Actions
action #155413
openEnsure apparmor is enforced in openQA-in-openQA tests size:M
Start date:
Due date:
% Done:
0%
Estimated time:
Tags:
Description
Motivation¶
In multiple occurrences openQA failed to start up or operate successfully on openqa.opensuse.org due to change of functionality without having according apparmor adaptions prepared. We should have automatic tests that ensure that apparmor profiles are enforced and fail if not covered properly.
Acceptance criteria¶
- AC1: At least one openQA-in-openQA test scenario ensures that openQA jobs can still be executed with apparmor profiles enforced
Suggestions¶
- Do we have any documentation regarding apparmor? If not then extend our documentation to cover that, should be simple
- Enable apparmor in openQA-in-openQA tests and just run tests, e.g. like "zypper -n in apparmor && systemctl enable --now apparmor"
- Ensure to cover both webUI and worker part though can be on the same host
- Do we need reboot? Probably not, we don't have any kernel parameters or anything on o3
Updated by okurz 3 months ago
- Copied from action #153427: Improve updating cached assets size:M added
Actions