Differential D1204

Test upgrade of FreeIPA server and client deployment
ClosedPublic
Actions

Authored by adamwill on Jun 1 2017, 8:53 AM.

Details

Reviewers
jsedlak
jskladan
Commits
rOPENQATESTSdf2c3cd90648: Test upgrade of FreeIPA server and client deployment
Summary

This adds an upgrade variant of the FreeIPA tests, with only
the simplest client enrolment (sssd) for now. The server test
starts from the N-1 release and deploys the domain controller
role. The client test similarly starts from the N-1 release
and, when the server is deployed, enrols as a domain client.
Then the server upgrades itself, while the client waits (as the
server is its name server). Then the client upgrades itself,
while the server does some self-checks. The server then waits
for the client to do its checks before decommissioning itself,
as usual. So, summary: *deployment* of both server and client
occurs on N-1, then both are upgraded, then the actual *checks*
occur on N.

In my testing, this all more or less works, except the role
decommission step fails. This failure seems to be a genuine one
so far as I can tell; I intend to file a bug for it soon.

Test Plan

Run the new tests, check they work. Run the existing
FreeIPA tests (both the compose and the update variants), check
they both behave the same.

Diff Detail

Repository
rOPENQATESTS os-autoinst-distri-fedora
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.
adamwill created this revision.Jun 1 2017, 8:53 AM
jsedlak accepted this revision.Jun 2 2017, 12:02 PM

Marvelous.

This revision is now accepted and ready to land.Jun 2 2017, 12:02 PM
Closed by commit rOPENQATESTSdf2c3cd90648: Test upgrade of FreeIPA server and client deployment (authored by Adam Williamson <awilliam@redhat.com>). · Explain WhyJun 2 2017, 7:17 PM
This revision was automatically updated to reflect the committed changes.

Revision Contents

PathPackages
Mmain.pm (37 lines)
Mtemplates (61 lines)
Mtests/realmd_join_sssd.pm (16 lines)
Mtests/role_deploy_domain_controller.pm (34 lines)
AMtests/role_deploy_domain_controller_check.pm (37 lines)
Ptests/upgrade_boot.pm (20 lines)
Copied from tests/upgrade_preinstall.pm
Ptests/upgrade_preinstall.pm (16 lines)
Copied to tests/upgrade_boot.pm
Mtests/upgrade_run.pm (21 lines)

Diff 3058

View Options

main.pm

Show First 20 Lines • Show All 91 Lines • ▼ Show 20 Line(s)71sub cleanup_needles() {
92 unregister_prefix_tags('LANGUAGE', $langref); 92​ unregister_prefix_tags('LANGUAGE', $langref);
93} 93​}
94$needle::cleanuphandler = \&cleanup_needles; 94​$needle::cleanuphandler = \&cleanup_needles;
95 95​
96## TEST LOADING SUBROUTINES 96​## TEST LOADING SUBROUTINES
97 97​
98 98​
99sub load_upgrade_tests() { 99​sub load_upgrade_tests() {
100 # all upgrade tests consist of: preinstall phase (where packages are upgraded and 100​ # all upgrade tests include: boot phase (where bootloader and
101 # dnf-plugin-system-upgrade is installed), run phase (where upgrade is run) and postinstall 101​ # encryption are handled if necessary), preinstall phase (where
102 # phase (where is checked if fedora was upgraded successfully) 102​ # packages are upgraded and dnf-plugin-system-upgrade installed),
103​ # run phase (where upgrade is run) and postinstall phase (where
104​ # is checked if fedora was upgraded successfully). The PREUPGRADE
105​ # variable can be used to specify additional test modules to run
106​ # after the preinstall phase but before the run phase, and the
107​ # POSTINSTALL variable can be used to specify additional test
108​ # modules to run after the upgrade postinstall phase.
109​ autotest::loadtest "tests/upgrade_boot.pm";
110​ # if static networking config is needed we must do it at this point
111​ if (get_var("POST_STATIC")) {
112​ autotest::loadtest "tests/_post_network_static.pm";
113​ }
103 autotest::loadtest "tests/upgrade_preinstall.pm"; 114​ autotest::loadtest "tests/upgrade_preinstall.pm";
115​ # generic pre-upgrade test load
116​ if (get_var("PREUPGRADE")) {
117​ my @pus = split(/ /, get_var("PREUPGRADE"));
118​ foreach my $pu (@pus) {
119​ autotest::loadtest "tests/${pu}.pm";
120​ }
121​ }
104 autotest::loadtest "tests/upgrade_run.pm"; 122​ autotest::loadtest "tests/upgrade_run.pm";
105 # set postinstall test 123​ # handle additional postinstall tests
124​ if (get_var("POSTINSTALL")) {
125​ set_var('POSTINSTALL', "upgrade_postinstall " . get_var("POSTINSTALL"));
126​ }
127​ else {
106 set_var('POSTINSTALL', "upgrade_postinstall" ); 128​ set_var('POSTINSTALL', "upgrade_postinstall");
107} 129​ }
130​}
108 131​
109sub load_install_tests() { 132​sub load_install_tests() {
110 # normal installation test consists of several phases, from which some of them are 133​ # normal installation test consists of several phases, from which some of them are
111 # loaded automatically and others are loaded based on what env variables are set 134​ # loaded automatically and others are loaded based on what env variables are set
112 135​
113 # generally speaking, install test consists of: boot phase, customization phase, installation 136​ # generally speaking, install test consists of: boot phase, customization phase, installation
114 # and reboot phase, postinstall phase 137​ # and reboot phase, postinstall phase
115 138​
▲ Show 20 Lines • Show All 103 Lines • ▼ Show 20 Line(s)241 if (get_var("MEMCHECK")) {
219 autotest::loadtest "tests/_memcheck.pm"; 242​ autotest::loadtest "tests/_memcheck.pm";
220 return; 243​ return;
221 } 244​ }
222 245​
223 # load the early tests 246​ # load the early tests
224 _load_early_postinstall_tests(); 247​ _load_early_postinstall_tests();
225 248​
226 # do standard post-install static network config if the var is set 249​ # do standard post-install static network config if the var is set
250​ # and this is not an upgrade test (this is done elsewhere in the
251​ # upgrade workflow)
227 # this is here not in early_postinstall_tests as there's no need 252​ # this is here not in early_postinstall_tests as there's no need
228 # to do it twice 253​ # to do it twice
229 if (get_var("POST_STATIC")) { 254​ if (get_var("POST_STATIC") && !get_var("UPGRADE")) {
230 autotest::loadtest "tests/_post_network_static.pm"; 255​ autotest::loadtest "tests/_post_network_static.pm";
231 } 256​ }
232 257​
233 # if scheduler passed an advisory, update packages from that advisory 258​ # if scheduler passed an advisory, update packages from that advisory
234 # (intended for the updates testing workflow, so we install the updates 259​ # (intended for the updates testing workflow, so we install the updates
235 # to be tested) 260​ # to be tested)
236 if (get_var("ADVISORY")) { 261​ if (get_var("ADVISORY")) {
237 autotest::loadtest "tests/_advisory_update.pm"; 262​ autotest::loadtest "tests/_advisory_update.pm";
▲ Show 20 Lines • Show All 79 Lines • Show Last 20 Lines
View Options

templates

Show First 20 Lines • Show All 1230 Lines • ▼ Show 20 Line(s)1230 {
1231 machine => { name => "64bit" }, 1231​ machine => { name => "64bit" },
1232 prio => 30, 1232​ prio => 30,
1233 product => { 1233​ product => {
1234 arch => "x86_64", 1234​ arch => "x86_64",
1235 distri => "fedora", 1235​ distri => "fedora",
1236 flavor => "universal", 1236​ flavor => "universal",
1237 version => "*", 1237​ version => "*",
1238 }, 1238​ },
1239​ test_suite => { name => "upgrade_server_domain_controller" },
1240​ },
1241​ {
1242​ machine => { name => "64bit" },
1243​ prio => 30,
1244​ product => {
1245​ arch => "x86_64",
1246​ distri => "fedora",
1247​ flavor => "universal",
1248​ version => "*",
1249​ },
1250​ test_suite => { name => "upgrade_realmd_join_sssd" },
1251​ },
1252​ {
1253​ machine => { name => "64bit" },
1254​ prio => 30,
1255​ product => {
1256​ arch => "x86_64",
1257​ distri => "fedora",
1258​ flavor => "universal",
1259​ version => "*",
1260​ },
1239 test_suite => { name => "upgrade_kde_64bit" }, 1261​ test_suite => { name => "upgrade_kde_64bit" },
1240 }, 1262​ },
1241 { 1263​ {
1242 machine => { name => "64bit" }, 1264​ machine => { name => "64bit" },
1243 prio => 30, 1265​ prio => 30,
1244 product => { 1266​ product => {
1245 arch => "x86_64", 1267​ arch => "x86_64",
1246 distri => "fedora", 1268​ distri => "fedora",
▲ Show 20 Lines • Show All 953 Lines • ▼ Show 20 Line(s)2219 settings => [
2200 { key => "USER_PASSWORD", value => "weakpassword" }, 2222​ { key => "USER_PASSWORD", value => "weakpassword" },
2201 { key => "BOOTFROM", value => "c" }, 2223​ { key => "BOOTFROM", value => "c" },
2202 { key => "HDD_1", value => "disk_f%CURRREL%_server_3_x86_64.img" }, 2224​ { key => "HDD_1", value => "disk_f%CURRREL%_server_3_x86_64.img" },
2203 { key => "UPGRADE", value => "1" }, 2225​ { key => "UPGRADE", value => "1" },
2204 { key => "TEST_TARGET", value => "COMPOSE" }, 2226​ { key => "TEST_TARGET", value => "COMPOSE" },
2205 ], 2227​ ],
2206 }, 2228​ },
2207 { 2229​ {
2230​ name => "upgrade_server_domain_controller",
2231​ settings => [
2232​ { key => "ROOT_PASSWORD", value => "weakpassword" },
2233​ { key => "HDD_1", value => "disk_f%CURRREL%_server_3_x86_64.img" },
2234​ { key => "UPGRADE", value => "1" },
2235​ { key => "TEST_TARGET", value => "COMPOSE" },
2236​ { key => "PREUPGRADE", value => "role_deploy_domain_controller" },
2237​ { key => "POSTINSTALL", value => "role_deploy_domain_controller_check" },
2238​ { key => "USER_LOGIN", value => "false" },
2239​ { key => "GRUB_POSTINSTALL", value => "net.ifnames=0 biosdevname=0" },
2240​ { key => "BOOTFROM", value => "c" },
2241​ { key => "GRUB", value => "net.ifnames=0 biosdevname=0" },
2242​ { key => "POST_STATIC", value => "10.0.2.100 ipa001.domain.local" },
2243​ { key => "NICTYPE", value => "tap" },
2244​ { key => "WORKER_CLASS", value => "tap" },
2245​ ],
2246​ },
2247​ {
2248​ name => "upgrade_realmd_join_sssd",
2249​ settings => [
2250​ { key => "ROOT_PASSWORD", value => "weakpassword" },
2251​ { key => "HDD_1", value => "disk_f%CURRREL%_server_3_x86_64.img" },
2252​ { key => "UPGRADE", value => "1" },
2253​ { key => "TEST_TARGET", value => "COMPOSE" },
2254​ { key => "PREUPGRADE", value => "realmd_join_sssd" },
2255​ { key => "POSTINSTALL", value => "freeipa_client" },
2256​ { key => "PARALLEL_WITH", value => "upgrade_server_domain_controller" },
2257​ { key => "USER_LOGIN", value => "false" },
2258​ { key => "GRUB_POSTINSTALL", value => "net.ifnames=0 biosdevname=0" },
2259​ { key => "BOOTFROM", value => "c" },
2260​ { key => "GRUB", value => "net.ifnames=0 biosdevname=0" },
2261​ { key => "POST_STATIC", value => "10.0.2.103 client003.domain.local" },
2262​ { key => "NICTYPE", value => "tap" },
2263​ { key => "WORKER_CLASS", value => "tap" },
2264​ ],
2265​ },
2266​ {
2208 name => "upgrade_kde_64bit", 2267​ name => "upgrade_kde_64bit",
2209 settings => [ 2268​ settings => [
2210 { key => "ROOT_PASSWORD", value => "weakpassword" }, 2269​ { key => "ROOT_PASSWORD", value => "weakpassword" },
2211 { key => "USER_LOGIN", value => "test" }, 2270​ { key => "USER_LOGIN", value => "test" },
2212 { key => "USER_PASSWORD", value => "weakpassword" }, 2271​ { key => "USER_PASSWORD", value => "weakpassword" },
2213 { key => "BOOTFROM", value => "c" }, 2272​ { key => "BOOTFROM", value => "c" },
2214 { key => "HDD_1", value => "disk_f%CURRREL%_kde_3_x86_64.img" }, 2273​ { key => "HDD_1", value => "disk_f%CURRREL%_kde_3_x86_64.img" },
2215 { key => "UPGRADE", value => "1" }, 2274​ { key => "UPGRADE", value => "1" },
▲ Show 20 Lines • Show All 294 Lines • ▼ Show 20 Line(s)2566 settings => [
2510 { key => "START_AFTER_TEST", value => "install_default_upload" }, 2569​ { key => "START_AFTER_TEST", value => "install_default_upload" },
2511 { key => "BOOTFROM", value => "c" }, 2570​ { key => "BOOTFROM", value => "c" },
2512 { key => "HDD_1", value => "disk_%FLAVOR%_%MACHINE%.qcow2" }, 2571​ { key => "HDD_1", value => "disk_%FLAVOR%_%MACHINE%.qcow2" },
2513 ], 2572​ ],
2514 }, 2573​ },
2515 { 2574​ {
2516 name => "server_role_deploy_domain_controller", 2575​ name => "server_role_deploy_domain_controller",
2517 settings => [ 2576​ settings => [
2518 { key => "POSTINSTALL", value => "role_deploy_domain_controller" }, 2577​ { key => "POSTINSTALL", value => "role_deploy_domain_controller role_deploy_domain_controller_check" },
2519 { key => "USER_LOGIN", value => "false" }, 2578​ { key => "USER_LOGIN", value => "false" },
2520 { key => "ROOT_PASSWORD", value => "weakpassword" }, 2579​ { key => "ROOT_PASSWORD", value => "weakpassword" },
2521 { key => "GRUB_POSTINSTALL", value => "net.ifnames=0 biosdevname=0" }, 2580​ { key => "GRUB_POSTINSTALL", value => "net.ifnames=0 biosdevname=0" },
2522 { key => "START_AFTER_TEST", value => "install_default_upload" }, 2581​ { key => "START_AFTER_TEST", value => "install_default_upload" },
2523 { key => "BOOTFROM", value => "c" }, 2582​ { key => "BOOTFROM", value => "c" },
2524 { key => "HDD_1", value => "disk_%FLAVOR%_%MACHINE%.qcow2" }, 2583​ { key => "HDD_1", value => "disk_%FLAVOR%_%MACHINE%.qcow2" },
2525 { key => "GRUB", value => "net.ifnames=0 biosdevname=0" }, 2584​ { key => "GRUB", value => "net.ifnames=0 biosdevname=0" },
2526 { key => "POST_STATIC", value => "10.0.2.100 ipa001.domain.local" }, 2585​ { key => "POST_STATIC", value => "10.0.2.100 ipa001.domain.local" },
▲ Show 20 Lines • Show All 189 Lines • Show Last 20 Lines
View Options

tests/realmd_join_sssd.pm

1use base "installedtest"; 1​use base "installedtest";
2use strict; 2​use strict;
3use testapi; 3​use testapi;
4use lockapi; 4​use lockapi;
5use tapnet; 5​use tapnet;
6use utils; 6​use utils;
7 7​
8sub run { 8​sub run {
9 my $self=shift; 9​ my $self=shift;
10 # use FreeIPA server as DNS server 10​ # use FreeIPA server as DNS server
11 assert_script_run "printf 'search domain.local\nnameserver 10.0.2.100' > /etc/resolv.conf"; 11​ assert_script_run "printf 'search domain.local\nnameserver 10.0.2.100' > /etc/resolv.conf";
12​ assert_script_run "sed -i -e '/^DNS.*/d' /etc/sysconfig/network-scripts/ifcfg-eth0";
13​ assert_script_run "printf '\nDNS1=10.0.2.100\n' >> /etc/sysconfig/network-scripts/ifcfg-eth0";
12 # wait for the server to be ready (do it now just to make sure name 14​ # wait for the server to be ready (do it now just to make sure name
13 # resolution is working before we proceed) 15​ # resolution is working before we proceed)
14 mutex_lock "freeipa_ready"; 16​ mutex_lock "freeipa_ready";
15 mutex_unlock "freeipa_ready"; 17​ mutex_unlock "freeipa_ready";
16 # use compose repo, disable u-t, etc. 18​ # use compose repo, disable u-t, etc. unless this is an upgrade
17 repo_setup(); 19​ # test (in which case we're on the 'old' release at this point;
20​ # one of the upgrade test modules does repo_setup later)
21​ repo_setup() unless get_var("UPGRADE");
18 # do the enrolment 22​ # do the enrolment
19 assert_script_run "echo 'monkeys123' | realm join --user=admin ipa001.domain.local", 300; 23​ assert_script_run "echo 'monkeys123' | realm join --user=admin ipa001.domain.local", 300;
20 # set sssd debugging level higher (useful for debugging failures) 24​ # set sssd debugging level higher (useful for debugging failures)
21 # optional as it's not really part of the test 25​ # optional as it's not really part of the test
22 script_run "dnf -y install sssd-tools", 180; 26​ script_run "dnf -y install sssd-tools", 180;
23 script_run "sss_debuglevel 6"; 27​ script_run "sss_debuglevel 6";
28​ # if upgrade test, report that we're enrolled
29​ mutex_create('client_enrolled') if get_var("UPGRADE");
30​ # if this is an upgrade test, wait for server to be upgraded before
31​ # continuing, as we rely on it for name resolution
32​ if (get_var("UPGRADE")) {
33​ mutex_lock "server_upgraded";
34​ mutex_unlock "server_upgraded";
35​ }
24} 36​}
25 37​
26sub test_flags { 38​sub test_flags {
27 return { fatal => 1 }; 39​ return { fatal => 1 };
28} 40​}
29 41​
301; 42​1;
31 43​
32# vim: set sw=4 et: 44​# vim: set sw=4 et:
View Options

tests/role_deploy_domain_controller.pm

1use base "installedtest"; 1​use base "installedtest";
2use strict; 2​use strict;
3use testapi; 3​use testapi;
4use lockapi; 4​use lockapi;
5use mmapi; 5​use mmapi;
6use tapnet; 6​use tapnet;
7use utils; 7​use utils;
8 8​
9sub run { 9​sub run {
10 my $self = shift; 10​ my $self = shift;
11 # login 11​ # login
12 $self->root_console(); 12​ $self->root_console();
13 # use compose repo, disable u-t, etc. 13​ # use compose repo, disable u-t, etc. unless this is an upgrade
14 repo_setup(); 14​ # test (in which case we're on the 'old' release at this point;
15​ # one of the upgrade test modules does repo_setup later)
16​ repo_setup() unless get_var("UPGRADE");
15 # we need a lot of entropy for this, and we don't care how good 17​ # we need a lot of entropy for this, and we don't care how good
16 # it is, so let's use haveged 18​ # it is, so let's use haveged
17 assert_script_run 'dnf -y install haveged', 300; 19​ assert_script_run 'dnf -y install haveged', 300;
18 assert_script_run 'systemctl start haveged.service'; 20​ assert_script_run 'systemctl start haveged.service';
19 # read DNS server IPs from host's /etc/resolv.conf for passing to 21​ # read DNS server IPs from host's /etc/resolv.conf for passing to
20 # rolectl 22​ # rolectl
21 my @forwards = get_host_dns(); 23​ my @forwards = get_host_dns();
22 # we are now gonna work around a stupid bug in rolekit. we want to 24​ # we are now gonna work around a stupid bug in rolekit. we want to
Show All 32 Lines
55 # deployments use the phx2 nameservers. 57​ # deployments use the phx2 nameservers.
56 assert_script_run 'echo \'{"admin_password":"monkeys123","dns_forwarders":{"ipv4":' . $fourlist . ',"ipv6":' . $sixlist .'}}\' | rolectl deploy domaincontroller --name=domain.local --settings-stdin', 1200; 58​ assert_script_run 'echo \'{"admin_password":"monkeys123","dns_forwarders":{"ipv4":' . $fourlist . ',"ipv6":' . $sixlist .'}}\' | rolectl deploy domaincontroller --name=domain.local --settings-stdin', 1200;
57 # FIXME: workaround for RHBZ #1400293 on Fedora 24. Can be removed 59​ # FIXME: workaround for RHBZ #1400293 on Fedora 24. Can be removed
58 # when Firefox is fixed. 60​ # when Firefox is fixed.
59 my $release = lc(get_var('VERSION')); 61​ my $release = lc(get_var('VERSION'));
60 if ($release ne "rawhide" && $release < 25) { 62​ if ($release ne "rawhide" && $release < 25) {
61 assert_script_run 'ipa-getcert resubmit -d /etc/httpd/alias -n Server-Cert -D $( uname -n )'; 63​ assert_script_run 'ipa-getcert resubmit -d /etc/httpd/alias -n Server-Cert -D $( uname -n )';
62 } 64​ }
63 # check the role status, should be 'running' ​
64 validate_script_output 'rolectl status domaincontroller/domain.local', sub { $_ =~ m/^running/ }; ​
65 # check the admin password is listed in 'settings' ​
66 validate_script_output 'rolectl settings domaincontroller/domain.local', sub {$_ =~m/dm_password = \w{5,}/ }; ​
67 # sanitize the settings ​
68 assert_script_run 'rolectl sanitize domaincontroller/domain.local'; ​
69 # check the password now shows as 'None' ​
70 validate_script_output 'rolectl settings domaincontroller/domain.local', sub {$_ =~ m/dm_password = None/ }; ​
71 # kinit as admin 65​ # kinit as admin
72 assert_script_run 'echo "monkeys123" | kinit admin'; 66​ assert_script_run 'echo "monkeys123" | kinit admin';
73 # set up an OTP for client001 enrolment (it will enrol with a kickstart) 67​ # set up an OTP for client001 enrolment (it will enrol with a kickstart)
74 assert_script_run 'ipa host-add client001.domain.local --password=monkeys --force'; 68​ assert_script_run 'ipa host-add client001.domain.local --password=monkeys --force';
75 # create two user accounts, test1 and test2 69​ # create two user accounts, test1 and test2
76 assert_script_run 'echo "correcthorse" | ipa user-add test1 --first test --last one --password'; 70​ assert_script_run 'echo "correcthorse" | ipa user-add test1 --first test --last one --password';
77 assert_script_run 'echo "correcthorse" | ipa user-add test2 --first test --last two --password'; 71​ assert_script_run 'echo "correcthorse" | ipa user-add test2 --first test --last two --password';
78 # add a rule allowing access to all hosts and services 72​ # add a rule allowing access to all hosts and services
79 assert_script_run 'ipa hbacrule-add testrule --servicecat=all --hostcat=all'; 73​ assert_script_run 'ipa hbacrule-add testrule --servicecat=all --hostcat=all';
80 # add test1 (but not test2) to the rule 74​ # add test1 (but not test2) to the rule
81 assert_script_run 'ipa hbacrule-add-user testrule --users=test1'; 75​ assert_script_run 'ipa hbacrule-add-user testrule --users=test1';
82 # disable the default 'everyone everywhere' rule 76​ # disable the default 'everyone everywhere' rule
83 assert_script_run 'ipa hbacrule-disable allow_all'; 77​ assert_script_run 'ipa hbacrule-disable allow_all';
84 # allow immediate password changes (as we need to test this) 78​ # allow immediate password changes (as we need to test this)
85 assert_script_run 'ipa pwpolicy-mod --minlife=0'; 79​ assert_script_run 'ipa pwpolicy-mod --minlife=0';
86 # kinit as each user and set a new password 80​ # kinit as each user and set a new password
87 assert_script_run 'printf "correcthorse\nbatterystaple\nbatterystaple" | kinit test1@DOMAIN.LOCAL'; 81​ assert_script_run 'printf "correcthorse\nbatterystaple\nbatterystaple" | kinit test1@DOMAIN.LOCAL';
88 assert_script_run 'printf "correcthorse\nbatterystaple\nbatterystaple" | kinit test2@DOMAIN.LOCAL'; 82​ assert_script_run 'printf "correcthorse\nbatterystaple\nbatterystaple" | kinit test2@DOMAIN.LOCAL';
89 # we're all ready for other jobs to run! 83​ # we're ready for children to enrol, now
90 mutex_create('freeipa_ready'); 84​ mutex_create("freeipa_ready");
91 wait_for_children; 85​ # if upgrade test, wait for children to enrol before upgrade
92 # once child jobs are done, stop the role 86​ if (get_var("UPGRADE")) {
93 assert_script_run 'rolectl stop domaincontroller/domain.local'; 87​ my $children = get_children();
94 # check role is stopped 88​ my $child_id = (keys %$children)[0];
95 validate_script_output 'rolectl status domaincontroller/domain.local', sub { $_ =~ m/^ready-to-start/ }; 89​ mutex_lock('client_enrolled', $child_id);
96 # decommission the role 90​ mutex_unlock('client_enrolled');
97 assert_script_run 'rolectl decommission domaincontroller/domain.local', 300; 91​ }
98 # check role is decommissioned ​
99 validate_script_output 'rolectl list instances', sub { $_ eq "" }; ​
100} 92​}
101 93​
102 94​
103sub test_flags { 95​sub test_flags {
104 return { fatal => 1 }; 96​ return { fatal => 1 };
105} 97​}
106 98​
1071; 99​1;
108 100​
109# vim: set sw=4 et: 101​# vim: set sw=4 et:
View Options

tests/role_deploy_domain_controller_check.pm

  • This file was added.
1​use base "installedtest";
2​use strict;
3​use testapi;
4​use lockapi;
5​use mmapi;
6​
7​sub run {
8​ my $self = shift;
9​ # if this is an update, notify clients that we're now up again
10​ mutex_create('server_upgraded') if get_var("UPGRADE");
11​ # check the role status, should be 'running'
12​ validate_script_output 'rolectl status domaincontroller/domain.local', sub { $_ =~ m/^running/ };
13​ # check the admin password is listed in 'settings'
14​ validate_script_output 'rolectl settings domaincontroller/domain.local', sub {$_ =~m/dm_password = \w{5,}/ };
15​ # sanitize the settings
16​ assert_script_run 'rolectl sanitize domaincontroller/domain.local';
17​ # check the password now shows as 'None'
18​ validate_script_output 'rolectl settings domaincontroller/domain.local', sub {$_ =~ m/dm_password = None/ };
19​ # once child jobs are done, stop the role
20​ wait_for_children;
21​ assert_script_run 'rolectl stop domaincontroller/domain.local';
22​ # check role is stopped
23​ validate_script_output 'rolectl status domaincontroller/domain.local', sub { $_ =~ m/^ready-to-start/ };
24​ # decommission the role
25​ assert_script_run 'rolectl decommission domaincontroller/domain.local', 300;
26​ # check role is decommissioned
27​ validate_script_output 'rolectl list instances', sub { $_ eq "" };
28​}
29​
30​
31​sub test_flags {
32​ return { fatal => 1 };
33​}
34​
35​1;
36​
37​# vim: set sw=4 et:
View Options

tests/upgrade_boot.pm

  • This file was copied from tests/upgrade_preinstall.pm.
1use base "installedtest"; 1​use base "installedtest";
2use strict; 2​use strict;
3use testapi; 3​use testapi;
4use utils; 4​use utils;
5 5​
6sub run { 6​sub run {
7 my $self = shift; 7​ my $self = shift;
8​ # handle bootloader, if requested
9​ if (get_var("GRUB_POSTINSTALL")) {
10​ do_bootloader(postinstall=>1, params=>get_var("GRUB_POSTINSTALL"));
11​ }
12​
8 # decrypt disks during boot if necessary 13​ # decrypt disks during boot if necessary
9 if (get_var("ENCRYPT_PASSWORD")) { 14​ if (get_var("ENCRYPT_PASSWORD")) {
10 boot_decrypt(60); 15​ boot_decrypt(60);
11 } 16​ }
12 17​
13 boot_to_login_screen; 18​ boot_to_login_screen;
14 # switch to TTY3 for both, graphical and console tests 19​ # switch to TTY3 for both, graphical and console tests
15 $self->root_console(tty=>3); 20​ $self->root_console(tty=>3);
16 # disable screen blanking (update can take a long time) 21​ # disable screen blanking (update can take a long time)
17 script_run "setterm -blank 0"; 22​ script_run "setterm -blank 0";
18 ​
19 # upgrader should be installed on up-to-date system ​
20 assert_script_run 'dnf -y update', 1800; ​
21 script_run "reboot", 0; ​
22 ​
23 # decrypt if necessary ​
24 if (get_var("ENCRYPT_PASSWORD")) { ​
25 boot_decrypt(60); ​
26 } ​
27 ​
28 boot_to_login_screen; ​
29 $self->root_console(tty=>3); ​
30 ​
31 my $update_command = 'dnf -y install dnf-plugin-system-upgrade'; ​
32 assert_script_run $update_command, 600; ​
33} 23​}
34 24​
35 25​
36sub test_flags { 26​sub test_flags {
37 return { fatal => 1 }; 27​ return { fatal => 1 };
38} 28​}
39 29​
401; 30​1;
41 31​
42# vim: set sw=4 et: 32​# vim: set sw=4 et:
View Options

tests/upgrade_preinstall.pm

  • This file was copied to tests/upgrade_boot.pm.
1use base "installedtest"; 1​use base "installedtest";
2use strict; 2​use strict;
3use testapi; 3​use testapi;
4use utils; 4​use utils;
5 5​
6sub run { 6​sub run {
7 my $self = shift; 7​ my $self = shift;
8 # decrypt disks during boot if necessary ​
9 if (get_var("ENCRYPT_PASSWORD")) { ​
10 boot_decrypt(60); ​
11 } ​
12 ​
13 boot_to_login_screen; ​
14 # switch to TTY3 for both, graphical and console tests ​
15 $self->root_console(tty=>3); ​
16 # disable screen blanking (update can take a long time) ​
17 script_run "setterm -blank 0"; ​
18 ​
19 # upgrader should be installed on up-to-date system 8​ # upgrader should be installed on up-to-date system
20 assert_script_run 'dnf -y update', 1800; 9​ assert_script_run 'dnf -y update', 1800;
21 script_run "reboot", 0; 10​ script_run "reboot", 0;
22 11​
12​ # handle bootloader, if requested
13​ if (get_var("GRUB_POSTINSTALL")) {
14​ do_bootloader(postinstall=>1, params=>get_var("GRUB_POSTINSTALL"));
15​ }
16​
23 # decrypt if necessary 17​ # decrypt if necessary
24 if (get_var("ENCRYPT_PASSWORD")) { 18​ if (get_var("ENCRYPT_PASSWORD")) {
25 boot_decrypt(60); 19​ boot_decrypt(60);
26 } 20​ }
27 21​
28 boot_to_login_screen; 22​ boot_to_login_screen;
29 $self->root_console(tty=>3); 23​ $self->root_console(tty=>3);
30 24​
Show All 12 Lines
View Options

tests/upgrade_run.pm

Show All 15 Lines15 if ($release eq "rawhide") {
16 $params .= " --nogpgcheck"; 16​ $params .= " --nogpgcheck";
17 } 17​ }
18 assert_script_run "dnf ${params} system-upgrade download", 6000; 18​ assert_script_run "dnf ${params} system-upgrade download", 6000;
19 19​
20 upload_logs "/var/log/dnf.log"; 20​ upload_logs "/var/log/dnf.log";
21 upload_logs "/var/log/dnf.rpm.log"; 21​ upload_logs "/var/log/dnf.rpm.log";
22 22​
23 script_run "dnf system-upgrade reboot", 0; 23​ script_run "dnf system-upgrade reboot", 0;
24 # fail immediately if we see a DNF error message 24​ # fail immediately if we see a DNF error message, but keep an eye
25 die "DNF reported failure" if (check_screen "upgrade_fail", 15); 25​ # out for the bootloader so we can handle it if requested
26​ check_screen ["upgrade_fail", "bootloader"], 15;
27​ die "DNF reported failure" if (match_has_tag "upgrade_fail");
28​
29​ # handle bootloader, if requested
30​ if (get_var("GRUB_POSTINSTALL")) {
31​ do_bootloader(postinstall=>1, params=>get_var("GRUB_POSTINSTALL"));
32​ }
33​
34​ # decrypt, if encrypted
26 if (get_var("ENCRYPT_PASSWORD")) { 35​ if (get_var("ENCRYPT_PASSWORD")) {
27 boot_decrypt(60); 36​ boot_decrypt(60);
28 } ​
29 # in encrypted case we need to wait a bit so postinstall test 37​ # in encrypted case we need to wait a bit so postinstall test
30 # doesn't bogus match on the encryption prompt we just completed 38​ # doesn't bogus match on the encryption prompt we just completed
31 # before it disappears from view 39​ # before it disappears from view
32 if (get_var("ENCRYPT_PASSWORD")) { ​
33 sleep 5; 40​ sleep 5;
34 } 41​ }
35} 42​}
36 43​
37 44​
38sub test_flags { 45​sub test_flags {
39 return { fatal => 1 }; 46​ return { fatal => 1 };
40} 47​}
41 48​
421; 49​1;
43 50​
44# vim: set sw=4 et: 51​# vim: set sw=4 et: