tests/kola: Add lockdown LSM test #3326
Conversation
travier
force-pushed
the
lockdown-lsm
branch
2 times, most recently
from
4f6d317 to
709c6cd
Compare
|
Will rebase / update once https://bodhi.fedoraproject.org/updates/FEDORA-2025-cca2fcc70c lands in FCOS. |
travier
force-pushed
the
lockdown-lsm
branch
2 times, most recently
from
66efa57 to
c8f236f
Compare
|
Updated to account for both Secure Boot and non-SB runs. This should work on all architectures but running it only on x86_64 and aarch64 makes sense.
Hum, do you mean that we should add a special kola tag so that it runs this test in a SB enabled VM? We indeed don't run the general kola tests with SB enabled AFAIK. |
travier
removed
the
jira
|
Created coreos/coreos-assembler#4112 to track the work in kola |
|
Merge after coreos/coreos-assembler#4114 |
| @@ -0,0 +1,24 @@ | |||
| #!/bin/bash | |||
There was a problem hiding this comment.
we'll need to denylist this test for all centos stuff in the rhel-coreos-config.
we could add a distros: entry here but I prefer to keep all the "overrides" for the secureboot in centos problem in the same place.
There was a problem hiding this comment.
@dustymabe Here's the PR for this. coreos/rhel-coreos-config#15
Add ext.config.security.lockdown to kola-denylist.yaml for centos version 9, 10, 10.1 Related to: coreos/coreos-assembler#4112 Needed for: coreos/fedora-coreos-config#3326
Add ext.config.security.lockdown to kola-denylist.yaml for centos version 9, 10, 10.1 Related to: coreos/coreos-assembler#4112 Needed for: coreos/fedora-coreos-config#3326
See: https://bugzilla.redhat.com/show_bug.cgi?id=2333706 co-authored by: Bipin B Narayan <[email protected]> Needs: coreos/coreos-assembler#4112
See: https://bugzilla.redhat.com/show_bug.cgi?id=2333706
Will fail until https://bugzilla.redhat.com/show_bug.cgi?id=2333706 is fixed.