Project

General

Profile

Actions

action #40460

open

Improve reporting about apparmor compatibility with remote backends (was:Test run died because of unexpected console quit (select_console failed))

Added by waynechen55 over 5 years ago. Updated over 3 years ago.

Status:
Workable
Priority:
Low
Assignee:
-
Category:
Feature requests
Target version:
Start date:
2018-08-31
Due date:
% Done:

0%

Estimated time:

Description

Observation

I encounterd this error before. At that time, I can get over it by upgrade xterm-console and then re-install os-autoinst.
This time I did not perform the exact same sequence of operations as before, but still tried to resolve this issue by various method.
Unfortunately, this error persists and block me from continuing my test.

[2018-08-31T12:28:50.0975 CST] [debug] <<< testapi::select_console(testapi_console='sol', await_console=0)
/usr/lib/os-autoinst/consoles/vnc_base.pm:71:{
  'port' => 36780,
  'hostname' => 'localhost',
  'ikvm' => 0
}
[2018-08-31T12:28:51.0089 CST] [debug] Connected to Xvnc - PID 9001
icewm PID is 9013
xterm PID is 9015
IceWM: using /var/lib/empty/.icewm for private configuration files
Fontconfig error: Cannot load default config file
IceWM: Warning: Could not load font "sans-serif:size=10:bold".
IceWM: xft: fallback from 'sans-serif:size=10:bold'
…
IceWM: Could not load fallback Xft font.
Traceback (most recent call last):
  File "/usr/bin/xterm-console", line 31, in <module>
    with open("/sys/module/vt/parameters/default_{}".format(cname)) as f:
PermissionError: [Errno 13] Permission denied: '/sys/module/vt/parameters/default_red'

Acceptance criteria

  • AC1: There is clear feedback that the apparmor profiles are not compatible with remote backends

Suggestions

  • From within the worker, when the backend for a job is not qemu, try to conduct an operation which is only allowed with apparmor disabled, e.g. something with "ssh", report an obvious message if not
  • As an alternative: Add a check to the worker calling sudo /usr/sbin/aa-status | grep '/usr/share/openqa/script/worker' whenever the backend is not qemu. But research if we can achieve that without root permissions
Actions

Also available in: Atom PDF