https://progress.opensuse.org/https://progress.opensuse.org/themes/openSUSE/favicon/favicon.ico?15829177842022-04-24T11:55:22ZopenSUSE Project Management ToolopenQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5131932022-04-24T11:55:22ZJulie_CAOjcao@suse.com
<ul><li><strong>Related to</strong> <i><a class="issue tracker-4 status-3 priority-4 priority-default closed child parent" href="/issues/105594">action #105594</a>: Two new machines for OSD and o3, meant for bare-metal virtualization size:M</i> added</li></ul> openQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5132042022-04-24T17:48:40Zokurzokurz@suse.com
<ul><li><strong>Tags</strong> set to <i>reactive work</i></li><li><strong>Priority</strong> changed from <i>Normal</i> to <i>Low</i></li><li><strong>Target version</strong> set to <i>Ready</i></li></ul> openQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5132052022-04-24T17:50:44Zokurzokurz@suse.com
<ul><li><strong>Tags</strong> deleted (<del><i>reactive work</i></del>)</li><li><strong>Target version</strong> changed from <i>Ready</i> to <i>future</i></li><li><strong>Parent task</strong> set to <i>#105405</i></li></ul> openQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5336992022-07-05T09:26:49ZJulie_CAOjcao@suse.com
<ul></ul><p>As the ipxe bootloader issue in O3 is fixed, We are going to deploy virtualization tests in O3 for factory-first project, but the ipmi password exposure will be the blocker. Hi <a class="user active user-mention" href="https://progress.opensuse.org/users/17668">@okurz</a>, can this have higher priority to be handled? </p>
openQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5337442022-07-05T10:19:14Zokurzokurz@suse.com
<ul></ul><p>Julie_CAO wrote:</p>
<blockquote>
<p>Hi <a class="user active user-mention" href="https://progress.opensuse.org/users/17668">@okurz</a>, can this have higher priority to be handled?</p>
</blockquote>
<p>I am sorry but I do not see the SUSE QE Tools team working on this anytime soon. This is quite limited in scope to only os-autoinst and maybe really only the IPMI backend so it should be feasible to be solved by external contributors e.g. you within your team. We are happy to support when you take over. Feel welcome to also open draft pull requests and ask questions in there if anything is unclear.</p>
openQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5338942022-07-06T01:42:45ZJulie_CAOjcao@suse.com
<ul></ul><p>I'll evaluate if I can handle this and how is the effort after I finish the ipxe boot issue.</p>
openQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5340982022-07-06T08:45:47Zlivdywanliv.dywan@suse.com
<ul></ul><p>Julie_CAO wrote:</p>
<blockquote>
<p>I'll evaluate if I can handle this and how is the effort after I finish the ipxe boot issue.</p>
</blockquote>
<p>From a brief look <a href="https://github.com/os-autoinst/os-autoinst/blob/7f3d9eaa8c4ac8153466524b6ccbdc951b8eff77/backend/ipmi.pm#L23" class="external">at the code invovled</a>, I think <code>bmwqemu::diag</code> calls could be updated to use <code>masked => $password_variable</code>. There's some stderr handling so you probably want to check if that can expose the password and might need to be handled additionally.</p>
openQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5341342022-07-06T09:49:06ZJulie_CAOjcao@suse.com
<ul></ul><p>thank for the pointer, @cdywan! It helps a lot that I need not begin with it from scrach.</p>
openQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5354932022-07-11T10:53:44ZJulie_CAOjcao@suse.com
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>In Progress</i></li></ul> openQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5361592022-07-13T07:32:32ZJulie_CAOjcao@suse.com
<ul></ul><p><a href="https://github.com/os-autoinst/os-autoinst/pull/2118" class="external">https://github.com/os-autoinst/os-autoinst/pull/2118</a> is submitted. welcome review.</p>
openQA Project - action #110227: Stop showing ipmi passwords in autoinst.txt from a ipmi backend job in O3https://progress.opensuse.org/issues/110227?journal_id=5382462022-07-19T01:42:56ZJulie_CAOjcao@suse.com
<ul><li><strong>Status</strong> changed from <i>In Progress</i> to <i>Resolved</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li></ul><p>PR merged. Close the ticket. Thank you all.</p>