Project

General

Profile

action #49820

[functional][u] Make the svirt backend work with AppArmor enabled and under company policies

Added by SLindoMansilla over 2 years ago. Updated over 1 year ago.

Status:
Rejected
Priority:
Low
Category:
Infrastructure
Target version:
Start date:
2019-03-29
Due date:
% Done:

0%

Estimated time:
Difficulty:

Description

Motivation

Enabling openSUSE Tumbleweed tests for s390x on openqa.opensuse.org.
Find more details about why this is needed in #48434

Acceptance criteria

  • AC1: The svirt backend complies with the company policies to be run on a shared worker on openqa.opensuse.org
  • AC2: It is possible to enable a worker for z/VM on imagetester

Related issues

Related to openQA Tests - action #48434: [functional][u] test Tumbleweed s390x againResolved2019-02-26

History

#1 Updated by SLindoMansilla over 2 years ago

  • Blocks action #48434: [functional][u] test Tumbleweed s390x again added

#2 Updated by SLindoMansilla over 2 years ago

  • Assignee set to SLindoMansilla
  • Priority changed from Normal to Low

#3 Updated by SLindoMansilla over 2 years ago

  • Status changed from New to Blocked

Waiting for z/VM user from Z system admins

#4 Updated by binary_sequence about 2 years ago

  • Status changed from Blocked to Workable
  • Assignee changed from SLindoMansilla to binary_sequence

I already got a z/VM user.

#5 Updated by SLindoMansilla almost 2 years ago

  • Blocks deleted (action #48434: [functional][u] test Tumbleweed s390x again)

#6 Updated by SLindoMansilla almost 2 years ago

  • Related to action #48434: [functional][u] test Tumbleweed s390x again added

#7 Updated by SLindoMansilla over 1 year ago

At the moment this is very low prio since we have a dedicated server (rebel) for testing linux as a zVM guest: https://openqa.opensuse.org/group_overview/34

#8 Updated by okurz over 1 year ago

I don't think this is feasible as allowing ssh kinda contradicts apparmor by definition, doesn't it?

#9 Updated by SLindoMansilla over 1 year ago

  • Status changed from Workable to Rejected

Yes, you are right.

#10 Updated by pvorel over 1 year ago

Could you please explain what's wrong on ssh?
There is sshd profile
https://gitlab.com/apparmor/apparmor/-/blob/master/profiles/apparmor/profiles/extras/usr.sbin.sshd

#11 Updated by SLindoMansilla over 1 year ago

pvorel wrote:

Could you please explain what's wrong on ssh?
There is sshd profile
https://gitlab.com/apparmor/apparmor/-/blob/master/profiles/apparmor/profiles/extras/usr.sbin.sshd

Company policies. They denied me to add ssh to the apparmor profiles.

#12 Updated by okurz over 1 year ago

SLindoMansilla wrote:

[…]
Company policies.

please reference the "company policies" then or state "I did not understand" instead of spreading false rumors.

Also available in: Atom PDF