action #165812: Firewall blocking s390x workers connections in 15-SP7 - Containers and images - openSUSE Project Management Tool

Actions

Copy link

action #165812

closed

Firewall blocking s390x workers connections in 15-SP7

Added by pherranz 6 months ago. Updated 4 months ago.

Status:

Resolved

Priority:

Normal

Assignee:

pherranz

Target version:

Start date:

2024-08-26

Due date:

% Done:

100%

Estimated time:

Tags:

containers

Description

Observation¶

openQA test in scenario sle-15-SP7-Online-s390x-create_hdd_autoyast_containers@s390x-kvm fails in
console

Test suite description¶

The base test suite is used for job templates defined in YAML documents. It has no settings of its own.

Reproducible¶

Fails since (at least) Build 4.1

Expected result¶

Last good: (unknown) (or more recent)

Further details¶

Always latest result in this scenario: latest

As suggested in Slack thread, the connections might be being blocked by firewall.

Related issues 1 (0 open — 1 closed)

Actions

Copy link

Updated by pherranz 6 months ago

Status changed from New to In Progress
Assignee set to pherranz

Actions

Copy link

Updated by pherranz 6 months ago

Related to action #164144: Enablement of 15-SP7 added

Actions

Copy link

Updated by pherranz 6 months ago

As spoken with @mloviska, root ssh with password was allowed until sp7. I'll go on and modify autoyast_containers.xml to include new configuration:

...
<firewall>
    <enable_firewall config:type="boolean">true</enable_firewall>
    <start_firewall config:type="boolean">true</start_firewall>
    <zones config:type="list">
        <zone>
            <name>public</name>
            <interfaces config:type="list">
                <interface>eth0</interface>
            </interfaces>
            <services config:type="list">
                <service>vnc-server</service>
                <service>ssh</service>
            </services>
            <ports config:type="list">
                <port>22/tcp</port>
            </ports>
        </zone>
    </zones>
</firewall>
...