On Oct 21, 2014, at 8:53 PM, Adam Williamson
<adamwill(a)fedoraproject.org> wrote:
Today I did some server validation testing - and, unfortunately, filed
multiple blocker bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1155301
https://bugzilla.redhat.com/show_bug.cgi?id=1155304
https://bugzilla.redhat.com/show_bug.cgi?id=1155329
These first three are all SELinux policy. CCing Miroslav to look at them. Miroslav,
I'll be online in about 90 minutes to discuss this on IRC if you need me to, but the
short version is this: previously, ipa-server-install would have always been run by root
running in the unconfined domain. We now have a service that will invoke it (rolekit). We
need to update the policy to allow the roled daemon to perform these tasks.
Simo, this is likely the bug that Dan Mossor was trying to report yesterday as well. Can
you please get the FreeIPA team to look at this ASAP? As noted, all of these are likely to
be approved as blockers to Fedora 21 Beta and we really don't want to slip if we can
help it; the current target date is already too close to the winter holidays for our
comfort.
I also wrote a couple of new test cases and modified the Server release
validation matrix somewhat:
*
https://fedoraproject.org/wiki/QA:Testcase_Server_role_deploy is a
generic 'test basic role functionality' test
*
https://fedoraproject.org/wiki/QA:Testcase_Server_cockpit_basic covers
the Cockpit functionality that's meant to be present at Beta
I added new tables to the matrix -
https://fedoraproject.org/wiki/Template:Server_test_matrix - which apply
the generic role functionality test to 'Release-blocking roles' and
'Non-release-blocking roles' - at present we only have one of each, but
the idea is that the test will be listed once for each role we ship, in
the appropriate table. I added the new Cockpit test directly to the
'general tests' section (where the tests we previously had live).
I've applied all these changes to
https://fedoraproject.org/wiki/Test_Results:Fedora_21_Beta_TC4_Server ,
and they'll show up 'automagically' for all future composes.
Thanks, Adam. I'll look at them in greater detail when I get to my desk (currently
typing on a mobile device). Thanks for the comprehensive testing yesterday.
We still need test cases for the specific FreeIPA functionality covered
in the criteria, and a couple other bits and pieces we specified for
Beta; I'll look at adding those ASAP.
--
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net
_______________________________________________
server mailing list
server(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/server