Project

General

Profile

Actions
Copy link

action #102254

closed

[sle][security][backlog][Tumbleweed][FIPS] Integrate libssh* test into FIPS Security job group

Added by bchou over 2 years ago. Updated over 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
bchou
Category:
New test
Target version:
-
Start date:
2021-11-11
Due date:
% Done:

100%

Estimated time:
24.00 h
Difficulty:
Actions
Copy link
 #1

Updated by bchou almost 2 years ago

  • Subject changed from [sle][security][sle15sp4][FIPS] Integrate libssh* test into FIPS Security job group to [sle][security][Tumbleweed][sle15sp4][FIPS] Integrate libssh* test into FIPS Security job group
  • Estimated time changed from 16.00 h to 24.00 h

Hello Starry,

Currently, libssh case is running in the Maintenance job group.
https://openqa.suse.de/tests/8700878 (SLE15 SP3)
The test tried to build custom container image to do the test. It could be a bit different as our general test. Need to do some experimental test if it can work on Tumbleweed and SLE15SP4/

It is not enabled in Tumbleweed and SLE15SP4 yet.

Would you please try to run it on Tumbleweed and also SLE15SP4 FIPS mode?
Thank you.

Actions
Copy link
 #2

Updated by bchou almost 2 years ago

  • Assignee changed from bchou to StarryWang
Actions
Copy link
 #3

Updated by StarryWang almost 2 years ago

  • Status changed from New to In Progress
  • % Done changed from 0 to 20
Actions
Copy link
 #4

Updated by llzhao almost 2 years ago

  • Subject changed from [sle][security][Tumbleweed][sle15sp4][FIPS] Integrate libssh* test into FIPS Security job group to [sle][security][backlog][Tumbleweed][FIPS] Integrate libssh* test into FIPS Security job group
Actions
Copy link
 #5

Updated by StarryWang almost 2 years ago

The test failed when I was trying to move it to Tumbleweed:
https://openqa.opensuse.org/tests/2335091#step/libssh/94

Actions
Copy link
 #7

Updated by StarryWang almost 2 years ago

  • Status changed from In Progress to Blocked

Progress status is set to "Blocked" since I need to wait for this bug to be fixed.

Actions
Copy link
 #8

Updated by bchou almost 2 years ago

Discuss with Starry offline, the bug report was found in TW only, openSUSE Leap worked well.
1199337 - [Tumbleweed][libssh][Build_20220507] virsh remote connect by using libssh2 failed with "Username/PublicKey combination"

Actions
Copy link
 #9

Updated by StarryWang almost 2 years ago

  • Assignee changed from StarryWang to bchou

Hi Ben,
Can you help to trigger this job on sle15sp4?
The settings on O3 are:

BOOT_HDD_IMAGE=1
DESKTOP=textmode
HDD_1=%DISTRI%-%VERSION%-%ARCH%-%BUILD%-%DESKTOP%@%MACHINE%.qcow2
MACHINE=64bit
START_AFTER_TEST=create_hdd_textmode
UEFI_PFLASH_VARS=%DISTRI%-%VERSION%-%ARCH%-%BUILD%-%DESKTOP%@%MACHINE%-uefi-vars.qcow2
VIDEOMODE=text
YAML_SCHEDULE=schedule/qam/common/qam-libssh.yml

The test result of this case on Leap 15.4 is passed:
https://openqa.opensuse.org/tests/2389227#settings

Thanks :-)

Actions
Copy link
 #10

Updated by bchou almost 2 years ago

  • Status changed from Blocked to In Progress
Actions
Copy link
 #11

Updated by bchou almost 2 years ago

Yes sure, I will try to trigger the test on SLE today.

Actions
Copy link
 #12

Updated by bchou almost 2 years ago

  • % Done changed from 20 to 60

Enable the test on SP4 is working well and also working well in FIPS mode.
PR submit: https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/15102

Need to provide more VRs later.

Actions
Copy link
 #13

Updated by bchou almost 2 years ago

  • % Done changed from 60 to 80

VR:

x86_64 kernel mode passed.
x86_64 ENV mode error- hit the bug 1193275 - [SLES15SP4][Build 67.2][SECURITY][FIPS] Error message about choose_kex: unsupported KEX method curve25519-sha256 in FIPS ENV mode

Actions
Copy link
 #14

Updated by bchou over 1 year ago

  • Status changed from In Progress to Resolved
  • % Done changed from 80 to 100

libssh is already included in Tumbleweed testsuite.

Actions
Copy link

Also available in: Atom PDF