action #155413
Updated by jbaier_cz 3 months ago
## Motivation
In multiple occurrences openQA failed to start up or operate successfully on openqa.opensuse.org due to change of functionality without having according apparmor adaptions prepared. We should have automatic tests that ensure that apparmor profiles are enforced and fail if not covered properly.
## Acceptance criteria
* **AC1:** At least one openQA-in-openQA test scenario ensures that openQA jobs can still be executed with apparmor profiles enforced
## Suggestions
* Do we have any documentation regarding apparmor? If not then extend our documentation to cover that, should be simple
* Enable apparmor in openQA-in-openQA tests and just run tests, e.g. like "zypper -n in apparmor && systemctl enable --now apparmor"
* Ensure to cover both webUI and worker part though can be on the same host
* Do we need reboot? Probably not, we don't have any kernel parameters or anything on o3