action #160083
closedclient gets a redirect and downloads an HTML page from microsoft instead of the proper windows .qcow2 image
0%
Description
Observation¶
openQA test in scenario sle-15-SP4-Server-DVD-Updates-x86_64-fips_tests_xrdp_remote-desktop-client4@64bit fails in
windows_client_boot
Test suite description¶
Testsuite maintained at https://gitlab.suse.de/qe-security/osd-sle15-security.
Reproducible¶
Fails since (at least) Build 20240507-1
Expected result¶
Last good: 20240506-1 (or more recent)
Further details¶
Always latest result in this scenario: latest
First investigation¶
Looks like the password for the windows user is expired; need to change in the windows os image
Updated by amanzini 6 months ago
- Related to action #160068: All Windows Disks fail on boot/login: bernhard's password has expired (again) added
Updated by amanzini 6 months ago
when downloading the HDD assets, the http client gets a redirect and downloads an HTML page from microsoft instead of the proper .qcow2 image:
$ wget https://openqa.suse.de/tests/14235046/asset/hdd/windows-10-x86_64-22H2@windows_bios_boot.qcow2
--2024-05-09 08:43:03-- https://openqa.suse.de/tests/14235046/asset/hdd/windows-10-x86_64-22H2@windows_bios_boot.qcow2
Resolving openqa.suse.de (openqa.suse.de)... 10.145.10.207
Connecting to openqa.suse.de (openqa.suse.de)|10.145.10.207|:443... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: https://www.microsoft.com/software-download/windows10ISO [following]
--2024-05-09 08:43:03-- https://www.microsoft.com/software-download/windows10ISO
Resolving www.microsoft.com (www.microsoft.com)... 2.23.9.218
Connecting to www.microsoft.com (www.microsoft.com)|2.23.9.218|:443... connected.
HTTP request sent, awaiting response...
worker35:/var/lib/openqa/cache/openqa.suse.de # head -1 windows-10-x86_64-22H2@windows_bios_boot.qcow2
<!DOCTYPE html ><html xmlns:mscom="http://schemas.microsoft.com/CMSvNext" xmlns:md="http://schemas.microsoft.com/mscom-data" lang="cs-cz" xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><script type="text/javascript" src="https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js">
Updated by amanzini 6 months ago
from the nginx logs:
2a07:de40:b203:12:7ec2:55ff:fe24:de9c - - [09/May/2024:09:28:12 +0200] "GET /tests/14256623/asset/hdd/windows-10-x86_64-22H2@windows_bios_boot.qcow2 HTTP/1.1" 302 145 "-" "Mojolicious (Perl)" rt=0.000 urt="-"
the client ipv6 is not matching the regular expression at nginx config
# Optional faster assets downloads for large deployments
location /assets {
alias /var/lib/openqa/share/factory;
tcp_nopush on;
sendfile on;
sendfile_max_chunk 1m;
if ($remote_addr !~ "^192\.168\.112\.|^195\.135\.221\.150|^10\.150\.1\.") {
rewrite ^/assets/.*/[wW]in.*$ https://www.microsoft.com/software-download/windows10ISO last;
}
}
Updated by amanzini 6 months ago
- Tags set to infra
- Subject changed from [security] test fails in windows_client_boot to client gets a redirect and downloads an HTML page from microsoft instead of the proper windows .qcow2 image
- Category changed from Bugs in existing tests to Infrastructure
- Status changed from Workable to New
- Assignee deleted (
amanzini)
as a temp workaround, I disabled the redirect by directly editing the nginx config on the openqa.suse.de server; but the issue need to be properly addressed
Updated by amanzini 6 months ago
- Related to deleted (action #160068: All Windows Disks fail on boot/login: bernhard's password has expired (again))
Updated by jbaier_cz 6 months ago
- Related to action #130636: high response times on osd - Try nginx on OSD size:S added
Updated by amanzini 6 months ago ยท Edited
as a temp workaround, I commented the redirect in the /etc/nginx/vhosts.d/openqa-locations.inc config file:
# Optional faster assets downloads for large deployments
location /assets {
alias /var/lib/openqa/share/factory;
tcp_nopush on;
sendfile on;
sendfile_max_chunk 1m;
# amanzini - workaround to disable redirection on OSD windows image from ipv6
# if ($remote_addr !~ "^192\.168\.112\.|^195\.135\.221\.150|^10\.150\.1\.") {
# rewrite ^/assets/.*/[wW]in.*$ https://www.microsoft.com/software-download/windows10ISO last;
#}
}
location / {
proxy_pass "http://webui";
tcp_nodelay on;
proxy_read_timeout 900;
proxy_send_timeout 900;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host:$server_port;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
# amanzini - workaround to disable redirection on OSD windows image from ipv6
#if ($remote_addr !~ "^192\.168\.112\.|^195\.135\.221\.150|^10\.150\.1\.") {
# rewrite ^/tests/.*/asset/.*/[wW]in.*$ https://www.microsoft.com/software-download/windows10ISO last;
#}
}
Updated by ybonatakis 6 months ago
- Subject changed from openQA client gets a redirect and downloads an HTML page from microsoft instead of the proper windows .qcow2 image to client gets a redirect and downloads an HTML page from microsoft instead of the proper windows .qcow2 image
- Description updated (diff)
- Category deleted (
Regressions/Crashes) - Priority changed from High to Normal
- Target version deleted (
Ready)
Idk why but /etc/nginx/vhosts.d/openqa-locations.inc from OSD is not the same as in the repo.
Updated by tinita 6 months ago
- Status changed from In Progress to Feedback
https://gitlab.suse.de/openqa/salt-states-openqa/-/merge_requests/1180 nginx: Remove redirects for microsoft images
Updated by okurz 6 months ago
- Status changed from Feedback to Resolved
https://openqa.suse.de/tests/latest?arch=x86_64&distri=sle&flavor=Server-DVD-Updates&machine=64bit&test=fips_tests_xrdp_remote-desktop-client4&version=15-SP4#next_previous shows a stable series of successful jobs including https://openqa.suse.de/tests/14286153