Differential D880

add a cockpit realmd FreeIPA join test
ClosedPublic
Actions

Authored by adamwill on Jun 3 2016, 6:20 AM.

Details

Reviewers
garretraziel
jskladan
Commits
rOPENQATESTS66fc3cc7d4b7: add a cockpit realmd FreeIPA join test
Summary

This requires a few other changes:

  • turn clone_host_resolv into clone_host_file, letting you clone any given host file (cloning /etc/hosts seems to make both server deployment and client enrolment faster/more reliable)
  • allow loading of multiple POSTINSTALL tests (so we can share the freeipa_client_postinstall test). Note this is compatible, existing uses will work fine
  • move initial password change for the IPA test users into the server deployment test (so the client tests don't conflict over doing that)
  • add GRUB_POSTINSTALL, for specifying boot parameters for boot of the installed system, and make it work by tweaking _console_wait _login (doesn't work for _graphical_wait_login yet, as I didn't need that)
  • make the static networking config for tap tests into a library function so the tests can share it
  • handle ABRT problem dirs showing up in /var/spool/abrt as well as /var/tmp/abrt (because the enrol attempt hits #1330766 and the crash report shows up in /var/spool/abrt, don't ask me why the difference, I just work here)
  • specify the DNS servers from the worker host's resolv.conf as the forwarders for the FreeIPA server when deploying it; if we don't do this, rolekit defaults to using the root servers as forwarders(!) and thus we get the public, not phx2-appropriate, results for e.g. mirrors.fedoraproject.org, some of which the workers can't reach, so PackageKit package install always fails (boy, was it fun figuring THAT mess out)

Even after all that, the test still doesn't actually pass, but
I'm reasonably confident this is because it's hitting actual bugs,
not because it's broken. It runs into #1330766 nearly every time
(I think I saw *one* time the enrolment actually succeeded), and
seems to run into a subsequent bug I hadn't seen before when
trying to work around that by trying the join again (see
https://bugzilla.redhat.com/show_bug.cgi?id=1330766#c37 ).

Test Plan

Run the test, see what happens. If you're really lucky,
it'll actually pass. But you'll probably run into #1330766#c37,
I'm mostly posting for comment. You'll need a tap-capable openQA
instance to test this.

Diff Detail

Repository
rOPENQATESTS os-autoinst-distri-fedora
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.
adamwill retitled this revision from to add a cockpit realmd FreeIPA join test.Jun 3 2016, 6:20 AM
adamwill updated this object.
adamwill edited the test plan for this revision. (Show Details)
adamwill added reviewers: jskladan, garretraziel.
adamwill updated this revision to Diff 2255.Jun 3 2016, 4:22 PM

add a missing file

adamwill updated this revision to Diff 2256.Jun 3 2016, 10:32 PM

cleanups and fixes

various tweaks and fixes to actually make the test pass! We
install the realmd update that actually fixes the bug we kept
running into (this is just a temporary measure to demonstrate
the test actually working), drop the attempted workaround for
said bug, and read the hostname for freeipa_client_postinstall
from the system-under-test instead of hardcoding it (since
it's different between the two test suites that now use it).
We also wait_still_screen after quitting firefox to give X
time to shutdown; we could also do this with some kinda
needle or just switch to an unused VT, but I think
wait_still_screen is the slightly better choice.

garretraziel accepted this revision.Jun 7 2016, 1:28 PM

For some reason, I cannot get this test to run - tests are scheduled, workers are idle, but it doesn't start. But code looks good I guess and if it works on staging...

tests/_console_wait_login.pm
15

Maybe convert this to that weird dict-like "named arguments" thing? WDYT?

This revision is now accepted and ready to land.Jun 7 2016, 1:28 PM
adamwill added a comment.Jun 7 2016, 3:04 PM
In D880#16613, @garretraziel wrote:

For some reason, I cannot get this test to run - tests are scheduled, workers are idle, but it doesn't start. But code looks good I guess and if it works on staging...

Did you by any chance cancel some of the 'non-relevant' tests before they started to try and save time? I saw the same problem a couple of times when I did that, I think it somehow confused the scheduler...I didn't look into it in detail. Restarting this test should make it work, IIRC.

tests/_console_wait_login.pm
15

You mean a hash? :P Yeah, that probably makes sense, I was just too lazy. I'll do that.

Closed by commit rOPENQATESTS66fc3cc7d4b7: add a cockpit realmd FreeIPA join test (authored by adamwill). · Explain WhyJun 7 2016, 8:00 PM
This revision was automatically updated to reflect the committed changes.
adamwill added a comment.Jun 7 2016, 8:03 PM

OK, I changed do_bootloader to take an arg hash, dropped the temporary realmd direct update bit as it's no longer needed (and in fact was breaking things), tested it - https://openqa.stg.fedoraproject.org/tests/overview?build=Fedora-24-20160607.n.0-IPAPIT&version=24&groupid=1&distri=fedora - and merged.

Revision Contents

Diff 2258

View Options

lib/fedorabase.pm

Show First 20 Lines • Show All 88 Lines • ▼ Show 20 Line(s)88sub do_bootloader {
89 # Handle bootloader screen. 'bootloader' is syslinux or grub. 89​ # Handle bootloader screen. 'bootloader' is syslinux or grub.
90 # 'uefi' is whether this is a UEFI install, will get_var UEFI if 90​ # 'uefi' is whether this is a UEFI install, will get_var UEFI if
91 # not explicitly set. 'postinstall' is whether we're on an 91​ # not explicitly set. 'postinstall' is whether we're on an
92 # installed system or at the installer (this matters for how many 92​ # installed system or at the installer (this matters for how many
93 # times we press 'down' to find the kernel line when typing args). 93​ # times we press 'down' to find the kernel line when typing args).
94 # 'args' is a string of extra kernel args, if desired. 'mutex' is 94​ # 'args' is a string of extra kernel args, if desired. 'mutex' is
95 # a parallel test mutex lock to wait for before proceeding, if 95​ # a parallel test mutex lock to wait for before proceeding, if
96 # desired. 'first' is whether to hit 'up' a couple of times to 96​ # desired. 'first' is whether to hit 'up' a couple of times to
97 # make sure we boot the first menu entry. 97​ # make sure we boot the first menu entry. 'timeout' is how long to
98 my ($self, $postinstall, $args, $mutex, $first, $bootloader, $uefi) = @_; 98​ # wait for the bootloader screen.
99 $uefi //= get_var("UEFI"); 99​ my $self = shift;
100 $postinstall //= 0; 100​ my %args = (
101​ postinstall => 0,
102​ params => "",
103​ mutex => "",
104​ first => 1,
105​ timeout => 30,
106​ uefi => get_var("UEFI"),
107​ @_
108​ );
101 # if not postinstall and not UEFI, syslinux 109​ # if not postinstall and not UEFI, syslinux
102 $bootloader //= ($uefi || $postinstall) ? "grub" : "syslinux"; 110​ $args{bootloader} //= ($args{uefi} || $args{postinstall}) ? "grub" : "syslinux";
103 $args //= ""; 111​ if ($args{uefi}) {
104 $mutex //= ""; ​
105 $first //= 1; ​
106 if ($uefi) { ​
107 # we don't just tag all screens with 'bootloader' because we 112​ # we don't just tag all screens with 'bootloader' because we
108 # want to be sure we actually did a UEFI boot 113​ # want to be sure we actually did a UEFI boot
109 assert_screen "bootloader_uefi", 30; 114​ assert_screen "bootloader_uefi", $args{timeout};
110 } else { 115​ } else {
111 assert_screen "bootloader", 30; 116​ assert_screen "bootloader", $args{timeout};
112 } 117​ }
113 if ($mutex) { 118​ if ($args{mutex}) {
114 # cancel countdown 119​ # cancel countdown
115 send_key "left"; 120​ send_key "left";
116 mutex_lock $mutex; 121​ mutex_lock $args{mutex};
117 mutex_unlock $mutex; 122​ mutex_unlock $args{mutex};
118 } 123​ }
119 if ($first) { 124​ if ($args{first}) {
120 # press up a couple of times to make sure we're at first entry 125​ # press up a couple of times to make sure we're at first entry
121 send_key "up"; 126​ send_key "up";
122 send_key "up"; 127​ send_key "up";
123 } 128​ }
124 if ($args) { 129​ if ($args{params}) {
125 if ($bootloader eq "syslinux") { 130​ if ($args{bootloader} eq "syslinux") {
126 send_key "tab"; 131​ send_key "tab";
127 } 132​ }
128 else { 133​ else {
129 send_key "e"; 134​ send_key "e";
130 # ternary: 13 'downs' to reach the kernel line for installed 135​ # ternary: 13 'downs' to reach the kernel line for installed
131 # system, 2 for UEFI installer 136​ # system, 2 for UEFI installer
132 my $presses = $postinstall ? 13 : 2; 137​ my $presses = $args{postinstall} ? 13 : 2;
133 foreach my $i (1..$presses) { 138​ foreach my $i (1..$presses) {
134 send_key "down"; 139​ send_key "down";
135 } 140​ }
136 send_key "end"; 141​ send_key "end";
137 } 142​ }
138 type_string " $args"; 143​ type_string " $args{params}";
139 } 144​ }
140 # ctrl-X boots from grub editor mode 145​ # ctrl-X boots from grub editor mode
141 send_key "ctrl-x"; 146​ send_key "ctrl-x";
142 # return boots all other cases 147​ # return boots all other cases
143 send_key "ret"; 148​ send_key "ret";
144} 149​}
145 150​
146sub boot_to_login_screen { 151​sub boot_to_login_screen {
Show All 10 Lines
157} 162​}
158 163​
159sub get_milestone { 164​sub get_milestone {
160 my $self = shift; 165​ my $self = shift;
161 # FIXME: we don't know how to do this with Pungi 4 yet. 166​ # FIXME: we don't know how to do this with Pungi 4 yet.
162 return ''; 167​ return '';
163} 168​}
164 169​
165sub clone_host_resolv { 170​sub clone_host_file {
166 # this is pretty crazy, but SUSE do almost the same thing... 171​ # copy a given file from the host into the guest. Mainly used
167 # it's for openvswitch jobs to clone the host's resolv.conf, so 172​ # for networking config on tap tests. this is pretty crazy, but
168 # we don't have to hard code 8.8.8.8 or have the templates pass 173​ # SUSE do almost the same thing...
169 # in an address or something 174​ my $self = shift;
170 my $self = shift; 175​ my $file = shift;
171 my $resolv = ''; 176​ my $text = '';
172 open(FH, '<', "/etc/resolv.conf"); 177​ open(my $fh, '<', $file);
173 while (<FH>) { 178​ while (<$fh>) {
174 $resolv .= $_; 179​ $text .= $_;
175 } 180​ }
176 assert_script_run "printf '$resolv' > /etc/resolv.conf"; 181​ assert_script_run "printf '$text' > $file";
177 # for debugging... 182​ # for debugging...
178 assert_script_run "cat /etc/resolv.conf"; 183​ assert_script_run "cat $file";
184​}
185​
186​sub setup_tap_static {
187​ # this is a common thing for tap tests, where we set up networking
188​ # for the system with a static IP address and possibly a specific
189​ # hostname
190​ my $self = shift;
191​ my $ip = shift;
192​ my $hostname = shift || "";
193​ if ($hostname) {
194​ # assigning output of split to a single-item array gives us just
195​ # the first split
196​ my ($short) = split(/\./, $hostname);
197​ # set hostname
198​ assert_script_run "hostnamectl set-hostname $hostname";
199​ # add entry to /etc/hosts
200​ assert_script_run "echo '$ip $hostname $short' >> /etc/hosts";
201​ }
202​ # bring up network. DEFROUTE is *vital* here
203​ assert_script_run "printf 'DEVICE=eth0\nBOOTPROTO=none\nIPADDR=$ip\nGATEWAY=10.0.2.2\nPREFIX=24\nDEFROUTE=yes' > /etc/sysconfig/network-scripts/ifcfg-eth0";
204​ script_run "systemctl restart NetworkManager.service";
179} 205​}
180 206​
181sub console_switch_layout { 207​sub console_switch_layout {
182 # switcher key combo differs between layouts, for console 208​ # switcher key combo differs between layouts, for console
183 my $self = shift; 209​ my $self = shift;
184 if (get_var("LANGUAGE", "") eq "russian") { 210​ if (get_var("LANGUAGE", "") eq "russian") {
185 send_key "ctrl-shift"; 211​ send_key "ctrl-shift";
186 } 212​ }
187} 213​}
188 214​
1891; 215​1;
190 216​
191# vim: set sw=4 et: 217​# vim: set sw=4 et:
View Options

lib/installedtest.pm

Show All 21 Lines
22sub post_fail_hook { 22​sub post_fail_hook {
23 my $self = shift; 23​ my $self = shift;
24 24​
25 $self->root_console(tty=>2); 25​ $self->root_console(tty=>2);
26 26​
27 # If /var/tmp/abrt directory isn't empty (ls doesn't return empty string) 27​ # If /var/tmp/abrt directory isn't empty (ls doesn't return empty string)
28 my $vartmp = script_output "ls /var/tmp/abrt"; 28​ my $vartmp = script_output "ls /var/tmp/abrt";
29 if ($vartmp ne '') { 29​ if ($vartmp ne '') {
30 # Upload all ABRT logs 30​ # Upload /var/tmp ABRT logs
31 script_run "cd /var/tmp/abrt && tar czvf abrt.tar.gz *"; 31​ script_run "cd /var/tmp/abrt && tar czvf tmpabrt.tar.gz *";
32 upload_logs "/var/tmp/abrt/abrt.tar.gz"; 32​ upload_logs "/var/tmp/abrt/tmpabrt.tar.gz";
33​ }
34​ my $varspool = script_output "ls /var/spool/abrt";
35​ if ($varspool ne '') {
36​ # Upload /var/spool ABRT logs
37​ script_run "cd /var/spool/abrt && tar czvf spoolabrt.tar.gz *";
38​ upload_logs "/var/spool/abrt/spoolabrt.tar.gz";
33 } 39​ }
34 40​
35 # Upload /var/log 41​ # Upload /var/log
36 script_run "tar czvf /tmp/var_log.tar.gz /var/log"; 42​ script_run "tar czvf /tmp/var_log.tar.gz /var/log";
37 upload_logs "/tmp/var_log.tar.gz"; 43​ upload_logs "/tmp/var_log.tar.gz";
38} 44​}
39 45​
40sub check_release { 46​sub check_release {
▲ Show 20 Lines • Show All 44 Lines • Show Last 20 Lines
View Options

main.pm

Show First 20 Lines • Show All 187 Lines • ▼ Show 20 Line(s)163sub load_postinstall_tests() {
188 autotest::loadtest $storagepost if ($storagepost); 188​ autotest::loadtest $storagepost if ($storagepost);
189 189​
190 if (get_var("UEFI")) { 190​ if (get_var("UEFI")) {
191 autotest::loadtest "tests/uefi_postinstall.pm"; 191​ autotest::loadtest "tests/uefi_postinstall.pm";
192 } 192​ }
193 193​
194 # generic post-install test load 194​ # generic post-install test load
195 if (get_var("POSTINSTALL")) { 195​ if (get_var("POSTINSTALL")) {
196 autotest::loadtest "tests/".get_var('POSTINSTALL')."_postinstall.pm"; 196​ my @pis = split(/ /, get_var("POSTINSTALL"));
197​ foreach my $pi (@pis) {
198​ autotest::loadtest "tests/${pi}_postinstall.pm";
199​ }
197 } 200​ }
198 201​
199 # we should shut down before uploading disk images 202​ # we should shut down before uploading disk images
200 if (get_var("STORE_HDD_1") || get_var("PUBLISH_HDD_1")) { 203​ if (get_var("STORE_HDD_1") || get_var("PUBLISH_HDD_1")) {
201 autotest::loadtest "tests/_console_shutdown.pm"; 204​ autotest::loadtest "tests/_console_shutdown.pm";
202 } 205​ }
203} 206​}
204 207​
Show All 24 Lines
View Options

needles/cockpit/join_button.json

  • This file was added.
1​{
2​ "properties": [],
3​ "tags": [
4​ "cockpit_join_button"
5​ ],
6​ "area": [
7​ {
8​ "xpos": 840,
9​ "ypos": 458,
10​ "width": 31,
11​ "height": 18,
12​ "type": "match"
13​ }
14​ ]
15​}
16​No newline at end of file
View Options

needles/cockpit/join_button.png

  • This binary file was added.
View Options

needles/cockpit/join_complete.json

  • This file was added.
1​{
2​ "properties": [],
3​ "area": [
4​ {
5​ "xpos": 397,
6​ "ypos": 290,
7​ "width": 135,
8​ "height": 17,
9​ "type": "match"
10​ }
11​ ],
12​ "tags": [
13​ "cockpit_join_complete"
14​ ]
15​}
16​No newline at end of file
View Options

needles/cockpit/join_complete.png

  • This binary file was added.
View Options

needles/cockpit/join_domain.json

  • This file was added.
1​{
2​ "tags": [
3​ "cockpit_join_domain"
4​ ],
5​ "area": [
6​ {
7​ "xpos": 206,
8​ "ypos": 168,
9​ "width": 96,
10​ "height": 16,
11​ "type": "match"
12​ }
13​ ],
14​ "properties": []
15​}
16​No newline at end of file
View Options

needles/cockpit/join_domain.png

  • This binary file was added.
View Options

needles/cockpit/join_domain_button.json

  • This file was added.
1​{
2​ "properties": [],
3​ "tags": [
4​ "cockpit_join_domain_button"
5​ ],
6​ "area": [
7​ {
8​ "xpos": 454,
9​ "ypos": 291,
10​ "width": 74,
11​ "height": 15,
12​ "type": "match"
13​ }
14​ ]
15​}
16​No newline at end of file
View Options

needles/cockpit/join_domain_button.png

  • This binary file was added.
View Options

needles/cockpit/join_progress.json

  • This file was added.
1​{
2​ "properties": [],
3​ "area": [
4​ {
5​ "xpos": 237,
6​ "ypos": 461,
7​ "width": 125,
8​ "height": 14,
9​ "type": "match"
10​ }
11​ ],
12​ "tags": [
13​ "cockpit_join_progress"
14​ ]
15​}
16​No newline at end of file
View Options

needles/cockpit/join_progress.png

  • This binary file was added.
View Options

templates

Show First 20 Lines • Show All 343 Lines • ▼ Show 20 Line(s)342 product => {
344 distri => "fedora", 344​ distri => "fedora",
345 flavor => "Server-dvd-iso", 345​ flavor => "Server-dvd-iso",
346 version => "*", 346​ version => "*",
347 }, 347​ },
348 test_suite => { name => "server_cockpit_basic" }, 348​ test_suite => { name => "server_cockpit_basic" },
349 }, 349​ },
350 { 350​ {
351 machine => { name => "64bit" }, 351​ machine => { name => "64bit" },
352​ prio => 40,
353​ product => {
354​ arch => "x86_64",
355​ distri => "fedora",
356​ flavor => "Server-dvd-iso",
357​ version => "*",
358​ },
359​ test_suite => { name => "realmd_join_cockpit" },
360​ },
361​ {
362​ machine => { name => "64bit" },
352 prio => 20, 363​ prio => 20,
353 product => { 364​ product => {
354 arch => "x86_64", 365​ arch => "x86_64",
355 distri => "fedora", 366​ distri => "fedora",
356 flavor => "universal", 367​ flavor => "universal",
357 version => "*", 368​ version => "*",
358 }, 369​ },
359 test_suite => { name => "install_repository_http_variation" }, 370​ test_suite => { name => "install_repository_http_variation" },
▲ Show 20 Lines • Show All 1338 Lines • ▼ Show 20 Line(s)1707 settings => [
1698 { key => "USER_LOGIN", value => "false" }, 1709​ { key => "USER_LOGIN", value => "false" },
1699 { key => "ROOT_PASSWORD", value => "weakpassword" }, 1710​ { key => "ROOT_PASSWORD", value => "weakpassword" },
1700 { key => "START_AFTER_TEST", value => "server_cockpit_default" }, 1711​ { key => "START_AFTER_TEST", value => "server_cockpit_default" },
1701 { key => "BOOTFROM", value => "c" }, 1712​ { key => "BOOTFROM", value => "c" },
1702 { key => "HDD_1", value => "disk_%MACHINE%_cockpit.qcow2" }, 1713​ { key => "HDD_1", value => "disk_%MACHINE%_cockpit.qcow2" },
1703 ], 1714​ ],
1704 }, 1715​ },
1705 { 1716​ {
1717​ name => "realmd_join_cockpit",
1718​ settings => [
1719​ { key => "POSTINSTALL", value => "realmd_join_cockpit freeipa_client" },
1720​ { key => "USER_LOGIN", value => "false" },
1721​ { key => "ROOT_PASSWORD", value => "weakpassword" },
1722​ { key => "START_AFTER_TEST", value => "server_cockpit_default" },
1723​ { key => "PARALLEL_WITH", value => "server_role_deploy_domain_controller" },
1724​ { key => "BOOTFROM", value => "c" },
1725​ { key => "HDD_1", value => "disk_%MACHINE%_cockpit.qcow2" },
1726​ { key => "GRUB_POSTINSTALL", value => "net.ifnames=0 biosdevname=0" },
1727​ { key => "NICTYPE", value => "tap" },
1728​ { key => "WORKER_CLASS", value => "tap" },
1729​ ],
1730​ },
1731​ {
1706 name => "desktop_terminal", 1732​ name => "desktop_terminal",
1707 settings => [ 1733​ settings => [
1708 { key => "POSTINSTALL", value => "desktop_terminal" }, 1734​ { key => "POSTINSTALL", value => "desktop_terminal" },
1709 { key => "START_AFTER_TEST", value => "install_default_upload" }, 1735​ { key => "START_AFTER_TEST", value => "install_default_upload" },
1710 { key => "BOOTFROM", value => "c" }, 1736​ { key => "BOOTFROM", value => "c" },
1711 { key => "HDD_1", value => "disk_%FLAVOR%_%MACHINE%.qcow2" }, 1737​ { key => "HDD_1", value => "disk_%FLAVOR%_%MACHINE%.qcow2" },
1712 ], 1738​ ],
1713 }, 1739​ },
1714 ], 1740​ ],
1715} 1741​}
View Options

tests/_boot_to_anaconda.pm

1use base "anacondatest"; 1​use base "anacondatest";
2use strict; 2​use strict;
3use testapi; 3​use testapi;
4 4​
5sub run { 5​sub run {
6 my $self = shift; 6​ my $self = shift;
7 # construct the kernel args. the trick here is to wind up with 7​ # construct the kernel params. the trick here is to wind up with
8 # spaced args if GRUB or GRUBADD is set, and just spaces if not, 8​ # spaced params if GRUB or GRUBADD is set, and just spaces if not,
9 # then check if we got all spaces. We wind up with a harmless 9​ # then check if we got all spaces. We wind up with a harmless
10 # extra space if GRUBADD is set but GRUB is not. 10​ # extra space if GRUBADD is set but GRUB is not.
11 my $args = ""; 11​ my $params = "";
12 $args .= get_var("GRUB", "") . " "; 12​ $params .= get_var("GRUB", "") . " ";
13 $args .= get_var("GRUBADD", "") . " "; 13​ $params .= get_var("GRUBADD", "") . " ";
14 # Construct inst.repo arg for REPOSITORY_VARIATION 14​ # Construct inst.repo arg for REPOSITORY_VARIATION
15 my $repourl = get_var("REPOSITORY_VARIATION"); 15​ my $repourl = get_var("REPOSITORY_VARIATION");
16 if ($repourl) { 16​ if ($repourl) {
17 my $version = lc(get_var("VERSION", "")); 17​ my $version = lc(get_var("VERSION", ""));
18 my $arch = get_var("ARCH", ""); 18​ my $arch = get_var("ARCH", "");
19 $repourl .= "/$version/Everything/$arch/os"; 19​ $repourl .= "/$version/Everything/$arch/os";
20 $args .= "inst.repo=$repourl"; 20​ $params .= "inst.repo=$repourl";
21 } 21​ }
22 # ternary: set $args to "" if it contains only spaces 22​ # ternary: set $params to "" if it contains only spaces
23 $args = $args =~ /^\s+$/ ? "" : $args; 23​ $params = $params =~ /^\s+$/ ? "" : $params;
24 24​
25 # set mutex wait if necessary 25​ # set mutex wait if necessary
26 my $mutex = get_var("INSTALL_UNLOCK"); 26​ my $mutex = get_var("INSTALL_UNLOCK");
27 27​
28 # call do_bootloader with postinstall=0, the args, and the mutex 28​ # call do_bootloader with postinstall=0, the params, and the mutex
29 $self->do_bootloader(0, $args, $mutex); 29​ $self->do_bootloader(postinstall=>0, params=>$params, mutex=>$mutex);
30 30​
31 # proceed to installer 31​ # proceed to installer
32 unless (get_var("KICKSTART")) 32​ unless (get_var("KICKSTART"))
33 { 33​ {
34 # on lives, we have to explicitly launch anaconda 34​ # on lives, we have to explicitly launch anaconda
35 if (get_var('LIVE')) { 35​ if (get_var('LIVE')) {
36 assert_and_click "live_start_anaconda_icon", '', 300; 36​ assert_and_click "live_start_anaconda_icon", '', 300;
37 } 37​ }
Show All 33 Lines
View Options

tests/_console_wait_login.pm

1use base "fedorabase"; 1​use base "fedorabase";
2use strict; 2​use strict;
3use testapi; 3​use testapi;
4 4​
5sub run { 5​sub run {
6 my $self = shift; 6​ my $self = shift;
7 # If KICKSTART is set, then the wait_time needs to consider the 7​ # If KICKSTART is set, then the wait_time needs to consider the
8 # install time. if UPGRADE, we have to wait for the entire upgrade 8​ # install time. if UPGRADE, we have to wait for the entire upgrade
9 my $wait_time = 300; 9​ my $wait_time = 300;
10 $wait_time = 1800 if (get_var("KICKSTART")); 10​ $wait_time = 1800 if (get_var("KICKSTART"));
11 $wait_time = 6000 if (get_var("UPGRADE")); 11​ $wait_time = 6000 if (get_var("UPGRADE"));
12 12​
13​ # handle bootloader, if requested
14​ if (get_var("GRUB_POSTINSTALL")) {
15​ $self->do_bootloader(postinstall=>1, params=>get_var("GRUB_POSTINSTALL"), timeout=>$wait_time);
garretrazielUnsubmitted
Not Done

Maybe convert this to that weird dict-like "named arguments" thing? WDYT?

adamwillAuthorUnsubmitted
Not Done

You mean a hash? :P Yeah, that probably makes sense, I was just too lazy. I'll do that.

16​ $wait_time = 180;
17​ }
18​
13 # Wait for the text login 19​ # Wait for the text login
14 assert_screen "text_console_login", $wait_time; 20​ assert_screen "text_console_login", $wait_time;
15 21​
16 # do user login unless USER_LOGIN is set to string 'false' 22​ # do user login unless USER_LOGIN is set to string 'false'
17 unless (get_var("USER_LOGIN") eq "false") { 23​ unless (get_var("USER_LOGIN") eq "false") {
18 $self->console_login(user=>get_var("USER_LOGIN", "test"), password=>get_var("USER_PASSWORD", "weakpassword")); 24​ $self->console_login(user=>get_var("USER_LOGIN", "test"), password=>get_var("USER_PASSWORD", "weakpassword"));
19 } 25​ }
20 if (get_var("ROOT_PASSWORD")) { 26​ if (get_var("ROOT_PASSWORD")) {
Show All 15 Lines
View Options

tests/freeipa_client_postinstall.pm

1use base "installedtest"; 1​use base "installedtest";
2use strict; 2​use strict;
3use testapi; 3​use testapi;
4 4​
5sub run { 5​sub run {
6 my $self=shift; 6​ my $self=shift;
7 # check domain is listed in 'realm list' 7​ # check domain is listed in 'realm list'
8 validate_script_output 'realm list', sub { $_ =~ m/domain-name: domain\.local.*configured: kerberos-member/s }; 8​ validate_script_output 'realm list', sub { $_ =~ m/domain-name: domain\.local.*configured: kerberos-member/s };
9 # check we can see the admin user in getent 9​ # check we can see the admin user in getent
10 assert_script_run 'getent passwd admin@DOMAIN.LOCAL'; 10​ assert_script_run 'getent passwd admin@DOMAIN.LOCAL';
11 # check keytab entries 11​ # check keytab entries
12 validate_script_output 'klist -k', sub { $_ =~ m/client001\.domain\.local\@DOMAIN.LOCAL/ }; 12​ my $hostname = script_output 'hostname';
13​ my $qhost = quotemeta($hostname);
14​ validate_script_output 'klist -k', sub { $_ =~ m/$qhost\@DOMAIN\.LOCAL/ };
13 # check we can kinit with the host principal 15​ # check we can kinit with the host principal
14 assert_script_run 'kinit -k host/client001.domain.local@DOMAIN.LOCAL'; 16​ assert_script_run "kinit -k host/$hostname\@DOMAIN.LOCAL";
15 # kinit as each user and set a new password ​
16 assert_script_run 'printf "correcthorse\nbatterystaple\nbatterystaple" | kinit test1@DOMAIN.LOCAL'; ​
17 assert_script_run 'printf "correcthorse\nbatterystaple\nbatterystaple" | kinit test2@DOMAIN.LOCAL'; ​
18 # switch to tty3 17​ # switch to tty3
19 send_key "ctrl-alt-f3"; 18​ send_key "ctrl-alt-f3";
20 # try and login as test1, should work 19​ # try and login as test1, should work
21 $self->console_login(user=>'test1@DOMAIN.LOCAL', password=>'batterystaple'); 20​ $self->console_login(user=>'test1@DOMAIN.LOCAL', password=>'batterystaple');
22 type_string "exit\n"; 21​ type_string "exit\n";
23 # try and login as test2, should fail. we cannot use console_login 22​ # try and login as test2, should fail. we cannot use console_login
24 # as it takes 10 seconds to complete when login fails, and 23​ # as it takes 10 seconds to complete when login fails, and
25 # "permission denied" message doesn't last that long 24​ # "permission denied" message doesn't last that long
Show All 20 Lines
View Options

tests/realmd_join_cockpit_postinstall.pm

  • This file was added.
1​use base "installedtest";
2​use strict;
3​use testapi;
4​use lockapi;
5​
6​sub run {
7​ my $self=shift;
8​ # clone host's /etc/hosts (for phx2 internal routing to work)
9​ # must come *before* setup_tap_static or else it would overwrite
10​ # its changes
11​ $self->clone_host_file("/etc/hosts");
12​ # set up networking
13​ $self->setup_tap_static("10.0.2.102", "client002.domain.local");
14​ # test
15​ $self->clone_host_file("/etc/resolv.conf");
16​ # use FreeIPA server as DNS server
17​ assert_script_run "printf 'search domain.local\nnameserver 10.0.2.100' > /etc/resolv.conf";
18​ # wait for the server to be ready (do it now just to make sure name
19​ # resolution is working before we proceed)
20​ mutex_lock "freeipa_ready";
21​ mutex_unlock "freeipa_ready";
22​ # run firefox and login to cockpit
23​ $self->start_cockpit(1);
24​ assert_and_click "cockpit_join_domain_button";
25​ assert_screen "cockpit_join_domain";
26​ send_key "tab";
27​ wait_still_screen 1;
28​ type_string "ipa001.domain.local";
29​ wait_still_screen 1;
30​ send_key "tab";
31​ send_key "tab";
32​ wait_still_screen 1;
33​ type_string "admin";
34​ wait_still_screen 1;
35​ send_key "tab";
36​ type_string "monkeys123";
37​ wait_still_screen 1;
38​ assert_and_click "cockpit_join_button";
39​ # check we hit the progress screen, so we fail faster if it's
40​ # broken
41​ assert_screen "cockpit_join_progress";
42​ # join involves package installs, so it may take some time
43​ assert_screen "cockpit_join_complete", 300;
44​ # quit browser to return to console
45​ send_key "ctrl-q";
46​ # we don't get back to a prompt instantly and keystrokes while X
47​ # is still shutting down are swallowed, so wait_still_screen before
48​ # finishing (and handing off to freeipa_client_postinstall)
49​ wait_still_screen 5;
50​}
51​
52​sub test_flags {
53​ # without anything - rollback to 'lastgood' snapshot if failed
54​ # 'fatal' - whole test suite is in danger if this fails
55​ # 'milestone' - after this test succeeds, update 'lastgood'
56​ # 'important' - if this fails, set the overall state to 'fail'
57​ return { fatal => 1 };
58​}
59​
60​1;
61​
62​# vim: set sw=4 et:
View Options

tests/role_deploy_domain_controller.pm

1use base "installedtest"; 1​use base "installedtest";
2use strict; 2​use strict;
3use testapi; 3​use testapi;
4use lockapi; 4​use lockapi;
5use mmapi; 5​use mmapi;
6 6​
7sub run { 7​sub run {
8 my $self=shift; 8​ my $self=shift;
9 # boot with kernel params to ensure interface is 'eth0' and not whatever 9​ # boot with kernel params to ensure interface is 'eth0' and not whatever
10 # systemd feels like calling it today 10​ # systemd feels like calling it today
11 $self->do_bootloader(1, "net.ifnames=0 biosdevname=0"); 11​ $self->do_bootloader(postinstall=>1, params=>"net.ifnames=0 biosdevname=0");
12 $self->boot_to_login_screen("text_console_login", 5, 60); 12​ $self->boot_to_login_screen("text_console_login", 5, 60);
13 # login 13​ # login
14 $self->root_console(); 14​ $self->root_console();
15 # set hostname 15​ # clone host's /etc/hosts (for phx2 internal routing to work)
16 assert_script_run 'hostnamectl set-hostname ipa001.domain.local'; 16​ # must come *before* setup_tap_static or else it would overwrite
17 # add entry to /etc/hosts 17​ # its changes
18 assert_script_run 'echo "10.0.2.100 ipa001.domain.local ipa001" >> /etc/hosts'; 18​ $self->clone_host_file("/etc/hosts");
19 # bring up network. DEFROUTE is *vital* here 19​ # set up networking
20 assert_script_run 'printf "DEVICE=eth0\nBOOTPROTO=none\nIPADDR=10.0.2.100\nGATEWAY=10.0.2.2\nPREFIX=24\nDEFROUTE=yes" > /etc/sysconfig/network-scripts/ifcfg-eth0'; 20​ $self->setup_tap_static("10.0.2.100", "ipa001.domain.local");
21 script_run "systemctl restart NetworkManager.service"; ​
22 # clone host's resolv.conf to get name resolution 21​ # clone host's resolv.conf to get name resolution
23 $self->clone_host_resolv(); 22​ $self->clone_host_file("/etc/resolv.conf");
24 # we don't want updates-testing for validation purposes 23​ # we don't want updates-testing for validation purposes
25 assert_script_run 'dnf config-manager --set-disabled updates-testing'; 24​ assert_script_run 'dnf config-manager --set-disabled updates-testing';
26 # we need a lot of entropy for this, and we don't care how good 25​ # we need a lot of entropy for this, and we don't care how good
27 # it is, so let's use haveged 26​ # it is, so let's use haveged
28 assert_script_run 'dnf -y install haveged', 120; 27​ assert_script_run 'dnf -y install haveged', 120;
29 assert_script_run 'systemctl start haveged.service'; 28​ assert_script_run 'systemctl start haveged.service';
30 # deploy the domain controller role 29​ # read DNS server IPs from host's /etc/resolv.conf for passing to
31 assert_script_run 'echo \'{"admin_password":"monkeys123"}\' | rolectl deploy domaincontroller --name=domain.local --settings-stdin', 1200; 30​ # rolectl
31​ my @forwards;
32​ open(FH, '<', "/etc/resolv.conf");
33​ while (<FH>) {
34​ if ($_ =~ m/^nameserver +(.+)/) {
35​ push @forwards, $1;
36​ }
37​ }
38​ # we are now gonna work around a stupid bug in rolekit. we want to
39​ # pass it a list of ipv4 DNS forwarders and have no ipv6 DNS
40​ # forwarders. but it won't allow you to have a dns_forwarders array
41​ # with a "ipv4" list but no "ipv6" list, any values in the "ipv6"
42​ # list must be contactable (so we can't use real IPv6 DNS servers
43​ # as we have no IPv6 connectivity), and if you use an empty list
44​ # as the "ipv6" value you often hit a weird DBus error "unable to
45​ # guess signature from an empty list". Fortunately, rolekit doesn't
46​ # actually check that the values in the lists are really IPv6 /
47​ # IPv4, it just turns all the values in each list into --forwarder
48​ # args for ipa-server-install. So we can just stuff IPv4 values
49​ # into both lists. rolekit bug:
50​ # https://github.com/libre-server/rolekit/issues/64
51​ # it should be fixed relatively soon.
52​ my $fourlist;
53​ my $sixlist;
54​ if (scalar @forwards == 1) {
55​ # we've only got one server, so dupe it, best we can do
56​ $fourlist = '["' . $forwards[0] . '"]';
57​ $sixlist = $fourlist;
58​ }
59​ else {
60​ # put the first value in the 'IPv4' list and all the others in
61​ # the 'IPv6' list
62​ $fourlist = '["' . shift(@forwards) . '"]';
63​ $sixlist = '["' . join('","', @forwards) . '"]';
64​ }
65​ # deploy the domain controller role, specifying an admin password
66​ # and the list of DNS server IPs as JSON via stdin. If we don't do
67​ # this, rolectl defaults to using the root servers as forwarders
68​ # (it does not copy the settings from resolv.conf), which give the
69​ # public results for mirrors.fedoraproject.org, some of which
70​ # things running in phx2 cannot reach; we must make sure the phx2
71​ # deployments use the phx2 nameservers.
72​ assert_script_run 'echo \'{"admin_password":"monkeys123","dns_forwarders":{"ipv4":' . $fourlist . ',"ipv6":' . $sixlist .'}}\' | rolectl deploy domaincontroller --name=domain.local --settings-stdin', 1200;
32 # check the role status, should be 'running' 73​ # check the role status, should be 'running'
33 validate_script_output 'rolectl status domaincontroller/domain.local', sub { $_ =~ m/^running/ }; 74​ validate_script_output 'rolectl status domaincontroller/domain.local', sub { $_ =~ m/^running/ };
34 # check the admin password is listed in 'settings' 75​ # check the admin password is listed in 'settings'
35 validate_script_output 'rolectl settings domaincontroller/domain.local', sub {$_ =~m/dm_password = \w{5,}/ }; 76​ validate_script_output 'rolectl settings domaincontroller/domain.local', sub {$_ =~m/dm_password = \w{5,}/ };
36 # sanitize the settings 77​ # sanitize the settings
37 assert_script_run 'rolectl sanitize domaincontroller/domain.local'; 78​ assert_script_run 'rolectl sanitize domaincontroller/domain.local';
38 # check the password now shows as 'None' 79​ # check the password now shows as 'None'
39 validate_script_output 'rolectl settings domaincontroller/domain.local', sub {$_ =~ m/dm_password = None/ }; 80​ validate_script_output 'rolectl settings domaincontroller/domain.local', sub {$_ =~ m/dm_password = None/ };
40 # kinit as admin 81​ # kinit as admin
41 assert_script_run 'echo "monkeys123" | kinit admin'; 82​ assert_script_run 'echo "monkeys123" | kinit admin';
42 # set up an OTP for client001 enrolment (it will enrol with a kickstart) 83​ # set up an OTP for client001 enrolment (it will enrol with a kickstart)
43 assert_script_run 'ipa host-add client001.domain.local --password=monkeys --force'; 84​ assert_script_run 'ipa host-add client001.domain.local --password=monkeys --force';
44 # create two user accounts, test1 and test2 85​ # create two user accounts, test1 and test2
45 assert_script_run 'echo "correcthorse" | ipa user-add test1 --first test --last one --password'; 86​ assert_script_run 'echo "correcthorse" | ipa user-add test1 --first test --last one --password';
46 assert_script_run 'echo "correcthorse" | ipa user-add test2 --first test --last two --password'; 87​ assert_script_run 'echo "correcthorse" | ipa user-add test2 --first test --last two --password';
47 # add a rule allowing access to all hosts and services 88​ # add a rule allowing access to all hosts and services
48 assert_script_run 'ipa hbacrule-add testrule --servicecat=all --hostcat=all'; 89​ assert_script_run 'ipa hbacrule-add testrule --servicecat=all --hostcat=all';
49 # add test1 (but not test2) to the rule 90​ # add test1 (but not test2) to the rule
50 assert_script_run 'ipa hbacrule-add-user testrule --users=test1'; 91​ assert_script_run 'ipa hbacrule-add-user testrule --users=test1';
51 # disable the default 'everyone everywhere' rule 92​ # disable the default 'everyone everywhere' rule
52 assert_script_run 'ipa hbacrule-disable allow_all'; 93​ assert_script_run 'ipa hbacrule-disable allow_all';
94​ # kinit as each user and set a new password
95​ assert_script_run 'printf "correcthorse\nbatterystaple\nbatterystaple" | kinit test1@DOMAIN.LOCAL';
96​ assert_script_run 'printf "correcthorse\nbatterystaple\nbatterystaple" | kinit test2@DOMAIN.LOCAL';
53 # we're all ready for other jobs to run! 97​ # we're all ready for other jobs to run!
54 mutex_create('freeipa_ready'); 98​ mutex_create('freeipa_ready');
55 wait_for_children; 99​ wait_for_children;
56 # once child jobs are done, stop the role 100​ # once child jobs are done, stop the role
57 assert_script_run 'rolectl stop domaincontroller/domain.local'; 101​ assert_script_run 'rolectl stop domaincontroller/domain.local';
58 # check role is stopped 102​ # check role is stopped
59 validate_script_output 'rolectl status domaincontroller/domain.local', sub { $_ =~ m/^ready-to-start/ }; 103​ validate_script_output 'rolectl status domaincontroller/domain.local', sub { $_ =~ m/^ready-to-start/ };
60 # decommission the role 104​ # decommission the role
Show All 17 Lines