Project

General

Profile

Actions
Copy link

action #68200

closed

[sle][security][sle15sp2][FIPS] test fails in sshd due to ~/.ssh directory deleted in opnessh_fips test

Added by bchou almost 4 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
bchou
Category:
Bugs in existing tests
Target version:
-
Start date:
2020-06-18
Due date:
% Done:

100%

Estimated time:
Difficulty:

Description

Observation

It's because sshd test is expecting to have existing ~/.ssh directory,
prepared in consoletest_setup, but there is the ~.ssh directory deleted in opnessh_fips test.

Changing the order will be fixed it too, but I plan to add the condition in sshd to avoid the backup/restore of ~./ssh directory.

openQA test in scenario sle-15-SP2-Online-x86_64-fips_env_mode_tests_crypt_core@64bit fails in
sshd

Test suite description

Maintainer: bchou@suse.com.

Workaround for FIPS single module mode

Further details

Always latest result in this scenario: latest

Related issues 1 (0 open — 1 closed)

Related to openQA Tests - action #68845: [opensuse] sshfs failureResolveddimstar2020-07-10

Actions
Actions
Copy link
 #1

Updated by openqa_review almost 4 years ago

This is an autogenerated message for openQA integration by the openqa_review script:

This bug is still referenced in a failing openQA test: fips_ker_mode_tests_crypt_core_textmode_aarch64
https://openqa.suse.de/tests/4357864

To prevent further reminder comments one of the following options should be followed:

  1. The test scenario is fixed by applying the bug fix to the tested product or the test is adjusted
  2. The openQA job group is moved to "Released"
  3. The label in the openQA scenario is removed
Actions
Copy link
 #2

Updated by bchou almost 4 years ago

  • % Done changed from 0 to 50
Actions
Copy link
 #3

Updated by bchou almost 4 years ago

  • Status changed from Workable to Resolved
  • % Done changed from 50 to 100

The PR was merged.
https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/10643

Currently, It doesn't need to change the test sequence any more for FIPS sshd.
https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/10533

Thanks.

Actions
Copy link
 #4

Updated by bchou almost 4 years ago

  • Status changed from Resolved to In Progress

The previous PR would be breaking the test in Maintenace sequence,
Refine the test script again and also attach the QAM verification run is necessary.

Actions
Copy link
 #5

Updated by bchou almost 4 years ago

  • Status changed from In Progress to Resolved

The refine PR was merged. QAM team also tested passed.

https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/10668

Set as resolved fixed.

Actions
Copy link
 #6

Updated by okurz almost 4 years ago

Actions
Copy link
 #7

Updated by okurz almost 4 years ago

  • Status changed from Resolved to In Progress

The according change was reverted in https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/10684 . I suggest to also set tickets in "openQA Tests" to "Resolved" with a link to a production test run showing the effect, e.g. the fixed tests, as mentioned in the https://progress.opensuse.org/projects/openqatests/wiki#Definition-of-DONE . This is no guarantee that other tests can still be impacted of course :)

Actions
Copy link
 #8

Updated by bchou almost 4 years ago

  • Status changed from In Progress to Feedback
  • % Done changed from 100 to 90

Thanks for the valuable information, and the PR is sent and VR are all provided and passed.

Verification run:
ALL the VR are passed.
https://openqa.suse.de/tests/4449009 (SLES 15 SP2 QAM fips job group)
http://10.67.17.201/tests/1047 (SLES 15 SP1 QAM - sshd+sshfs)
http://10.67.17.201/tests/1049 (SLES 15 SP2 GM - sshd+sshfs)
https://openqa.opensuse.org/t1332365 (openSUSE TW Build293.2)
https://openqa.opensuse.org/tests/1333185 (openSUSE TW Snapshot20200714 - sshd / sshfs / sshxterm )

Set the status as Feedback and wait for the test running on release product in SLE QAM and openSUSE TW.

Actions
Copy link
 #9

Updated by bchou almost 4 years ago

  • Status changed from Feedback to Resolved
  • % Done changed from 90 to 100

The PR is already tested on OSD and O3 without a problem currently. Set this one as resolved fixed. Please reopen this one if any regression. Thanks.

QAM - SLE15SP2:
sle-15-SP2-Server-DVD-Updates-x86_64-Build20200720-1-mau-extratests-security-fips
https://openqa.suse.de/tests/4466219#step/sshd/1

openSUSE TW 20200717:
opensuse-Tumbleweed-DVD-x86_64-Build20200717-kde
https://openqa.opensuse.org/tests/1335789#step/sshd/1

Actions
Copy link
 #10

Updated by okurz over 3 years ago

This is an autogenerated message for openQA integration by the openqa_review script:

This bug is still referenced in a failing openQA test: fips_ker_mode_tests_crypt_core_textmode_aarch64
https://openqa.suse.de/tests/4357864

To prevent further reminder comments one of the following options should be followed:

  1. The test scenario is fixed by applying the bug fix to the tested product or the test is adjusted
  2. The openQA job group is moved to "Released"
  3. The label in the openQA scenario is removed
Actions
Copy link
 #11

Updated by openqa_review over 3 years ago

This is an autogenerated message for openQA integration by the openqa_review script:

This bug is still referenced in a failing openQA test: fips_ker_mode_tests_crypt_core_textmode_aarch64
https://openqa.suse.de/tests/4357864

To prevent further reminder comments one of the following options should be followed:

  1. The test scenario is fixed by applying the bug fix to the tested product or the test is adjusted
  2. The openQA job group is moved to "Released"
  3. The label in the openQA scenario is removed
Actions
Copy link

Also available in: Atom PDF