action #50348
open[opensuse] Add a new test for UEFI HTTP(S) boot
Added by ggardet_arm about 5 years ago. Updated about 1 month ago.
0%
Description
UEFI HTTP(S) boot is not tested, so we should add a test for this case.
Updated by ggardet_arm about 5 years ago
PR available: https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/7261
Matching needles: https://github.com/os-autoinst/os-autoinst-needles-opensuse/pull/541
It works fine with my own HTTP server, but openqa.o.o and download.o.o servers are not able to serve the EFI file properly. The UEFI firmware outputs the following errors:
[Bds]Booting UEFI HTTP
>>Start HTTP Boot over IPv4InstallProtocolInterface: BA23B311-343D-11E6-9185-5820B1D65299 B94CD178
....InstallProtocolInterface: 41D94CD2-35B6-455A-8258-D4E51334AADD BA730820
InstallProtocolInterface: 3AD9DF29-4501-478D-B1F8-7F7FE70E50F3 BA72F6B8
InstallProtocolInterface: F4B427BB-BA21-4F16-BC4E-43E416AB619C BA873EB0
Station IP address is 10.0.2.15
InstallProtocolInterface: 7A59B29B-910B-4171-8242-A85A0DF25B5B BA8292A0
InstallProtocolInterface: 65530BC7-A359-410F-B010-5AADC7EC2B62 BA829E38
InstallProtocolInterface: 41D94CD2-35B6-455A-8258-D4E51334AADD BA829920
InstallProtocolInterface: 41D94CD2-35B6-455A-8258-D4E51334AADD BA8266A0
InstallProtocolInterface: 3AD9DF29-4501-478D-B1F8-7F7FE70E50F3 BA826D38
InstallProtocolInterface: AE3D28CC-E05B-4FA1-A011-7EB55A3F1401 BA826030
InstallProtocolInterface: 09576E91-6D3F-11D2-8E39-00A0C969723B BA719098
HTTP ERROR: Resource Redirected.
New Location: https://openqa.opensuse.org/assets/repo/openSUSE-Tumbleweed-oss-aarch64-Snapshot20190405/EFI/BOOT/bootaa64.efi
Redirection: 301 Moved Permanently
URI: http://openqa.opensuse.org/assets/repo/openSUSE-Tumbleweed-oss-aarch64-Snapshot20190405/EFI/BOOT/bootaa64.efi
HTTP ERROR: Resource Redirected.
New Location: https://openqa.opensuse.org/assets/repo/openSUSE-Tumbleweed-oss-aarch64-Snapshot20190405/EFI/BOOT/bootaa64.efi
Redirection: 301 Moved Permanently
Error: Could not retrieve NBP file size from HTTP server.
Error: Unexpected network error.
TcpOnAppAbort: connection reset issued by application for TCB BA829018
[Bds] Expand PciRoot(0x0)/Pci(0x3,0x0)/MAC(525400123456,0x1)/IPv4(0.0.0.0,0x0,DHCP,0.0.0.0,0.0.0.0,0.0.0.0)/Uri(http://openqa.opensuse.org/assets/repo/openSUSE-Tumbleweed-oss-aarch64-Snapshot20190405/EFI/BOOT/bootaa64.efi) -> <null string>
So, openqa.o.o and download.o.o http servers may require a config update.
Updated by ggardet_arm about 5 years ago
With download.o.o the error is also due to NBD file size error:
[Bds]Booting UEFI HTTP
>>Start HTTP Boot over IPv4InstallProtocolInterface: BA23B311-343D-11E6-9185-5820B1D65299 B94DB178
....InstallProtocolInterface: 41D94CD2-35B6-455A-8258-D4E51334AADD BA72F020
InstallProtocolInterface: 3AD9DF29-4501-478D-B1F8-7F7FE70E50F3 BA72FC38
InstallProtocolInterface: F4B427BB-BA21-4F16-BC4E-43E416AB619C BA72F5B0
Station IP address is 10.0.2.15
InstallProtocolInterface: 7A59B29B-910B-4171-8242-A85A0DF25B5B BA82A2A0
InstallProtocolInterface: 65530BC7-A359-410F-B010-5AADC7EC2B62 BA82AE38
InstallProtocolInterface: 41D94CD2-35B6-455A-8258-D4E51334AADD BA82A020
InstallProtocolInterface: 41D94CD2-35B6-455A-8258-D4E51334AADD BA827BA0
InstallProtocolInterface: 3AD9DF29-4501-478D-B1F8-7F7FE70E50F3 BA827EB8
InstallProtocolInterface: AE3D28CC-E05B-4FA1-A011-7EB55A3F1401 BA82AA30
InstallProtocolInterface: 09576E91-6D3F-11D2-8E39-00A0C969723B BA91B298
HTTP ERROR: Resource Redirected.
New Location: http://opensuse.mirrors.ovh.net/opensuse/ports/aarch64/tumbleweed/repo/oss/EFI/BOOT/bootaa64.efi
Redirection: 302 Found
URI: http://download.opensuse.org/ports/aarch64/tumbleweed/repo/oss//EFI/BOOT/bootaa64.efi
HTTP ERROR: Resource Redirected.
New Location: http://opensuse.mirrors.ovh.net/opensuse/ports/aarch64/tumbleweed/repo/oss/EFI/BOOT/bootaa64.efi
Redirection: 302 Found
Error: Could not retrieve NBP file size from HTTP server.
Error: Unexpected network error.
TcpOnAppAbort: connection reset issued by application for TCB BA872318
[Bds] Expand PciRoot(0x0)/Pci(0x3,0x0)/MAC(525400123456,0x1)/IPv4(0.0.0.0,0x0,DHCP,0.0.0.0,0.0.0.0,0.0.0.0)/Uri(http://download.opensuse.org/ports/aarch64/tumbleweed/repo/oss//EFI/BOOT/bootaa64.efi) -> <null string>
Updated by ggardet_arm about 5 years ago
After some tests, it seems that UEFI http boot does not handle redirections properly. If I use the mirror directly instead of download.o.o, the boot is ok.
For openqa.o.o, even if I use httpS (address where it is redirected), it does not work:
[Bds]Booting UEFI HTTP
>>Start HTTP Boot over IPv4InstallProtocolInterface: BA23B311-343D-11E6-9185-5820B1D65299 B94DB178
....InstallProtocolInterface: 41D94CD2-35B6-455A-8258-D4E51334AADD BA730820
InstallProtocolInterface: 3AD9DF29-4501-478D-B1F8-7F7FE70E50F3 BA72F6B8
InstallProtocolInterface: F4B427BB-BA21-4F16-BC4E-43E416AB619C BA873EB0
Station IP address is 10.0.2.15
InstallProtocolInterface: 7A59B29B-910B-4171-8242-A85A0DF25B5B BA8292A0
InstallProtocolInterface: 65530BC7-A359-410F-B010-5AADC7EC2B62 BA829E38
InstallProtocolInterface: 41D94CD2-35B6-455A-8258-D4E51334AADD BA829920
URI: https://openqa.opensuse.org/assets/repo/openSUSE-Tumbleweed-oss-aarch64-Snapshot20190405/EFI/BOOT/bootaa64.efi
Error: Could not retrieve NBP file size from HTTP server.
Error: Network device error.
[Bds] Expand PciRoot(0x0)/Pci(0x3,0x0)/MAC(525400123456,0x1)/IPv4(0.0.0.0,0x0,DHCP,0.0.0.0,0.0.0.0,0.0.0.0)/Uri(https://openqa.opensuse.org/assets/repo/openSUSE-Tumbleweed-oss-aarch64-Snapshot20190405/EFI/BOOT/bootaa64.efi) -> <null string>
It seems that all httpS are broken as the following mirror does not work properly either: https://ftp.gwdg.de/pub/opensuse/ports/aarch64/tumbleweed/repo/oss/EFI/BOOT/bootaa64.efi
Updated by ggardet_arm about 5 years ago
Problems reported upstream:
- https boot broken: https://bugzilla.tianocore.org/show_bug.cgi?id=1714
- http redirections broken: https://bugzilla.tianocore.org/show_bug.cgi?id=1715
Updated by SLindoMansilla about 5 years ago
- Subject changed from Add a new test for UEFI HTTP(S) boot to [opensuse] Add a new test for UEFI HTTP(S) boot
- Assignee set to ggardet_arm
As a result of backlog triaging (see https://progress.opensuse.org/projects/openqatests/wiki#ticket-backlog-triaging for more information).
Please, feel free to adjust the category or the "[label]" if you think different.
Updated by szarate about 5 years ago
In this case, if I get it correctly the uefi boot would have to go through http instead of http directly for it to work? at least while we get an update from upstream tianocore?
Updated by ggardet_arm about 5 years ago
PR merged.
I think openQA repos should be also available from http only, no redirection to httpS.
I added aarch64-uefi_http_boot and aarch64-uefi_https_boot machines to openQA.
I added install_only test on aarch64-uefi_http_boot for aarch64 Tumbleweed to follow easily the current status.
Updated by ggardet_arm about 5 years ago
For the record:
- ovmf 2017* packages from Leap 15.x do not support network download properly for x86_64 and aarch64
- Both aarch64 and x86_64 have problems with http redirections - bug will be fixed upstream: https://bugzilla.tianocore.org/show_bug.cgi?id=1715
- Both aarch64 and x86_64 have problems with httpS, but probably not for the same reasons. (aarch64 does not support it yet, x86_64 support it, but we should probably add a cipherlist) - aarch64 bug will be fixed upstream: https://bugzilla.tianocore.org/show_bug.cgi?id=1009
So, we currently need to:
- stick tests to http (no httpS), without redirection
- Update ovmf (qemu-ovmf-x86_64, qemu-uefi-aarch64) package on workers where those tests are performed (from Virtualization repo)
Updated by ggardet_arm over 4 years ago
HTTP boot works: https://openqa.opensuse.org/tests/1032769
HTTPS boot fails: https://openqa.opensuse.org/tests/1032769
It is blocked by: https://progress.opensuse.org/issues/56768 and https://bugzilla.opensuse.org/show_bug.cgi?id=1150158
Updated by ggardet_arm over 4 years ago
- Related to action #56768: [qe-core][qem] Add the possibility to enroll certificates in edk2 in openQA added
Updated by okurz over 2 years ago
This ticket was set to "Normal" priority but was not updated within the SLO period for "Normal" tickets (365 days) as described on https://progress.opensuse.org/projects/openqatests/wiki/Wiki#SLOs-service-level-objectives . Please consider picking up this ticket within the next 365 days or just set the ticket to the next lower priority of "Low" (no SLO related time period). This update was done as agreed within the SUSE QE Sync call 2021-09-01
Updated by slo-gin over 1 year ago
This ticket was set to Normal priority but was not updated within the SLO period. Please consider picking up this ticket or just set the ticket to the next lower priority.
Updated by slo-gin about 1 month ago
This ticket was set to Normal priority but was not updated within the SLO period. Please consider picking up this ticket or just set the ticket to the next lower priority.