This goes along with the openqa_fedora commit to add the tests.
I didn't update the Docker instructions yet because I don't
quite remember how that goes. It might need a whole different
setup using some other networking...thing...
Details
- Reviewers
garretraziel jskladan - Commits
- rOPENQAb82f2d4c4d08: add FreeIPA kickstarts to disk_ks and update InstallGuide
rOPENQA26a751311564: add FreeIPA kickstarts and wiki config, update InstallGuide
rOPENQA8a814a190741: add FreeIPA kickstarts to disk_ks and update InstallGuide
rOPENQA86395e2c9996: add FreeIPA test disks (with kickstarts) and update InstallGuide
rOPENQA0f504a4c0f24: add FreeIPA kickstarts to disk_ks and update InstallGuide
Diff Detail
- Repository
- rOPENQA fedora_openqa
- Lint
Automatic diff as part of commit; lint not applicable. - Unit
Automatic diff as part of commit; unit tests not applicable.
InstallGuide.md | ||
---|---|---|
52 | Having discussed this with jskladan we came to conclusion that bridge shouldn't be named "br0", because there may be a lot of people who already have br0 and use it for something. Why not create bridge called "os-autoinst-br0" or something like that? | |
65 | Same concern as above - I would vote for creating TAP device with more openQA-specific name. We can then specify it only in two necessary tests by using TAPDEV variable. | |
91 | Let's find out how to rewrite those rules into firewalld. I'm not OK with "let's tell people to disable firewalld and use different technology instead". Sounds like fun plan for Friday, I might look into it. | |
tools/hdds.json | ||
85 | Just a quick thought - can't we use only one disk and upload both kickstarts to it? It will save space. |
Good point on the disk images: in fact we could just roll both kickstarts into the 'ks' image, I guess, and add another file to that image any time we need to.
I've updated the InstallGuide to explain the limitations around device naming. You can rename the bridge (and set an env var to tell os-autoinst what name to use) but os-autoinst enforces the tap device naming scheme.
On the firewall stuff - I was actually trying to do it with firewalld at first, the reason I switched to iptables is simply that the infra hosts use iptables and our primary case is the infra deployment. But it would go *something* like this, I think: put br0 in zone internal and enp2s0 in external, allow all traffic to br0 as in the iptables rules (I think firewalld can do that too), and do...something?...to enable port forwarding (I think in firewalld you have to do port forwarding by IP or MAC, not interface name). I believe firewalld actually enables masquerading on devices in the external zone by default.
move network instructions to a separate file
they're big and scary and you can run most tests without them,
so let's do this so InstallGuide doesn't scare people off.
put the kickstarts in disk_ks instead of their own disks
as suggested by garretraziel, there's no need for each test to
have its own disk, they can all share disk_ks. lots of room! We
bump the version so it'll be rebuilt and the new kickstarts
added.
fix handling of multiple writes/uploads in createhdds
hah, so combining the kickstarts found a bug...let's
fix that.
Having discussed this with jskladan we came to conclusion that bridge shouldn't be named "br0", because there may be a lot of people who already have br0 and use it for something. Why not create bridge called "os-autoinst-br0" or something like that?