard tests interface
Yevhenii Shapovalov • a year ago  
tests/inplace-upgrade-sanity-test/Makefile
file added
+64

@@ -0,0 +1,64 @@

+ # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ #

+ #   Makefile of /CoreOS/krb5/Sanity/inplace-upgrade-sanity-test

+ #   Description: Verifies basic scenarios which should work after inplace upgrade.

+ #   Author: Patrik Kis <pkis@redhat.com>

+ #

+ # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ #

+ #   Copyright (c) 2014 Red Hat, Inc.

+ #

+ #   This copyrighted material is made available to anyone wishing

+ #   to use, modify, copy, or redistribute it subject to the terms

+ #   and conditions of the GNU General Public License version 2.

+ #

+ #   This program is distributed in the hope that it will be

+ #   useful, but WITHOUT ANY WARRANTY; without even the implied

+ #   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR

+ #   PURPOSE. See the GNU General Public License for more details.

+ #

+ #   You should have received a copy of the GNU General Public

+ #   License along with this program; if not, write to the Free

+ #   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,

+ #   Boston, MA 02110-1301, USA.

+ #

+ # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ 

+ export TEST=/CoreOS/krb5/Sanity/inplace-upgrade-sanity-test

+ export TESTVERSION=1.0

+ 

+ BUILT_FILES=

+ 

+ FILES=$(METADATA) runtest.sh Makefile PURPOSE

+ 

+ .PHONY: all install download clean

+ 

+ run: $(FILES) build

+ 	./runtest.sh

+ 

+ build: $(BUILT_FILES)

+ 	test -x runtest.sh || chmod a+x runtest.sh

+ 

+ clean:

+ 	rm -f *~ $(BUILT_FILES)

+ 

+ 

+ include /usr/share/rhts/lib/rhts-make.include

+ 

+ $(METADATA): Makefile

+ 	@echo "Owner:           Patrik Kis <pkis@redhat.com>" > $(METADATA)

+ 	@echo "Name:            $(TEST)" >> $(METADATA)

+ 	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)

+ 	@echo "Path:            $(TEST_DIR)" >> $(METADATA)

+ 	@echo "Description:     Verifies basic scenarios which should work after inplace upgrade." >> $(METADATA)

+ 	@echo "Type:            Sanity" >> $(METADATA)

+ 	@echo "TestTime:        20m" >> $(METADATA)

+ 	@echo "RunFor:          krb5" >> $(METADATA)

+ 	@echo "Requires:        expect krb5-server krb5-workstation openssh-clients openssh-server rng-tools" >> $(METADATA)

+ 	@echo "Priority:        Normal" >> $(METADATA)

+ 	@echo "License:         GPLv2" >> $(METADATA)

+ 	@echo "Confidential:    no" >> $(METADATA)

+ 	@echo "Destructive:     no" >> $(METADATA)

+ 	@echo "Releases:        -RHEL4 -RHELClient5 -RHELServer5" >> $(METADATA)

+ 

+ 	rhts-lint $(METADATA)

tests/inplace-upgrade-sanity-test/PURPOSE
file added
+3

@@ -0,0 +1,3 @@

+ PURPOSE of /CoreOS/krb5/Sanity/inplace-upgrade-sanity-test

+ Description: Verifies basic scenarios which should work after inplace upgrade.

+ Author: Patrik Kis <pkis@redhat.com>

tests/inplace-upgrade-sanity-test/kdc.conf
file added
+19

@@ -0,0 +1,19 @@

+ [kdcdefaults]

+     kdc_ports = 88

+     kdc_tcp_ports = 88

+ 

+ [realms]

+     ${krb5REALM1} = {

+         #master_key_type = aes256-cts

+         acl_file = /var/kerberos/krb5kdc/kadm5.acl

+         dict_file = /usr/share/dict/words

+         admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab

+         supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal camellia256-cts:normal camellia128-cts:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal

+     }

+     ${krb5REALM2}    = {

+         #master_key_type = aes256-cts

+         acl_file = /var/kerberos/krb5kdc/kadm5.acl

+         dict_file = /usr/share/dict/words

+         admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab

+         supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal camellia256-cts:normal camellia128-cts:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal

+     }

tests/inplace-upgrade-sanity-test/krb5.conf
file added
+36

@@ -0,0 +1,36 @@

+ # To opt out of the system crypto-policies configuration of krb5, remove the

+ # symlink at /etc/krb5.conf.d/crypto-policies which will not be recreated.

+ includedir /etc/krb5.conf.d/

+ 

+ [logging]

+     default = FILE:/var/log/krb5libs.log

+     kdc = FILE:/var/log/krb5kdc.log

+     admin_server = FILE:/var/log/kadmind.log

+ 

+ [libdefaults]

+     default_realm = ${krb5REALM1}

+     dns_lookup_realm = false

+     ticket_lifetime = 24h

+     renew_lifetime = 7d

+     forwardable = true

+     rdns = false

+     default_ccache_name = KEYRING:persistent:%{uid}

+ 

+ [realms]

+     ${krb5REALM1} = {

+         kdc = localhost.localdomain

+         admin_server = localhost.localdomain

+     }

+     ${krb5REALM2} = {

+         kdc = localhost.localdomain

+         admin_server = localhost.localdomain

+     }

+ 

+ [domain_realm]

+     ${krb5HostName} = ${krb5REALM1}

+     ${krb5HostName} = ${krb5REALM2}

+ 

+ [capaths]

+     ${krb5REALM1} = {

+         ${krb5REALM2} = .

+     }

tests/inplace-upgrade-sanity-test/runtest.sh
file added
+306

@@ -0,0 +1,306 @@

+ #!/bin/bash

+ # vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k

+ # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ #

+ #   runtest.sh of /CoreOS/krb5/Sanity/inplace-upgrade-sanity-test

+ #   Description: Verifies basic scenarios which should work after inplace upgrade.

+ #   Author: Patrik Kis <pkis@redhat.com>

+ #

+ # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ #

+ #   Copyright (c) 2014 Red Hat, Inc.

+ #

+ #   This copyrighted material is made available to anyone wishing

+ #   to use, modify, copy, or redistribute it subject to the terms

+ #   and conditions of the GNU General Public License version 2.

+ #

+ #   This program is distributed in the hope that it will be

+ #   useful, but WITHOUT ANY WARRANTY; without even the implied

+ #   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR

+ #   PURPOSE. See the GNU General Public License for more details.

+ #

+ #   You should have received a copy of the GNU General Public

+ #   License along with this program; if not, write to the Free

+ #   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,

+ #   Boston, MA 02110-1301, USA.

+ #

+ # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

+ 

+ # Include Beaker environment

+ . /usr/bin/rhts-environment.sh

+ . /usr/share/beakerlib/beakerlib.sh || exit 1

+ 

+ PACKAGE="krb5"

+ PACKAGES="krb5-libs krb5-server krb5-workstation openssh"

+ 

+ TEST_ENTROPY_SOURCE=${TEST_ENTROPY_SOURCE:-no}

+ echo TEST_ENTROPY_SOURCE=$TEST_ENTROPY_SOURCE

+ 

+ hostnamectl set-hostname test.fedora.com

+ echo "`hostname -I` test.fedora.com" >>/etc/hosts

+ 

+ krb5REALM1='ZMRAZ.COM'

+ krb5REALM2='PKIS.NET'

+ krb5HostName=`hostname`

+ krb5DomainName=`hostname -d`

+ krb5User='alice'

+ krb5UserPass='alice'

+ krb5UserKrbPass='aaa'

+ krb5User2='bob'

+ krb5User3='carl'

+ krb5KDCPass='qwe'

+ krb5RootPass='rrr'

+ 

+ krb5conf="/etc/krb5.conf"

+ krb5confdir="/etc/krb5.conf.d"

+ krb5kdcconf="/var/kerberos/krb5kdc/kdc.conf"

+ krb5kadmacl="/var/kerberos/krb5kdc/kadm5.acl"

+ 

+ rlJournalStart

+     rlPhaseStartSetup

+         for pkg in $PACKAGES; do

+             rlAssertRpm $pkg

+         done

+         rlRun "TmpDir=\$(mktemp -d)"

+         rlRun "pushd $TmpDir"

+     rlPhaseEnd

+ 

+     # Run this part on OLD and in "normal" mode

+     if [[ -z $IN_PLACE_UPGRADE || $IN_PLACE_UPGRADE == old ]]; then

+     rlPhaseStartSetup "KDC and kadmind setup"

+         # Stop and backup

+         rlRun "rlServiceStop kadmin krb5kdc"

+         rlRun "rm -f /var/kerberos/krb5kdc/principal* /var/kerberos/krb5kdc/.k5*"

+         rlFileBackup $krb5conf /var/kerberos/krb5kdc /etc/sysconfig/{kadmin,krb5kdc}

+         [ -e /etc/krb5.keytab ] && rlFileBackup /etc/krb5.keytab

+         [ -e $krb5confdir ] && rlFileBackup $krb5confdir

+         # Basic setup of KDC and krb5.conf

+         if rlIsRHEL 6; then

+             rlRun "sed -i \"s/EXAMPLE.COM/$krb5REALM1/\" $krb5conf"

+             rlRun "sed -i \"s/kerberos.example.com/$krb5HostName/\" $krb5conf"

+             rlRun "sed -i \"s/example.com/$krb5DomainName/\" $krb5conf"

+         else

+             rlRun "sed -i \"s/\[libdefaults\]/[libdefaults]\n default_realm = $krb5REALM1/\" $krb5conf"

+             rlRun "sed -i \"s/\[realms\]/[realms]\n $krb5REALM1 = {\n  kdc = $krb5HostName\n  admin_server = $krb5HostName\n }/\" $krb5conf"

+             rlRun "sed -i \"s/\[domain_realm\]/[domain_realm]\n .$krb5DomainName = $krb5REALM1\n $krb5DomainName = $krb5REALM1/\" $krb5conf"

+         fi

+         rlRun "sed -i s/EXAMPLE.COM/$krb5REALM1/ $krb5kdcconf"

+         # Configure the kadmin ACL

+         rlRun "echo \"*/master@$krb5REALM1  *\" > $krb5kadmacl"

+         # Configure the 2nd realmd

+         cat >>$krb5kdcconf <<_EOF

+ 

+  $krb5REALM2 = {

+   #master_key_type = aes256-cts

+   database_name = /var/kerberos/krb5kdc/principal.$krb5REALM1

+   acl_file = /var/kerberos/krb5kdc/kadm5.acl

+   dict_file = /usr/share/dict/words

+   admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab

+   supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal

+  }

+ _EOF

+         rlIsRHEL 6 || rlRun "sed -i \"s/supported_enctypes.*/supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal camellia256-cts:normal camellia128-cts:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal/\" /var/kerberos/krb5kdc/kdc.conf"

+         rlRun "sed -i \"s/\[realms\]/[realms]\n $krb5REALM2 = {\n  kdc = $krb5HostName\n  admin_server = $krb5HostName\n }/\" $krb5conf"

+         cat >> $krb5conf << _EOF

+ 

+ [capaths]

+  $krb5REALM1 = {

+   $krb5REALM2 = .

+  }

+ _EOF

+         # Test the entropy source (not relevant for RHEL6)

+         if ! rlIsRHEL 6 && [[ $TEST_ENTROPY_SOURCE == 'yes' ]]; then

+             rlLog "The source of entropy will be tested as well"

+             START_DATE=`date +%H:%M:%S`

+             echo START_DATE=$START_DATE

+             sleep 1

+             rlRun "auditctl -w /dev/random -p rwxa -k RAND"

+             auditctl -l

+             sleep 1

+             rlRun "ausearch -i -k RAND -ts $START_DATE"

+         fi

+         # Create the realm databases

+         rlRun "rngd -r /dev/urandom"

+         rlRun "kdb5_util create -s -r $krb5REALM1 -P $krb5KDCPass"

+         rlRun "kdb5_util create -s -r $krb5REALM2 -P $krb5KDCPass"

+         # Configure KDC to handle 2 realms

+         if rlIsRHEL 6; then

+             rlRun "echo \"KRB5REALM=$krb5REALM1\" > /etc/sysconfig/krb5kdc"

+             rlRun "echo KRB5KDC_ARGS=\\\"-r $krb5REALM2\\\" >> /etc/sysconfig/krb5kdc"

+         else

+             rlRun "echo KRB5KDC_ARGS=\\\"-r $krb5REALM1 -r $krb5REALM2 \\\" >/etc/sysconfig/krb5kdc"

+         fi

+         rlRun "rlServiceStart kadmin krb5kdc"

+         # Add krb5 principals for the 2nd realm

+         rlRun "kadmin.local -r $krb5REALM1 -q \"addprinc -pw $krb5RootPass root/master\""

+         rlRun "kadmin.local -r $krb5REALM1 -q \"addprinc -pw $krb5UserKrbPass $krb5User\""

+         rlRun "kadmin.local -r $krb5REALM1 -q \"addprinc -randkey host/$krb5HostName\""

+         rlRun "kadmin.local -r $krb5REALM1 -q \"ktadd host/$krb5HostName\""

+         rlRun "kadmin.local -r $krb5REALM1 -q \"addprinc -pw $krb5KDCPass krbtgt/$krb5REALM1@$krb5REALM2\""

+         rlRun "kadmin.local -r $krb5REALM1 -q \"addprinc -pw $krb5KDCPass krbtgt/$krb5REALM2@$krb5REALM1\""

+         # Add krb5 principals for the 2nd realm

+         rlRun "kadmin.local -r $krb5REALM2 -q \"addprinc -pw $krb5UserKrbPass $krb5User2\""

+         rlRun "kadmin.local -r $krb5REALM2 -q \"addprinc -randkey host/$krb5HostName\""

+         rlRun "kadmin.local -r $krb5REALM2 -q \"addprinc -pw $krb5KDCPass krbtgt/$krb5REALM1@$krb5REALM2\""

+         rlRun "kadmin.local -r $krb5REALM2 -q \"addprinc -pw $krb5KDCPass krbtgt/$krb5REALM2@$krb5REALM1\""

+         # Create test system user 

+         [ $krb5User != "root" ] && rlRun "useradd $krb5User"

+         rlRun "echo $krb5UserPass | passwd --stdin $krb5User"

+     rlPhaseEnd

+     fi

+     

+     rlPhaseStartTest "Daemon start and log file test"

+         # Make sure there is enough entropy and start recording of the logs

+         rlRun "rngd -r /dev/urandom"

+         if grep -q krb5kdc /var/log/krb5kdc.log; then

+             tail -n0 -f /var/log/krb5kdc.log &> krb5kdc.log.record &

+             KRB5KDC_LOG_PID=$!

+             echo "log_record_start: PID = $KRB5KDC_LOG_PID"

+             sleep 1

+         elif journalctl |grep -q krb5kdc; then

+             journalctl -f &> krb5kdc.log.record &

+             KRB5KDC_LOG_PID=$!

+             echo "log_record_start: PID = $KRB5KDC_LOG_PID"

+             sleep 1

+         else

+             rlFail "Could not find krb5kdc logs"

+             echo "journalctl:"

+             journalctl -n 100

+             ls -la /var/log/krb5kdc*

+             echo "/var/log/krb5kdc.log:"

+             tail -n 100 /var/log/krb5kdc.log

+         fi

+         if grep -q kadmind /var/log/kadmind.log; then

+             tail -n0 -f /var/log/kadmind.log &> kadmind.log.record &

+             KADMIND_LOG_PID=$!

+             echo "log_record_start: PID = $KADMIND_LOG_PID"

+             sleep 1

+         elif journalctl |grep -q kadmind; then

+             journalctl -f &> kadmind.log.record &

+             KADMIND_LOG_PID=$!

+             echo "log_record_start: PID = $KADMIND_LOG_PID"

+             sleep 1

+         else

+             rlFail "Could not find kadmind logs"

+             echo "journalctl:"

+             journalctl -n 100

+             ls -la /var/log/kadmind*

+             echo "/var/log/kadmind.log:"

+             tail -n 100 /var/log/kadmind.log

+         fi

+         # Restart daemon auto start

+         if rlIsRHEL 6; then

+             rlRun "service krb5kdc restart"

+             rlRun "service kadmin restart"

+             rlRun "service krb5kdc status"

+             rlRun "service kadmin status"

+         else

+             rlRun "systemctl restart krb5kdc.service"

+             rlRun "systemctl restart kadmin.service"

+             rlRun "systemctl --no-pager status krb5kdc.service"

+             rlRun "systemctl --no-pager status kadmin.service"

+         fi

+         rlRun "echo $krb5UserKrbPass |kinit $krb5User && klist"

+         rlRun "kdestroy"

+         rlRun "kadmin -p root/master -w rrr -q ''"

+         rlAssertGrep "AS_REQ.*$krb5User@$krb5REALM1.*krbtgt/$krb5REALM1@$krb5REALM1" krb5kdc.log.record

+         cat krb5kdc.log.record

+         rlAssertGrep "Request: kadm5_init.*root/master@$krb5REALM1.*service=kadmin/`hostname`@$krb5REALM1" kadmind.log.record

+         cat kadmind.log.record

+         # Stop log recording

+         kill $KADMIND_LOG_PID

+         kill $KRB5KDC_LOG_PID

+     rlPhaseEnd

+ 

+     rlPhaseStartTest "SSH test"

+         cat > sshtest.exp <<'_EOF'

+ #!/usr/bin/expect -f

+ set USER    [lindex $argv 0]

+ set HOST    [lindex $argv 1]

+ set timeout 10

+ spawn ssh $USER@$HOST pwd

+ expect {

+     -re ".*(yes/no).*" { send -- "yes\r"; exp_continue }

+     -re ".*password:.*" { exit 1 }

+     "/home/$USER" { exit 0 }

+     timeout { exit 2 }

+     eof { exit 3 }

+ }

+ exit 4

+ _EOF

+         chmod 744 sshtest.exp

+         rlAssertExists sshtest.exp

+         rlRun "echo $krb5UserKrbPass |kinit $krb5User && klist"

+         rlRun "./sshtest.exp $krb5User $krb5HostName"; echo

+         rlRun "klist &>klist.log"

+         cat klist.log

+         rlAssertGrep "host/`hostname`@$krb5REALM1" klist.log

+         rlRun "kdestroy"

+     rlPhaseEnd

+ 

+     rlPhaseStartTest "Basic kadmin and kpasswd test"

+         rlRun "kadmin.local -q \"listprincs\" |grep -v Authenticating >lplocal"

+         rlRun "kadmin -p root/master -w $krb5RootPass -q \"listprincs\" |grep -v Authenticating >lpremote"

+         rlAssertNotDiffer lplocal lpremote || diff -u lplocal lpremote

+         diff lplocal lpremote

+         rlRun "kadmin -p root/master -w $krb5RootPass -q \"addprinc -pw $krb5User2 $krb5User2@$krb5REALM1\""

+         rlRun "kadmin -p root/master -w $krb5RootPass -q \"listprincs\" | grep \"$krb5User2@$krb5REALM1\""

+ 

+         rlRun "echo $krb5User2 | kinit $krb5User2"

+         rlRun "echo -e \"$krb5User2\nqwerty\nqwerty\" | kpasswd &>kpasswd.log"

+         cat kpasswd.log

+         rlAssertGrep "Password changed." kpasswd.log

+         rlRun "echo qwerty | kinit $krb5User2"

+         rlRun "kdestroy"

+         rlRun "kadmin -p root/master -w $krb5RootPass -q \"delprinc -force $krb5User2@$krb5REALM1\""

+     rlPhaseEnd

+ 

+     rlPhaseStartTest "Basic ksu test"

+         [[ -f /root/.k5login ]] && rlRun "mv /root/.k5login ."

+         rlRun "echo $krb5User@$krb5REALM1 > /root/.k5login"

+         rlRun "su - $krb5User -c \"echo $krb5UserKrbPass | kinit $krb5User\""

+         rlRun "su - $krb5User -c \"ksu -e /usr/bin/id\" &> ksu.log"

+         cat ksu.log

+         rlAssertGrep "^uid=0(root) gid=0(root)" ksu.log

+         rlRun "su - $krb5User -c kdestroy"

+         [[ -f .k5login ]] && rlRun "mv .k5login /root/.k5login"

+     rlPhaseEnd

+ 

+     rlPhaseStartTest "Cross realm test"

+         rlRun "echo $krb5UserKrbPass |kinit $krb5User && klist"

+         rlRun "kvno host/`hostname`@$krb5REALM2"

+         rlRun "klist &>klist.log"

+         cat klist.log

+         rlAssertGrep "krbtgt/$krb5REALM1@$krb5REALM1" klist.log

+         rlAssertGrep "krbtgt/$krb5REALM2@$krb5REALM1" klist.log

+         rlAssertGrep "host/`hostname`@$krb5REALM2" klist.log

+         rlRun "kdestroy"

+     rlPhaseEnd

+ 

+     # Test the entropy source (not relevant for RHEL6)

+     if ! rlIsRHEL 6 && [[ $TEST_ENTROPY_SOURCE == 'yes' ]]; then

+         rlPhaseStartTest "Enable faster getrandom-based entropy system"

+             echo START_DATE=$START_DATE

+             auditctl -l

+             rlRun "ausearch -i -k RAND -ts $START_DATE"

+             rlRun "ausearch -i -k RAND -ts $START_DATE |grep comm= |grep -v 'comm=rngd'" 1

+             rlRun "auditctl -D"

+         rlPhaseEnd

+     fi

+ 

+     # Run this part on "normal" mode; in inplace upgrade no cleanup is needed

+     if [[ -z $IN_PLACE_UPGRADE ]]; then

+     rlPhaseStartCleanup "KDC and kadmind cleanup"

+         rlRun "rm -rf /var/kerberos/krb5kdc/* /var/kerberos/krb5kdc/.k5* /etc/krb5* /etc/sysconfig/{kadmin,krb5kdc}"

+         rlFileRestore

+         rlRun "rlServiceRestore krb5kdc kadmin"

+         [ $krb5User != "root" ] && rlRun "userdel -r -f $krb5User"

+     rlPhaseEnd

+     fi

+     

+     rlPhaseStartCleanup

+         rlRun "popd"

+         rlRun "rm -r $TmpDir"

+     rlPhaseEnd

+ rlJournalPrintText

+ rlJournalEnd

tests/tests.yml
file added
+16

@@ -0,0 +1,16 @@

+ ---

+ # This first play always runs on the local staging system

+ - hosts: localhost

+   roles:

+   - role: standard-test-beakerlib

+     tags:

+     - classic

+     tests:

+     - inplace-upgrade-sanity-test

+     required_packages:

+     - expect            # Required for inplace-upgrade-sanity-test

+     - krb5-server       # Required for inplace-upgrade-sanity-test

+     - krb5-workstation  # Required for inplace-upgrade-sanity-test

+     - openssh-clients   # Required for inplace-upgrade-sanity-test

+     - openssh-server    # Required for inplace-upgrade-sanity-test

+     - rng-tools         # Required for inplace-upgrade-sanity-test

no initial comment

Justification

Adds tests according to the CI wiki specifically the standard test interface in the spec.

The playbook includes Tier1 level test cases that have been tested in the following contexts and is passing reliably: Classic and Container. Test logs are stored in the artifacts directory.

The following steps are used to execute the tests using the standard test interface:

Test enveronment

Make sure you have installed packages from the spec

# rpm -q ansible python2-dnf libselinux-python standard-test-roles \
ansible-2.4.1.0-2.fc27.noarch
python2-dnf-2.7.5-1.fc27.noarch
libselinux-python-2.7-2.fc27.x86_64
standard-test-roles-2.4-1.fc27.noarch

Run tests for Classic

# export TEST_SUBJECTS=
# sudo ansible-playbook --tags classic tests.yml

Snip of the example test run for Classic tests:

TASK [standard-test-beakerlib : Check the results] ****************************************************************************************************************************************************************
changed: [localhost]

PLAY RECAP ********************************************************************************************************************************************************************************************************
localhost                  : ok=15   changed=12   unreachable=0    failed=0

Notes

Tests will be enabled in CI, yet gating is currently disabled, so nothing will change. Tests will run on each dist-git commit, they are not triggered on koji builds and if you are using FMN, it should notify you of failures normally.

The RH QE maintainer contact in case you have questions: yhsapova@redhat.com
The idea is that these tests become yours just as you're maintaining the package, there will of course be people around if you have questions or troubles.

Pull-Request has been merged by rharwood

a year ago