Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 671978 Details for
Bug 891585
ami-4f53dd26 RHEL 5.9 x86_64 us-east-1
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
ami-4f53dd26.yaml
ami-4f53dd26.yaml (text/yaml), 127.02 KB, created by
mkovacik
on 2013-01-03 10:56:01 UTC
(
hide
)
Description:
ami-4f53dd26.yaml
Filename:
MIME Type:
Creator:
mkovacik
Created:
2013-01-03 10:56:01 UTC
Size:
127.02 KB
patch
obsolete
>ami: ami-4f53dd26 >arch: x86_64 >product: RHEL >region: us-east-1 >result: > c1.xlarge: > stage1: > testcase_01_ipv6: > - {command: grep NETWORKING_IPV6=no /etc/sysconfig/network, result: passed} > testcase_02_bash_history: > - {command: '[ ! -f ~/.bash_history ] && echo 0 || cat ~/.bash_history | wc > -l', expectation: "\r\n0\r\n", result: passed} > testcase_03_chkconfig: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: chkconfig --list crond, expectation: '3:on', result: passed} > - {command: chkconfig --list iptables, expectation: '3:on', result: passed} > - {command: chkconfig --list yum-updatesd, expectation: '3:on', result: passed} > testcase_04_cloud_firstboot: > - {command: chkconfig --list rh-cloud-firstboot, expectation: '3:off', result: passed} > - {command: test -f /etc/sysconfig/rh-cloud-firstboot, result: passed} > - {command: cat /etc/sysconfig/rh-cloud-firstboot, expectation: RUN_FIRSTBOOT=NO, > result: passed} > testcase_05_grub: > - {command: test -h /boot/grub/menu.lst, result: passed} > - {command: readlink -e /boot/grub/menu.lst, expectation: /boot/grub/grub.conf, > result: passed} > - {command: 'grep ''(hd0,0)'' /boot/grub/grub.conf', result: passed} > testcase_06_inittab: > - {command: 'grep ''^id:'' /etc/inittab', expectation: 'id:3:initdefault', result: passed} > - {command: 'grep ''^si:'' /etc/inittab', expectation: 'si::sysinit:/etc/rc.d/rc.sysinit', > result: passed} > testcase_07_libc6_xen_conf: > - {command: test -f /etc/ld.so.conf.d/libc6-xen.conf, result: passed} > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''7340032'']'} > - {command: '[ 7340032 -gt 7000000 ]', result: passed} > testcase_09_nameserver: > - {command: dig clock.redhat.com | grep 66.187.233.4, result: passed} > testcase_10_networking: > - {command: grep '^NETWORKING=yes' /etc/sysconfig/network, result: passed} > - {command: grep '^DEVICE=eth0' /etc/sysconfig/network-scripts/ifcfg-eth0, result: passed} > testcase_11_package_set: > - {command: 'rpm -qa --queryformat ''%{NAME},'' && echo', match: ".*\r\n(.*),\r\ > \n.*", result: passed, value: '[''basesystem,glibc-common,glib2,libstdc++,db4,libpng,pcre,elfutils-libelf,libgpg-error,dmidecode,libtiff,zip,perl-String-CRC32,sgpio,mailx,wireless-tools,perl-URI,bash,nss,gawk,binutils,make,libXfont,m4,gzip,hmaccalc,desktop-file-utils,lm_sensors,xorg-x11-filesystem,xorg-x11-font-utils,libXpm,libXaw,redhat-menus,redhat-release,anacron,crash,nss-tools,mtr,cpuspeed,rsync,libicu,dos2unix,ncompress,compat-libstdc++-33,tree,man-pages-de,man-pages-pl,man-pages-ru,glibc,libsepol,keyutils-libs,libXdmcp,readline,libicu,pam_smb,libselinux,findutils,tar,net-tools,device-mapper-multipath,MAKEDEV,parted,vim-enhanced,aspell-ru,pam,util-linux,udev,apr-util,pango,initscripts,mcstrans,dbus,gd,distcache,neon,alsa-lib,mod_ssl,openssh-clients,acpid,irqbalance,openswan,krb5-workstation,stunnel,nmap,screen,conman,gtk2,w3m,ruby-rdoc,Deployment_Guide-de-DE,Deployment_Guide-es-ES,xinetd,device-mapper,openldap,parted,rpm,dbus-python,rpm-libs,python-dmidecode,python-simplejson,authconfig,gjdoc,pycairo,yum-metadata-parser,python-numeric,python-elementtree,sudo,postgresql-jdbc,MySQL-python,cracklib,rhnlib,yum,yum-utils,kernel-xen,python-setuptools,pam_krb5,chkfontpath,pm-utils,rhn-setup,fonts-korean,rhn-check,gpg-pubkey,libgcc,filesystem,cracklib-dicts,tzdata,glibc,chkconfig,mktemp,nspr,audit-libs,expat,tcp_wrappers,atk,libcap,libacl,libjpeg,libICE,libSM,file,libsysfs,perl,libXau,gnutls,libfontenc,unixODBC-libs,pax,perl-DBI,gmp,ethtool,libXdmcp,pkgconfig,libFS,libart_lgpl,checkpolicy,hesiod,kernel-headers,libtermcap,ncurses,grep,readline,sed,freetype,sqlite,diffutils,ttmkfdir,libidn,iptables,bc,libgomp,time,less,bzip2,vim-common,svrcore,groff,iproute,gamin,tcl,crontabs,libX11,libXrender,libXt,libXrandr,libXfixes,libXcursor,libXinerama,libXi,glibc-headers,redhat-logos,bitstream-vera-fonts,libXp,mozldap,jwhois,ftp,udftools,nano,dialog,telnet,unzip,fbset,acl,attr,beecrypt,compat-db,lslk,unix2dos,dosfstools,symlinks,pam_passwdqc,libaio,pam_smb,setarch,man-pages-ko,man-pages-fr,redhat-release-notes,man-pages-it,man-pages-ja,man-pages-cs,words,libgcc,zlib,nspr,nss,ncurses,audit-libs,libX11,libidn,cyrus-sasl-lib,compat-db,beecrypt,libaio,pam_passwdqc,gcc,shadow-utils,e2fsprogs-libs,aspell,psmisc,logrotate,libutempter,e2fsprogs,patch,cryptsetup-luks,lvm2,vim-minimal,tmpwatch,mlocate,nss_db,aspell-pt,aspell-cs,aspell-fr,aspell-it,aspell-es,coreutils,krb5-libs,openldap,fontconfig,postgresql-libs,fipscheck-lib,dbus-libs,mysql,libXft,curl,rsyslog,httpd,vixie-cron,openssh,dmraid,cracklib,which,libsmbclient,net-snmp-libs,ruby-libs,fipscheck,bind-libs,tcsh,dmraid-events,bind-utils,samba-client,nss_ldap,openssh-server,mod_perl,postgresql,vsftpd,dhclient,quota,xterm,postgresql-odbc,prelink,autofs,cyrus-sasl-md5,pam_ccreds,pkinit-nss,pam_krb5,pam_pkcs11,tux,ksh,hicolor-icon-theme,libgcj,ruby-irb,sgml-common,psgml,Deployment_Guide-fr-FR,Deployment_Guide-pt-BR,Deployment_Guide-ru-RU,Deployment_Guide-zh-TW,Deployment_Guide-zh-CN,Deployment_Guide-it-IT,liberation-fonts,libselinux,e2fsprogs-libs,openssl,cyrus-sasl-md5,cyrus-sasl-gssapi,nss_db,newt,rhpl,libxml2-python,m2crypto,gettext,rpm-python,java-1.4.2-gcj-compat,libsemanage,system-config-securitylevel-tui,libuser,usermode,kbd,antlr,gamin-python,python-sqlite,audit-libs-python,python-ethtool,pyOpenSSL,policycoreutils,pygtk2,PyXML,iscsi-initiator-utils,module-init-tools,setools,setuptool,net-snmp,mod_python,subversion,readahead,hwdata,selinux-policy,redhat-lsb,usbutils,subscription-manager,yum-updatesd,yum-updateonboot,selinux-policy-targeted,system-config-securitylevel,rhel-instnum,pam,pam_ccreds,nss_ldap,redhat-lsb,hal,rhnsd,xorg-x11-xfs,yum-rhn-plugin,system-config-network-tui,firstboot-tui,fonts-japanese,rh-amazon-rhui-client,fonts-KOI8-R-100dpi,gpg-pubkey,setup,mailcap,zlib,popt,cyrus-sasl-lib,bzip2-libs,libattr,keyutils-libs,libusb,gdbm,libgcrypt,slang,perl-BSD-Resource,mingetty,libnl,libvolume_id,libtool-ltdl,termcap,info,libsepol,libxml2,procps,cpio,ed,gpm,iptables-ipv6,cpp,iputils,virt-what,libXext,libXmu,jpackage-utils,libXtst,glibc-devel,nash,iptstate,lftp,mgetty,nc,sysfsutils,cyrus-sasl-plain,finger,traceroute,hdparm,setserial,grub,man-pages-es,rootfiles,man-pages,libstdc++,libXau,db4,libXext,libXp,compat-libstdc++-33,cyrus-sasl-plain,device-mapper,apr,kpartx,libselinux-utils,device-mapper-event,aspell-en,lsof,aspell-de,aspell-pl,kernel-xen-devel,openssl,cairo,SysVinit,dbus-glib,at,exim,nscd,gnupg,samba-common,ruby,cups-libs,mtools,webalizer,mod_authz_ldap,rng-utils,dhcpv6-client,mysql-connector-odbc,openldap-clients,tcpdump,cyrus-sasl-gssapi,audit,htmlview,libglade2,pinfo,Deployment_Guide-ja-JP,Deployment_Guide-ko-KR,Deployment_Guide-en-US,logwatch,krb5-libs,curl,python,python-libs,pygobject2,python-iniparse,man,passwd,python-rhsm,ntsysv,mx,libselinux-python,pygtk2-libglade,mkinitrd,postgresql-python,mutt,libhugetlbfs,pciutils,python-urlgrabber,yum-security,yum-fastestmirror,sos,pam_pkcs11,libhugetlbfs,kudzu,rhn-client-tools,fonts-KOI8-R,fonts-chinese,fonts-KOI8-R-75dpi'']'} > - {comment: All required package are included, result: passed} > testcase_12_passwd_group: > - {command: 'grep ''^root:x:0:0:root:/root:/bin/bash'' /etc/passwd', result: passed} > - {command: 'grep ''^nobody:x:99:99:Nobody:/:/sbin/nologin'' /etc/passwd', result: passed} > - {command: 'grep ''^sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin'' > /etc/passwd', result: passed} > - {command: 'grep ''^root:x:0:root'' /etc/group', result: passed} > - {command: 'grep ''^daemon:x:2:root,bin,daemon'' /etc/group', result: passed} > - {command: 'grep ''^bin:x:1:root,bin,daemon'' /etc/group', result: passed} > testcase_13_resize2fs: > - {command: resize2fs -p /dev/sda1 15000M, result: passed} > - {command: df -h | grep 15G, result: passed} > testcase_14_host_details: > - {command: '[ ! -z "`curl http://169.254.169.254/latest/dynamic/instance-identity/signature`" > ]', result: passed} > - {command: 'curl http://169.254.169.254/latest/dynamic/instance-identity/document', > match: '.*({.*}).*', result: passed, value: '[''{\r\n "instanceId" : "i-47e13436",\r\n "billingProducts" > : [ "bp-63a5400a" ],\r\n "version" : "2010-08-31",\r\n "imageId" : "ami-4f53dd26",\r\n "accountId" > : "567014786890",\r\n "instanceType" : "c1.xlarge",\r\n "architecture" > : "x86_64",\r\n "kernelId" : "aki-ecfa0185",\r\n "ramdiskId" : null,\r\n "pendingTime" > : "2013-01-03T10:21:10Z",\r\n "availabilityZone" : "us-east-1d",\r\n "devpayProductCodes" > : null,\r\n "privateIp" : "10.115.43.179",\r\n "region" : "us-east-1"\r\n}'']'} > - {command: '[ "ami-4f53dd26" = "ami-4f53dd26" ]', result: passed} > - {command: '[ "x86_64" = "x86_64" ]', result: passed} > - {command: '[ "us-east-1" = "us-east-1" ]', result: passed} > - {command: '[ "bp-63a5400a" = "bp-63a5400a" ]', result: passed} > testcase_15_rhel_version: > - {command: 'rpm -q --qf ''%{RELEASE} > > '' --whatprovides redhat-release', match: ".*\r\n([0-9]\\.[0-9]\\..*)\r\n\ > .*", result: passed, value: '[''5.9.0.2'']'} > - {command: '[ ''5.9'' = ''5.9'' ]', result: passed} > testcase_16_selinux: > - {command: getenforce, expectation: "\r\nEnforcing\r\n", result: passed} > - {command: grep '^SELINUX=enforcing' /etc/sysconfig/selinux, result: passed} > - {command: grep '^SELINUXTYPE=targeted' /etc/sysconfig/selinux, result: passed} > - {command: setenforce Permissive && getenforce, expectation: "\r\nPermissive\r\ > \n", result: passed} > - {command: setenforce Enforcing && getenforce, expectation: "\r\nEnforcing\r\ > \n", result: passed} > testcase_17_shells: > - {command: grep 'bin/bash$' /etc/shells, result: passed} > - {command: grep 'bin/nologin$' /etc/shells, result: passed} > testcase_18_sshd: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: 'chkconfig --list sshd | grep ''0:off[[:space:]]*1:off[[:space:]]*2:on[[:space:]]*3:on[[:space:]]*4:on[[:space:]]*5:on[[:space:]]*6:off''', > result: passed} > - {command: service sshd status | grep running, result: passed} > - {command: grep 'PasswordAuthentication no' /etc/ssh/sshd_config, result: passed} > testcase_19_rhn_system_id: > - {command: '[ ! -f /etc/sysconfig/rhn/systemid ]', result: passed} > testcase_20_auditd: > - {command: md5sum /etc/audit/auditd.conf | cut -f 1 -d ' ', expectation: 612ddf28c3916530d47ef56a1b1ed1ed, > result: passed} > - {command: md5sum /etc/sysconfig/auditd | cut -f 1 -d ' ', expectation: 123beb3a97a32d96eba4f11509e39da2, > result: passed} > - {command: md5sum /etc/audit/audit.rules | cut -f 1 -d ' ', expectation: f9869e1191838c461f5b9051c78a638d, > result: passed} > - {command: chkconfig --list auditd, expectation: '3:on.*5:on', result: passed} > testcase_21_disk_size_format: > - {command: 'mount | grep ''^/dev'' | awk ''{print $1}''', result: passed, value: /dev/sda1} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $3}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''/'']'} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $5}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''ext3'']'} > - {command: '[ `df -k / | awk ''{ print $2 }'' | tail -n 1` -gt 3937219 ]', > result: passed} > - {command: '[ ext3 = ext3 ]', result: passed} > testcase_22_gpg_keys: > - {command: grep '^gpgcheck=' /etc/yum.repos.d/redhat-*.repo | cut -d\= -f2 > | sort -uf | tr -d ' ', expectation: "\r\n1\r\n", result: passed} > - {command: rpm -qa gpg-pubkey* | wc -l, expectation: "\r\n2\r\n", result: passed} > - {command: rpm -q gpg-pubkey-2fa658e0-45700c69, result: passed} > - {command: rpm -q gpg-pubkey-37017186-45761324, result: passed} > testcase_23_syslog: > - {command: md5sum /etc/rsyslog.conf | cut -f 1 -d ' ', result: passed, value: 15936b6fe4e8fadcea87b54de495f975} > - {command: '([ 15936b6fe4e8fadcea87b54de495f975 = bd4e328df4b59d41979ef7202a05e074 > ] || [ 15936b6fe4e8fadcea87b54de495f975 = 15936b6fe4e8fadcea87b54de495f975 > ])', result: passed} > testcase_24_yum_plugin: > - {command: 'grep ''^enabled[[:space:]]*=[[:space:]]*[^0 ]'' /etc/yum/pluginconf.d/rhnplugin.conf', > result: passed} > testcase_26_verify_rpms: > - {command: rpm -Va --nomtime --nosize --nomd5 | sort -fu | wc -l, result: passed, > value: '3'} > - {command: 'rpm -q --queryformat ''%{RELEASE} > > '' redhat-release | cut -d. -f1,2', result: passed, value: '5.9'} > - {command: '[ 3 = 3 ]', result: passed} > - {command: '[ 5.9 = 5.9 ]', result: passed} > - {command: 'rpm -qa --queryformat ''%{PACKAGER} > > '' | sort -u | grep -v ''Red Hat, Inc.''', result: passed, value: (none)} > testcase_27_yum_repos: > - {command: 'yum repolist -v all | csplit --prefix=repolist_xx - ''%pkgsack > time:%1''', result: passed} > - actual repos: > rhel-debuginfo: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server: {repo-status: enabled} > rhui-us-east-1-rhel-server-source: {repo-status: disabled} > expected repos: > rhel-source: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional-source: {repo-status: disabled} > result: failed > testcase_28_iptables: > - {command: 'iptables -L -n | grep :22 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: 'iptables -L -n | grep RELATED,ESTABLISHED | grep ACCEPT | wc -l', > expectation: "\r\n1\r\n", result: passed} > - {command: 'iptables -L -n | grep :631 | grep ACCEPT | wc -l', expectation: "\r\n\ > 2\r\n", result: passed} > - {command: 'iptables -L -n | grep :5353 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: iptables -L -n | grep -e esp -e ah | grep ACCEPT | wc -l, expectation: "\r\n\ > 2\r\n", result: passed} > - {command: iptables -L -n | grep REJECT | grep all | grep 0.0.0.0/0 | grep > icmp-host-prohibited | wc -l, expectation: "\r\n1\r\n", result: passed} > testcase_29_swap_file: {comment: not applicable for arch = x86_64, result: skipped} > testcase_30_rhn_certificates: > - {command: rpm -ql rh-amazon-rhui-client | egrep '.*\.(pem|crt)', result: passed, > value: "/etc/pki/entitlement/ca.crt\r\n/etc/pki/entitlement/cdn.redhat.com-chain.crt\r\ > \n/etc/pki/entitlement/product/content-rhel5.crt\r\n/etc/pki/entitlement/product/rhui-client-config-server-5.crt"} > - {command: openssl x509 -in /etc/pki/entitlement/ca.crt -noout -dates | grep > notAfter, result: passed, value: 'notAfter=Nov 30 19:46:02 2017 GMT'} > - {comment: '(/etc/pki/entitlement/ca.crt).notAfter=2017-11-30 19:46:02; expecting: > 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/cdn.redhat.com-chain.crt -noout > -dates | grep notAfter, result: passed, value: 'notAfter=Mar 13 11:24:54 > 2030 GMT'} > - {comment: '(/etc/pki/entitlement/cdn.redhat.com-chain.crt).notAfter=2030-03-13 > 11:24:54; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/content-rhel5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:44:41 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/content-rhel5.crt).notAfter=2017-03-31 > 18:44:41; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/rhui-client-config-server-5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:41:55 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/rhui-client-config-server-5.crt).notAfter=2017-03-31 > 18:41:55; expecting: 2017-03-14 00:00:00', result: passed} > testcase_31_subscription_management: {comment: not applicable for version = > 5.9, result: skipped} > testcase_50_yum_package_install: > - {command: yum repolist, result: passed} > - {command: yum search zsh, result: passed} > - {command: yum -y install zsh, result: passed} > - {command: 'rpm -q --queryformat ''%{NAME}'' zsh', result: passed} > - {command: rpm -e zsh, result: passed} > testcase_55_yum_group_install: > - {actual: '1', command: yum -y groupinstall 'Development tools', result: failed} > testcase_60_yum_update: > - {command: yum -y update, result: passed} > testcase_99_reboot: > - {command: "sed -i 's,\\(default\\)=.*$,\x01=0,' /boot/grub/menu.lst", result: passed} > - {command: reboot, result: passed} > stage2: > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''7340032'']'} > - {command: '[ 7340032 -gt 7000000 ]', result: passed} > testcase_25_uname: > - {command: 'uname -r | sed ''s,\.el5xen,.el5,''', result: passed, value: 2.6.18-348.el5} > - {command: 'rpm -q --queryformat ''%{VERSION}-%{RELEASE} > > '' kernel-xen | sort | tail -1', result: passed, value: 2.6.18-348.el5} > - {command: uname -o, result: passed, value: GNU/Linux} > - {command: '[ 2.6.18-348.el5 = 2.6.18-348.el5 ]', result: passed} > - {command: '[ GNU/Linux = ''GNU/Linux'' ]', result: passed} > - {command: grep UPDATEDEFAULT=yes /etc/sysconfig/kernel, result: passed} > - {command: grep DEFAULTKERNEL=kernel /etc/sysconfig/kernel, result: passed} > m1.large: > stage1: > testcase_01_ipv6: > - {command: grep NETWORKING_IPV6=no /etc/sysconfig/network, result: passed} > testcase_02_bash_history: > - {command: '[ ! -f ~/.bash_history ] && echo 0 || cat ~/.bash_history | wc > -l', expectation: "\r\n0\r\n", result: passed} > testcase_03_chkconfig: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: chkconfig --list crond, expectation: '3:on', result: passed} > - {command: chkconfig --list iptables, expectation: '3:on', result: passed} > - {command: chkconfig --list yum-updatesd, expectation: '3:on', result: passed} > testcase_04_cloud_firstboot: > - {command: chkconfig --list rh-cloud-firstboot, expectation: '3:off', result: passed} > - {command: test -f /etc/sysconfig/rh-cloud-firstboot, result: passed} > - {command: cat /etc/sysconfig/rh-cloud-firstboot, expectation: RUN_FIRSTBOOT=NO, > result: passed} > testcase_05_grub: > - {command: test -h /boot/grub/menu.lst, result: passed} > - {command: readlink -e /boot/grub/menu.lst, expectation: /boot/grub/grub.conf, > result: passed} > - {command: 'grep ''(hd0,0)'' /boot/grub/grub.conf', result: passed} > testcase_06_inittab: > - {command: 'grep ''^id:'' /etc/inittab', expectation: 'id:3:initdefault', result: passed} > - {command: 'grep ''^si:'' /etc/inittab', expectation: 'si::sysinit:/etc/rc.d/rc.sysinit', > result: passed} > testcase_07_libc6_xen_conf: > - {command: test -f /etc/ld.so.conf.d/libc6-xen.conf, result: passed} > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''7864320'']'} > - {command: '[ 7864320 -gt 7500000 ]', result: passed} > testcase_09_nameserver: > - {command: dig clock.redhat.com | grep 66.187.233.4, result: passed} > testcase_10_networking: > - {command: grep '^NETWORKING=yes' /etc/sysconfig/network, result: passed} > - {command: grep '^DEVICE=eth0' /etc/sysconfig/network-scripts/ifcfg-eth0, result: passed} > testcase_11_package_set: > - {command: 'rpm -qa --queryformat ''%{NAME},'' && echo', match: ".*\r\n(.*),\r\ > \n.*", result: passed, value: '[''basesystem,glibc-common,glib2,libstdc++,db4,libpng,pcre,elfutils-libelf,libgpg-error,dmidecode,libtiff,zip,perl-String-CRC32,sgpio,mailx,wireless-tools,perl-URI,bash,nss,gawk,binutils,make,libXfont,m4,gzip,hmaccalc,desktop-file-utils,lm_sensors,xorg-x11-filesystem,xorg-x11-font-utils,libXpm,libXaw,redhat-menus,redhat-release,anacron,crash,nss-tools,mtr,cpuspeed,rsync,libicu,dos2unix,ncompress,compat-libstdc++-33,tree,man-pages-de,man-pages-pl,man-pages-ru,glibc,libsepol,keyutils-libs,libXdmcp,readline,libicu,pam_smb,libselinux,findutils,tar,net-tools,device-mapper-multipath,MAKEDEV,parted,vim-enhanced,aspell-ru,pam,util-linux,udev,apr-util,pango,initscripts,mcstrans,dbus,gd,distcache,neon,alsa-lib,mod_ssl,openssh-clients,acpid,irqbalance,openswan,krb5-workstation,stunnel,nmap,screen,conman,gtk2,w3m,ruby-rdoc,Deployment_Guide-de-DE,Deployment_Guide-es-ES,xinetd,device-mapper,openldap,parted,rpm,dbus-python,rpm-libs,python-dmidecode,python-simplejson,authconfig,gjdoc,pycairo,yum-metadata-parser,python-numeric,python-elementtree,sudo,postgresql-jdbc,MySQL-python,cracklib,rhnlib,yum,yum-utils,kernel-xen,python-setuptools,pam_krb5,chkfontpath,pm-utils,rhn-setup,fonts-korean,rhn-check,gpg-pubkey,libgcc,filesystem,cracklib-dicts,tzdata,glibc,chkconfig,mktemp,nspr,audit-libs,expat,tcp_wrappers,atk,libcap,libacl,libjpeg,libICE,libSM,file,libsysfs,perl,libXau,gnutls,libfontenc,unixODBC-libs,pax,perl-DBI,gmp,ethtool,libXdmcp,pkgconfig,libFS,libart_lgpl,checkpolicy,hesiod,kernel-headers,libtermcap,ncurses,grep,readline,sed,freetype,sqlite,diffutils,ttmkfdir,libidn,iptables,bc,libgomp,time,less,bzip2,vim-common,svrcore,groff,iproute,gamin,tcl,crontabs,libX11,libXrender,libXt,libXrandr,libXfixes,libXcursor,libXinerama,libXi,glibc-headers,redhat-logos,bitstream-vera-fonts,libXp,mozldap,jwhois,ftp,udftools,nano,dialog,telnet,unzip,fbset,acl,attr,beecrypt,compat-db,lslk,unix2dos,dosfstools,symlinks,pam_passwdqc,libaio,pam_smb,setarch,man-pages-ko,man-pages-fr,redhat-release-notes,man-pages-it,man-pages-ja,man-pages-cs,words,libgcc,zlib,nspr,nss,ncurses,audit-libs,libX11,libidn,cyrus-sasl-lib,compat-db,beecrypt,libaio,pam_passwdqc,gcc,shadow-utils,e2fsprogs-libs,aspell,psmisc,logrotate,libutempter,e2fsprogs,patch,cryptsetup-luks,lvm2,vim-minimal,tmpwatch,mlocate,nss_db,aspell-pt,aspell-cs,aspell-fr,aspell-it,aspell-es,coreutils,krb5-libs,openldap,fontconfig,postgresql-libs,fipscheck-lib,dbus-libs,mysql,libXft,curl,rsyslog,httpd,vixie-cron,openssh,dmraid,cracklib,which,libsmbclient,net-snmp-libs,ruby-libs,fipscheck,bind-libs,tcsh,dmraid-events,bind-utils,samba-client,nss_ldap,openssh-server,mod_perl,postgresql,vsftpd,dhclient,quota,xterm,postgresql-odbc,prelink,autofs,cyrus-sasl-md5,pam_ccreds,pkinit-nss,pam_krb5,pam_pkcs11,tux,ksh,hicolor-icon-theme,libgcj,ruby-irb,sgml-common,psgml,Deployment_Guide-fr-FR,Deployment_Guide-pt-BR,Deployment_Guide-ru-RU,Deployment_Guide-zh-TW,Deployment_Guide-zh-CN,Deployment_Guide-it-IT,liberation-fonts,libselinux,e2fsprogs-libs,openssl,cyrus-sasl-md5,cyrus-sasl-gssapi,nss_db,newt,rhpl,libxml2-python,m2crypto,gettext,rpm-python,java-1.4.2-gcj-compat,libsemanage,system-config-securitylevel-tui,libuser,usermode,kbd,antlr,gamin-python,python-sqlite,audit-libs-python,python-ethtool,pyOpenSSL,policycoreutils,pygtk2,PyXML,iscsi-initiator-utils,module-init-tools,setools,setuptool,net-snmp,mod_python,subversion,readahead,hwdata,selinux-policy,redhat-lsb,usbutils,subscription-manager,yum-updatesd,yum-updateonboot,selinux-policy-targeted,system-config-securitylevel,rhel-instnum,pam,pam_ccreds,nss_ldap,redhat-lsb,hal,rhnsd,xorg-x11-xfs,yum-rhn-plugin,system-config-network-tui,firstboot-tui,fonts-japanese,rh-amazon-rhui-client,fonts-KOI8-R-100dpi,gpg-pubkey,setup,mailcap,zlib,popt,cyrus-sasl-lib,bzip2-libs,libattr,keyutils-libs,libusb,gdbm,libgcrypt,slang,perl-BSD-Resource,mingetty,libnl,libvolume_id,libtool-ltdl,termcap,info,libsepol,libxml2,procps,cpio,ed,gpm,iptables-ipv6,cpp,iputils,virt-what,libXext,libXmu,jpackage-utils,libXtst,glibc-devel,nash,iptstate,lftp,mgetty,nc,sysfsutils,cyrus-sasl-plain,finger,traceroute,hdparm,setserial,grub,man-pages-es,rootfiles,man-pages,libstdc++,libXau,db4,libXext,libXp,compat-libstdc++-33,cyrus-sasl-plain,device-mapper,apr,kpartx,libselinux-utils,device-mapper-event,aspell-en,lsof,aspell-de,aspell-pl,kernel-xen-devel,openssl,cairo,SysVinit,dbus-glib,at,exim,nscd,gnupg,samba-common,ruby,cups-libs,mtools,webalizer,mod_authz_ldap,rng-utils,dhcpv6-client,mysql-connector-odbc,openldap-clients,tcpdump,cyrus-sasl-gssapi,audit,htmlview,libglade2,pinfo,Deployment_Guide-ja-JP,Deployment_Guide-ko-KR,Deployment_Guide-en-US,logwatch,krb5-libs,curl,python,python-libs,pygobject2,python-iniparse,man,passwd,python-rhsm,ntsysv,mx,libselinux-python,pygtk2-libglade,mkinitrd,postgresql-python,mutt,libhugetlbfs,pciutils,python-urlgrabber,yum-security,yum-fastestmirror,sos,pam_pkcs11,libhugetlbfs,kudzu,rhn-client-tools,fonts-KOI8-R,fonts-chinese,fonts-KOI8-R-75dpi'']'} > - {comment: All required package are included, result: passed} > testcase_12_passwd_group: > - {command: 'grep ''^root:x:0:0:root:/root:/bin/bash'' /etc/passwd', result: passed} > - {command: 'grep ''^nobody:x:99:99:Nobody:/:/sbin/nologin'' /etc/passwd', result: passed} > - {command: 'grep ''^sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin'' > /etc/passwd', result: passed} > - {command: 'grep ''^root:x:0:root'' /etc/group', result: passed} > - {command: 'grep ''^daemon:x:2:root,bin,daemon'' /etc/group', result: passed} > - {command: 'grep ''^bin:x:1:root,bin,daemon'' /etc/group', result: passed} > testcase_13_resize2fs: > - {command: resize2fs -p /dev/sda1 15000M, result: passed} > - {command: df -h | grep 15G, result: passed} > testcase_14_host_details: > - {command: '[ ! -z "`curl http://169.254.169.254/latest/dynamic/instance-identity/signature`" > ]', result: passed} > - {command: 'curl http://169.254.169.254/latest/dynamic/instance-identity/document', > match: '.*({.*}).*', result: passed, value: '[''{\r\n "instanceId" : "i-45e63334",\r\n "billingProducts" > : [ "bp-63a5400a" ],\r\n "version" : "2010-08-31",\r\n "imageId" : "ami-4f53dd26",\r\n "accountId" > : "567014786890",\r\n "instanceType" : "m1.large",\r\n "architecture" > : "x86_64",\r\n "kernelId" : "aki-ecfa0185",\r\n "ramdiskId" : null,\r\n "pendingTime" > : "2013-01-03T10:20:42Z",\r\n "availabilityZone" : "us-east-1d",\r\n "devpayProductCodes" > : null,\r\n "privateIp" : "10.114.249.215",\r\n "region" : "us-east-1"\r\n}'']'} > - {command: '[ "ami-4f53dd26" = "ami-4f53dd26" ]', result: passed} > - {command: '[ "x86_64" = "x86_64" ]', result: passed} > - {command: '[ "us-east-1" = "us-east-1" ]', result: passed} > - {command: '[ "bp-63a5400a" = "bp-63a5400a" ]', result: passed} > testcase_15_rhel_version: > - {command: 'rpm -q --qf ''%{RELEASE} > > '' --whatprovides redhat-release', match: ".*\r\n([0-9]\\.[0-9]\\..*)\r\n\ > .*", result: passed, value: '[''5.9.0.2'']'} > - {command: '[ ''5.9'' = ''5.9'' ]', result: passed} > testcase_16_selinux: > - {command: getenforce, expectation: "\r\nEnforcing\r\n", result: passed} > - {command: grep '^SELINUX=enforcing' /etc/sysconfig/selinux, result: passed} > - {command: grep '^SELINUXTYPE=targeted' /etc/sysconfig/selinux, result: passed} > - {command: setenforce Permissive && getenforce, expectation: "\r\nPermissive\r\ > \n", result: passed} > - {command: setenforce Enforcing && getenforce, expectation: "\r\nEnforcing\r\ > \n", result: passed} > testcase_17_shells: > - {command: grep 'bin/bash$' /etc/shells, result: passed} > - {command: grep 'bin/nologin$' /etc/shells, result: passed} > testcase_18_sshd: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: 'chkconfig --list sshd | grep ''0:off[[:space:]]*1:off[[:space:]]*2:on[[:space:]]*3:on[[:space:]]*4:on[[:space:]]*5:on[[:space:]]*6:off''', > result: passed} > - {command: service sshd status | grep running, result: passed} > - {command: grep 'PasswordAuthentication no' /etc/ssh/sshd_config, result: passed} > testcase_19_rhn_system_id: > - {command: '[ ! -f /etc/sysconfig/rhn/systemid ]', result: passed} > testcase_20_auditd: > - {command: md5sum /etc/audit/auditd.conf | cut -f 1 -d ' ', expectation: 612ddf28c3916530d47ef56a1b1ed1ed, > result: passed} > - {command: md5sum /etc/sysconfig/auditd | cut -f 1 -d ' ', expectation: 123beb3a97a32d96eba4f11509e39da2, > result: passed} > - {command: md5sum /etc/audit/audit.rules | cut -f 1 -d ' ', expectation: f9869e1191838c461f5b9051c78a638d, > result: passed} > - {command: chkconfig --list auditd, expectation: '3:on.*5:on', result: passed} > testcase_21_disk_size_format: > - {command: 'mount | grep ''^/dev'' | awk ''{print $1}''', result: passed, value: /dev/sda1} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $3}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''/'']'} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $5}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''ext3'']'} > - {command: '[ `df -k / | awk ''{ print $2 }'' | tail -n 1` -gt 3937219 ]', > result: passed} > - {command: '[ ext3 = ext3 ]', result: passed} > testcase_22_gpg_keys: > - {command: grep '^gpgcheck=' /etc/yum.repos.d/redhat-*.repo | cut -d\= -f2 > | sort -uf | tr -d ' ', expectation: "\r\n1\r\n", result: passed} > - {command: rpm -qa gpg-pubkey* | wc -l, expectation: "\r\n2\r\n", result: passed} > - {command: rpm -q gpg-pubkey-2fa658e0-45700c69, result: passed} > - {command: rpm -q gpg-pubkey-37017186-45761324, result: passed} > testcase_23_syslog: > - {command: md5sum /etc/rsyslog.conf | cut -f 1 -d ' ', result: passed, value: 15936b6fe4e8fadcea87b54de495f975} > - {command: '([ 15936b6fe4e8fadcea87b54de495f975 = bd4e328df4b59d41979ef7202a05e074 > ] || [ 15936b6fe4e8fadcea87b54de495f975 = 15936b6fe4e8fadcea87b54de495f975 > ])', result: passed} > testcase_24_yum_plugin: > - {command: 'grep ''^enabled[[:space:]]*=[[:space:]]*[^0 ]'' /etc/yum/pluginconf.d/rhnplugin.conf', > result: passed} > testcase_26_verify_rpms: > - {command: rpm -Va --nomtime --nosize --nomd5 | sort -fu | wc -l, result: passed, > value: '3'} > - {command: 'rpm -q --queryformat ''%{RELEASE} > > '' redhat-release | cut -d. -f1,2', result: passed, value: '5.9'} > - {command: '[ 3 = 3 ]', result: passed} > - {command: '[ 5.9 = 5.9 ]', result: passed} > - {command: 'rpm -qa --queryformat ''%{PACKAGER} > > '' | sort -u | grep -v ''Red Hat, Inc.''', result: passed, value: (none)} > testcase_27_yum_repos: > - {command: 'yum repolist -v all | csplit --prefix=repolist_xx - ''%pkgsack > time:%1''', result: passed} > - actual repos: > rhel-debuginfo: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server: {repo-status: enabled} > rhui-us-east-1-rhel-server-source: {repo-status: disabled} > expected repos: > rhel-source: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional-source: {repo-status: disabled} > result: failed > testcase_28_iptables: > - {command: 'iptables -L -n | grep :22 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: 'iptables -L -n | grep RELATED,ESTABLISHED | grep ACCEPT | wc -l', > expectation: "\r\n1\r\n", result: passed} > - {command: 'iptables -L -n | grep :631 | grep ACCEPT | wc -l', expectation: "\r\n\ > 2\r\n", result: passed} > - {command: 'iptables -L -n | grep :5353 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: iptables -L -n | grep -e esp -e ah | grep ACCEPT | wc -l, expectation: "\r\n\ > 2\r\n", result: passed} > - {command: iptables -L -n | grep REJECT | grep all | grep 0.0.0.0/0 | grep > icmp-host-prohibited | wc -l, expectation: "\r\n1\r\n", result: passed} > testcase_29_swap_file: {comment: not applicable for arch = x86_64, result: skipped} > testcase_30_rhn_certificates: > - {command: rpm -ql rh-amazon-rhui-client | egrep '.*\.(pem|crt)', result: passed, > value: "/etc/pki/entitlement/ca.crt\r\n/etc/pki/entitlement/cdn.redhat.com-chain.crt\r\ > \n/etc/pki/entitlement/product/content-rhel5.crt\r\n/etc/pki/entitlement/product/rhui-client-config-server-5.crt"} > - {command: openssl x509 -in /etc/pki/entitlement/ca.crt -noout -dates | grep > notAfter, result: passed, value: 'notAfter=Nov 30 19:46:02 2017 GMT'} > - {comment: '(/etc/pki/entitlement/ca.crt).notAfter=2017-11-30 19:46:02; expecting: > 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/cdn.redhat.com-chain.crt -noout > -dates | grep notAfter, result: passed, value: 'notAfter=Mar 13 11:24:54 > 2030 GMT'} > - {comment: '(/etc/pki/entitlement/cdn.redhat.com-chain.crt).notAfter=2030-03-13 > 11:24:54; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/content-rhel5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:44:41 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/content-rhel5.crt).notAfter=2017-03-31 > 18:44:41; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/rhui-client-config-server-5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:41:55 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/rhui-client-config-server-5.crt).notAfter=2017-03-31 > 18:41:55; expecting: 2017-03-14 00:00:00', result: passed} > testcase_31_subscription_management: {comment: not applicable for version = > 5.9, result: skipped} > testcase_50_yum_package_install: > - {command: yum repolist, result: passed} > - {command: yum search zsh, result: passed} > - {command: yum -y install zsh, result: passed} > - {command: 'rpm -q --queryformat ''%{NAME}'' zsh', result: passed} > - {command: rpm -e zsh, result: passed} > testcase_55_yum_group_install: > - {actual: '1', command: yum -y groupinstall 'Development tools', result: failed} > testcase_60_yum_update: > - {command: yum -y update, result: passed} > testcase_99_reboot: > - {command: "sed -i 's,\\(default\\)=.*$,\x01=0,' /boot/grub/menu.lst", result: passed} > - {command: reboot, result: passed} > stage2: > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''7864320'']'} > - {command: '[ 7864320 -gt 7500000 ]', result: passed} > testcase_25_uname: > - {command: 'uname -r | sed ''s,\.el5xen,.el5,''', result: passed, value: 2.6.18-348.el5} > - {command: 'rpm -q --queryformat ''%{VERSION}-%{RELEASE} > > '' kernel-xen | sort | tail -1', result: passed, value: 2.6.18-348.el5} > - {command: uname -o, result: passed, value: GNU/Linux} > - {command: '[ 2.6.18-348.el5 = 2.6.18-348.el5 ]', result: passed} > - {command: '[ GNU/Linux = ''GNU/Linux'' ]', result: passed} > - {command: grep UPDATEDEFAULT=yes /etc/sysconfig/kernel, result: passed} > - {command: grep DEFAULTKERNEL=kernel /etc/sysconfig/kernel, result: passed} > m1.xlarge: > stage1: > testcase_01_ipv6: > - {command: grep NETWORKING_IPV6=no /etc/sysconfig/network, result: passed} > testcase_02_bash_history: > - {command: '[ ! -f ~/.bash_history ] && echo 0 || cat ~/.bash_history | wc > -l', expectation: "\r\n0\r\n", result: passed} > testcase_03_chkconfig: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: chkconfig --list crond, expectation: '3:on', result: passed} > - {command: chkconfig --list iptables, expectation: '3:on', result: passed} > - {command: chkconfig --list yum-updatesd, expectation: '3:on', result: passed} > testcase_04_cloud_firstboot: > - {command: chkconfig --list rh-cloud-firstboot, expectation: '3:off', result: passed} > - {command: test -f /etc/sysconfig/rh-cloud-firstboot, result: passed} > - {command: cat /etc/sysconfig/rh-cloud-firstboot, expectation: RUN_FIRSTBOOT=NO, > result: passed} > testcase_05_grub: > - {command: test -h /boot/grub/menu.lst, result: passed} > - {command: readlink -e /boot/grub/menu.lst, expectation: /boot/grub/grub.conf, > result: passed} > - {command: 'grep ''(hd0,0)'' /boot/grub/grub.conf', result: passed} > testcase_06_inittab: > - {command: 'grep ''^id:'' /etc/inittab', expectation: 'id:3:initdefault', result: passed} > - {command: 'grep ''^si:'' /etc/inittab', expectation: 'si::sysinit:/etc/rc.d/rc.sysinit', > result: passed} > testcase_07_libc6_xen_conf: > - {command: test -f /etc/ld.so.conf.d/libc6-xen.conf, result: passed} > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''15728640'']'} > - {command: '[ 15728640 -gt 15000000 ]', result: passed} > testcase_09_nameserver: > - {command: dig clock.redhat.com | grep 66.187.233.4, result: passed} > testcase_10_networking: > - {command: grep '^NETWORKING=yes' /etc/sysconfig/network, result: passed} > - {command: grep '^DEVICE=eth0' /etc/sysconfig/network-scripts/ifcfg-eth0, result: passed} > testcase_11_package_set: > - {command: 'rpm -qa --queryformat ''%{NAME},'' && echo', match: ".*\r\n(.*),\r\ > \n.*", result: passed, value: '[''basesystem,glibc-common,glib2,libstdc++,db4,libpng,pcre,elfutils-libelf,libgpg-error,dmidecode,libtiff,zip,perl-String-CRC32,sgpio,mailx,wireless-tools,perl-URI,bash,nss,gawk,binutils,make,libXfont,m4,gzip,hmaccalc,desktop-file-utils,lm_sensors,xorg-x11-filesystem,xorg-x11-font-utils,libXpm,libXaw,redhat-menus,redhat-release,anacron,crash,nss-tools,mtr,cpuspeed,rsync,libicu,dos2unix,ncompress,compat-libstdc++-33,tree,man-pages-de,man-pages-pl,man-pages-ru,glibc,libsepol,keyutils-libs,libXdmcp,readline,libicu,pam_smb,libselinux,findutils,tar,net-tools,device-mapper-multipath,MAKEDEV,parted,vim-enhanced,aspell-ru,pam,util-linux,udev,apr-util,pango,initscripts,mcstrans,dbus,gd,distcache,neon,alsa-lib,mod_ssl,openssh-clients,acpid,irqbalance,openswan,krb5-workstation,stunnel,nmap,screen,conman,gtk2,w3m,ruby-rdoc,Deployment_Guide-de-DE,Deployment_Guide-es-ES,xinetd,device-mapper,openldap,parted,rpm,dbus-python,rpm-libs,python-dmidecode,python-simplejson,authconfig,gjdoc,pycairo,yum-metadata-parser,python-numeric,python-elementtree,sudo,postgresql-jdbc,MySQL-python,cracklib,rhnlib,yum,yum-utils,kernel-xen,python-setuptools,pam_krb5,chkfontpath,pm-utils,rhn-setup,fonts-korean,rhn-check,gpg-pubkey,libgcc,filesystem,cracklib-dicts,tzdata,glibc,chkconfig,mktemp,nspr,audit-libs,expat,tcp_wrappers,atk,libcap,libacl,libjpeg,libICE,libSM,file,libsysfs,perl,libXau,gnutls,libfontenc,unixODBC-libs,pax,perl-DBI,gmp,ethtool,libXdmcp,pkgconfig,libFS,libart_lgpl,checkpolicy,hesiod,kernel-headers,libtermcap,ncurses,grep,readline,sed,freetype,sqlite,diffutils,ttmkfdir,libidn,iptables,bc,libgomp,time,less,bzip2,vim-common,svrcore,groff,iproute,gamin,tcl,crontabs,libX11,libXrender,libXt,libXrandr,libXfixes,libXcursor,libXinerama,libXi,glibc-headers,redhat-logos,bitstream-vera-fonts,libXp,mozldap,jwhois,ftp,udftools,nano,dialog,telnet,unzip,fbset,acl,attr,beecrypt,compat-db,lslk,unix2dos,dosfstools,symlinks,pam_passwdqc,libaio,pam_smb,setarch,man-pages-ko,man-pages-fr,redhat-release-notes,man-pages-it,man-pages-ja,man-pages-cs,words,libgcc,zlib,nspr,nss,ncurses,audit-libs,libX11,libidn,cyrus-sasl-lib,compat-db,beecrypt,libaio,pam_passwdqc,gcc,shadow-utils,e2fsprogs-libs,aspell,psmisc,logrotate,libutempter,e2fsprogs,patch,cryptsetup-luks,lvm2,vim-minimal,tmpwatch,mlocate,nss_db,aspell-pt,aspell-cs,aspell-fr,aspell-it,aspell-es,coreutils,krb5-libs,openldap,fontconfig,postgresql-libs,fipscheck-lib,dbus-libs,mysql,libXft,curl,rsyslog,httpd,vixie-cron,openssh,dmraid,cracklib,which,libsmbclient,net-snmp-libs,ruby-libs,fipscheck,bind-libs,tcsh,dmraid-events,bind-utils,samba-client,nss_ldap,openssh-server,mod_perl,postgresql,vsftpd,dhclient,quota,xterm,postgresql-odbc,prelink,autofs,cyrus-sasl-md5,pam_ccreds,pkinit-nss,pam_krb5,pam_pkcs11,tux,ksh,hicolor-icon-theme,libgcj,ruby-irb,sgml-common,psgml,Deployment_Guide-fr-FR,Deployment_Guide-pt-BR,Deployment_Guide-ru-RU,Deployment_Guide-zh-TW,Deployment_Guide-zh-CN,Deployment_Guide-it-IT,liberation-fonts,libselinux,e2fsprogs-libs,openssl,cyrus-sasl-md5,cyrus-sasl-gssapi,nss_db,newt,rhpl,libxml2-python,m2crypto,gettext,rpm-python,java-1.4.2-gcj-compat,libsemanage,system-config-securitylevel-tui,libuser,usermode,kbd,antlr,gamin-python,python-sqlite,audit-libs-python,python-ethtool,pyOpenSSL,policycoreutils,pygtk2,PyXML,iscsi-initiator-utils,module-init-tools,setools,setuptool,net-snmp,mod_python,subversion,readahead,hwdata,selinux-policy,redhat-lsb,usbutils,subscription-manager,yum-updatesd,yum-updateonboot,selinux-policy-targeted,system-config-securitylevel,rhel-instnum,pam,pam_ccreds,nss_ldap,redhat-lsb,hal,rhnsd,xorg-x11-xfs,yum-rhn-plugin,system-config-network-tui,firstboot-tui,fonts-japanese,rh-amazon-rhui-client,fonts-KOI8-R-100dpi,gpg-pubkey,setup,mailcap,zlib,popt,cyrus-sasl-lib,bzip2-libs,libattr,keyutils-libs,libusb,gdbm,libgcrypt,slang,perl-BSD-Resource,mingetty,libnl,libvolume_id,libtool-ltdl,termcap,info,libsepol,libxml2,procps,cpio,ed,gpm,iptables-ipv6,cpp,iputils,virt-what,libXext,libXmu,jpackage-utils,libXtst,glibc-devel,nash,iptstate,lftp,mgetty,nc,sysfsutils,cyrus-sasl-plain,finger,traceroute,hdparm,setserial,grub,man-pages-es,rootfiles,man-pages,libstdc++,libXau,db4,libXext,libXp,compat-libstdc++-33,cyrus-sasl-plain,device-mapper,apr,kpartx,libselinux-utils,device-mapper-event,aspell-en,lsof,aspell-de,aspell-pl,kernel-xen-devel,openssl,cairo,SysVinit,dbus-glib,at,exim,nscd,gnupg,samba-common,ruby,cups-libs,mtools,webalizer,mod_authz_ldap,rng-utils,dhcpv6-client,mysql-connector-odbc,openldap-clients,tcpdump,cyrus-sasl-gssapi,audit,htmlview,libglade2,pinfo,Deployment_Guide-ja-JP,Deployment_Guide-ko-KR,Deployment_Guide-en-US,logwatch,krb5-libs,curl,python,python-libs,pygobject2,python-iniparse,man,passwd,python-rhsm,ntsysv,mx,libselinux-python,pygtk2-libglade,mkinitrd,postgresql-python,mutt,libhugetlbfs,pciutils,python-urlgrabber,yum-security,yum-fastestmirror,sos,pam_pkcs11,libhugetlbfs,kudzu,rhn-client-tools,fonts-KOI8-R,fonts-chinese,fonts-KOI8-R-75dpi'']'} > - {comment: All required package are included, result: passed} > testcase_12_passwd_group: > - {command: 'grep ''^root:x:0:0:root:/root:/bin/bash'' /etc/passwd', result: passed} > - {command: 'grep ''^nobody:x:99:99:Nobody:/:/sbin/nologin'' /etc/passwd', result: passed} > - {command: 'grep ''^sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin'' > /etc/passwd', result: passed} > - {command: 'grep ''^root:x:0:root'' /etc/group', result: passed} > - {command: 'grep ''^daemon:x:2:root,bin,daemon'' /etc/group', result: passed} > - {command: 'grep ''^bin:x:1:root,bin,daemon'' /etc/group', result: passed} > testcase_13_resize2fs: > - {command: resize2fs -p /dev/sda1 15000M, result: passed} > - {command: df -h | grep 15G, result: passed} > testcase_14_host_details: > - {command: '[ ! -z "`curl http://169.254.169.254/latest/dynamic/instance-identity/signature`" > ]', result: passed} > - {command: 'curl http://169.254.169.254/latest/dynamic/instance-identity/document', > match: '.*({.*}).*', result: passed, value: '[''{\r\n "instanceId" : "i-5be6332a",\r\n "billingProducts" > : [ "bp-63a5400a" ],\r\n "version" : "2010-08-31",\r\n "imageId" : "ami-4f53dd26",\r\n "accountId" > : "567014786890",\r\n "instanceType" : "m1.xlarge",\r\n "architecture" > : "x86_64",\r\n "kernelId" : "aki-ecfa0185",\r\n "ramdiskId" : null,\r\n "pendingTime" > : "2013-01-03T10:20:42Z",\r\n "availabilityZone" : "us-east-1c",\r\n "devpayProductCodes" > : null,\r\n "privateIp" : "10.68.53.225",\r\n "region" : "us-east-1"\r\n}'']'} > - {command: '[ "ami-4f53dd26" = "ami-4f53dd26" ]', result: passed} > - {command: '[ "x86_64" = "x86_64" ]', result: passed} > - {command: '[ "us-east-1" = "us-east-1" ]', result: passed} > - {command: '[ "bp-63a5400a" = "bp-63a5400a" ]', result: passed} > testcase_15_rhel_version: > - {command: 'rpm -q --qf ''%{RELEASE} > > '' --whatprovides redhat-release', match: ".*\r\n([0-9]\\.[0-9]\\..*)\r\n\ > .*", result: passed, value: '[''5.9.0.2'']'} > - {command: '[ ''5.9'' = ''5.9'' ]', result: passed} > testcase_16_selinux: > - {command: getenforce, expectation: "\r\nEnforcing\r\n", result: passed} > - {command: grep '^SELINUX=enforcing' /etc/sysconfig/selinux, result: passed} > - {command: grep '^SELINUXTYPE=targeted' /etc/sysconfig/selinux, result: passed} > - {command: setenforce Permissive && getenforce, expectation: "\r\nPermissive\r\ > \n", result: passed} > - {command: setenforce Enforcing && getenforce, expectation: "\r\nEnforcing\r\ > \n", result: passed} > testcase_17_shells: > - {command: grep 'bin/bash$' /etc/shells, result: passed} > - {command: grep 'bin/nologin$' /etc/shells, result: passed} > testcase_18_sshd: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: 'chkconfig --list sshd | grep ''0:off[[:space:]]*1:off[[:space:]]*2:on[[:space:]]*3:on[[:space:]]*4:on[[:space:]]*5:on[[:space:]]*6:off''', > result: passed} > - {command: service sshd status | grep running, result: passed} > - {command: grep 'PasswordAuthentication no' /etc/ssh/sshd_config, result: passed} > testcase_19_rhn_system_id: > - {command: '[ ! -f /etc/sysconfig/rhn/systemid ]', result: passed} > testcase_20_auditd: > - {command: md5sum /etc/audit/auditd.conf | cut -f 1 -d ' ', expectation: 612ddf28c3916530d47ef56a1b1ed1ed, > result: passed} > - {command: md5sum /etc/sysconfig/auditd | cut -f 1 -d ' ', expectation: 123beb3a97a32d96eba4f11509e39da2, > result: passed} > - {command: md5sum /etc/audit/audit.rules | cut -f 1 -d ' ', expectation: f9869e1191838c461f5b9051c78a638d, > result: passed} > - {command: chkconfig --list auditd, expectation: '3:on.*5:on', result: passed} > testcase_21_disk_size_format: > - {command: 'mount | grep ''^/dev'' | awk ''{print $1}''', result: passed, value: /dev/sda1} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $3}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''/'']'} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $5}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''ext3'']'} > - {command: '[ `df -k / | awk ''{ print $2 }'' | tail -n 1` -gt 3937219 ]', > result: passed} > - {command: '[ ext3 = ext3 ]', result: passed} > testcase_22_gpg_keys: > - {command: grep '^gpgcheck=' /etc/yum.repos.d/redhat-*.repo | cut -d\= -f2 > | sort -uf | tr -d ' ', expectation: "\r\n1\r\n", result: passed} > - {command: rpm -qa gpg-pubkey* | wc -l, expectation: "\r\n2\r\n", result: passed} > - {command: rpm -q gpg-pubkey-2fa658e0-45700c69, result: passed} > - {command: rpm -q gpg-pubkey-37017186-45761324, result: passed} > testcase_23_syslog: > - {command: md5sum /etc/rsyslog.conf | cut -f 1 -d ' ', result: passed, value: 15936b6fe4e8fadcea87b54de495f975} > - {command: '([ 15936b6fe4e8fadcea87b54de495f975 = bd4e328df4b59d41979ef7202a05e074 > ] || [ 15936b6fe4e8fadcea87b54de495f975 = 15936b6fe4e8fadcea87b54de495f975 > ])', result: passed} > testcase_24_yum_plugin: > - {command: 'grep ''^enabled[[:space:]]*=[[:space:]]*[^0 ]'' /etc/yum/pluginconf.d/rhnplugin.conf', > result: passed} > testcase_26_verify_rpms: > - {command: rpm -Va --nomtime --nosize --nomd5 | sort -fu | wc -l, result: passed, > value: '3'} > - {command: 'rpm -q --queryformat ''%{RELEASE} > > '' redhat-release | cut -d. -f1,2', result: passed, value: '5.9'} > - {command: '[ 3 = 3 ]', result: passed} > - {command: '[ 5.9 = 5.9 ]', result: passed} > - {command: 'rpm -qa --queryformat ''%{PACKAGER} > > '' | sort -u | grep -v ''Red Hat, Inc.''', result: passed, value: (none)} > testcase_27_yum_repos: > - {command: 'yum repolist -v all | csplit --prefix=repolist_xx - ''%pkgsack > time:%1''', result: passed} > - actual repos: > rhel-debuginfo: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server: {repo-status: enabled} > rhui-us-east-1-rhel-server-source: {repo-status: disabled} > expected repos: > rhel-source: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional-source: {repo-status: disabled} > result: failed > testcase_28_iptables: > - {command: 'iptables -L -n | grep :22 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: 'iptables -L -n | grep RELATED,ESTABLISHED | grep ACCEPT | wc -l', > expectation: "\r\n1\r\n", result: passed} > - {command: 'iptables -L -n | grep :631 | grep ACCEPT | wc -l', expectation: "\r\n\ > 2\r\n", result: passed} > - {command: 'iptables -L -n | grep :5353 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: iptables -L -n | grep -e esp -e ah | grep ACCEPT | wc -l, expectation: "\r\n\ > 2\r\n", result: passed} > - {command: iptables -L -n | grep REJECT | grep all | grep 0.0.0.0/0 | grep > icmp-host-prohibited | wc -l, expectation: "\r\n1\r\n", result: passed} > testcase_29_swap_file: {comment: not applicable for arch = x86_64, result: skipped} > testcase_30_rhn_certificates: > - {command: rpm -ql rh-amazon-rhui-client | egrep '.*\.(pem|crt)', result: passed, > value: "/etc/pki/entitlement/ca.crt\r\n/etc/pki/entitlement/cdn.redhat.com-chain.crt\r\ > \n/etc/pki/entitlement/product/content-rhel5.crt\r\n/etc/pki/entitlement/product/rhui-client-config-server-5.crt"} > - {command: openssl x509 -in /etc/pki/entitlement/ca.crt -noout -dates | grep > notAfter, result: passed, value: 'notAfter=Nov 30 19:46:02 2017 GMT'} > - {comment: '(/etc/pki/entitlement/ca.crt).notAfter=2017-11-30 19:46:02; expecting: > 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/cdn.redhat.com-chain.crt -noout > -dates | grep notAfter, result: passed, value: 'notAfter=Mar 13 11:24:54 > 2030 GMT'} > - {comment: '(/etc/pki/entitlement/cdn.redhat.com-chain.crt).notAfter=2030-03-13 > 11:24:54; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/content-rhel5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:44:41 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/content-rhel5.crt).notAfter=2017-03-31 > 18:44:41; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/rhui-client-config-server-5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:41:55 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/rhui-client-config-server-5.crt).notAfter=2017-03-31 > 18:41:55; expecting: 2017-03-14 00:00:00', result: passed} > testcase_31_subscription_management: {comment: not applicable for version = > 5.9, result: skipped} > testcase_50_yum_package_install: > - {command: yum repolist, result: passed} > - {command: yum search zsh, result: passed} > - {command: yum -y install zsh, result: passed} > - {command: 'rpm -q --queryformat ''%{NAME}'' zsh', result: passed} > - {command: rpm -e zsh, result: passed} > testcase_55_yum_group_install: > - {actual: '1', command: yum -y groupinstall 'Development tools', result: failed} > testcase_60_yum_update: > - {command: yum -y update, result: passed} > testcase_99_reboot: > - {command: "sed -i 's,\\(default\\)=.*$,\x01=0,' /boot/grub/menu.lst", result: passed} > - {actual: None, command: reboot, result: failed} > stage2: > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''15728640'']'} > - {command: '[ 15728640 -gt 15000000 ]', result: passed} > testcase_25_uname: > - {command: 'uname -r | sed ''s,\.el5xen,.el5,''', result: passed, value: 2.6.18-348.el5} > - {command: 'rpm -q --queryformat ''%{VERSION}-%{RELEASE} > > '' kernel-xen | sort | tail -1', result: passed, value: 2.6.18-348.el5} > - {command: uname -o, result: passed, value: GNU/Linux} > - {command: '[ 2.6.18-348.el5 = 2.6.18-348.el5 ]', result: passed} > - {command: '[ GNU/Linux = ''GNU/Linux'' ]', result: passed} > - {command: grep UPDATEDEFAULT=yes /etc/sysconfig/kernel, result: passed} > - {command: grep DEFAULTKERNEL=kernel /etc/sysconfig/kernel, result: passed} > m2.2xlarge: > stage1: > testcase_01_ipv6: > - {command: grep NETWORKING_IPV6=no /etc/sysconfig/network, result: passed} > testcase_02_bash_history: > - {command: '[ ! -f ~/.bash_history ] && echo 0 || cat ~/.bash_history | wc > -l', expectation: "\r\n0\r\n", result: passed} > testcase_03_chkconfig: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: chkconfig --list crond, expectation: '3:on', result: passed} > - {command: chkconfig --list iptables, expectation: '3:on', result: passed} > - {command: chkconfig --list yum-updatesd, expectation: '3:on', result: passed} > testcase_04_cloud_firstboot: > - {command: chkconfig --list rh-cloud-firstboot, expectation: '3:off', result: passed} > - {command: test -f /etc/sysconfig/rh-cloud-firstboot, result: passed} > - {command: cat /etc/sysconfig/rh-cloud-firstboot, expectation: RUN_FIRSTBOOT=NO, > result: passed} > testcase_05_grub: > - {command: test -h /boot/grub/menu.lst, result: passed} > - {command: readlink -e /boot/grub/menu.lst, expectation: /boot/grub/grub.conf, > result: passed} > - {command: 'grep ''(hd0,0)'' /boot/grub/grub.conf', result: passed} > testcase_06_inittab: > - {command: 'grep ''^id:'' /etc/inittab', expectation: 'id:3:initdefault', result: passed} > - {command: 'grep ''^si:'' /etc/inittab', expectation: 'si::sysinit:/etc/rc.d/rc.sysinit', > result: passed} > testcase_07_libc6_xen_conf: > - {command: test -f /etc/ld.so.conf.d/libc6-xen.conf, result: passed} > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''35840000'']'} > - {command: '[ 35840000 -gt 34200000 ]', result: passed} > testcase_09_nameserver: > - {command: dig clock.redhat.com | grep 66.187.233.4, result: passed} > testcase_10_networking: > - {command: grep '^NETWORKING=yes' /etc/sysconfig/network, result: passed} > - {command: grep '^DEVICE=eth0' /etc/sysconfig/network-scripts/ifcfg-eth0, result: passed} > testcase_11_package_set: > - {command: 'rpm -qa --queryformat ''%{NAME},'' && echo', match: ".*\r\n(.*),\r\ > \n.*", result: passed, value: '[''basesystem,glibc-common,glib2,libstdc++,db4,libpng,pcre,elfutils-libelf,libgpg-error,dmidecode,libtiff,zip,perl-String-CRC32,sgpio,mailx,wireless-tools,perl-URI,bash,nss,gawk,binutils,make,libXfont,m4,gzip,hmaccalc,desktop-file-utils,lm_sensors,xorg-x11-filesystem,xorg-x11-font-utils,libXpm,libXaw,redhat-menus,redhat-release,anacron,crash,nss-tools,mtr,cpuspeed,rsync,libicu,dos2unix,ncompress,compat-libstdc++-33,tree,man-pages-de,man-pages-pl,man-pages-ru,glibc,libsepol,keyutils-libs,libXdmcp,readline,libicu,pam_smb,libselinux,findutils,tar,net-tools,device-mapper-multipath,MAKEDEV,parted,vim-enhanced,aspell-ru,pam,util-linux,udev,apr-util,pango,initscripts,mcstrans,dbus,gd,distcache,neon,alsa-lib,mod_ssl,openssh-clients,acpid,irqbalance,openswan,krb5-workstation,stunnel,nmap,screen,conman,gtk2,w3m,ruby-rdoc,Deployment_Guide-de-DE,Deployment_Guide-es-ES,xinetd,device-mapper,openldap,parted,rpm,dbus-python,rpm-libs,python-dmidecode,python-simplejson,authconfig,gjdoc,pycairo,yum-metadata-parser,python-numeric,python-elementtree,sudo,postgresql-jdbc,MySQL-python,cracklib,rhnlib,yum,yum-utils,kernel-xen,python-setuptools,pam_krb5,chkfontpath,pm-utils,rhn-setup,fonts-korean,rhn-check,gpg-pubkey,libgcc,filesystem,cracklib-dicts,tzdata,glibc,chkconfig,mktemp,nspr,audit-libs,expat,tcp_wrappers,atk,libcap,libacl,libjpeg,libICE,libSM,file,libsysfs,perl,libXau,gnutls,libfontenc,unixODBC-libs,pax,perl-DBI,gmp,ethtool,libXdmcp,pkgconfig,libFS,libart_lgpl,checkpolicy,hesiod,kernel-headers,libtermcap,ncurses,grep,readline,sed,freetype,sqlite,diffutils,ttmkfdir,libidn,iptables,bc,libgomp,time,less,bzip2,vim-common,svrcore,groff,iproute,gamin,tcl,crontabs,libX11,libXrender,libXt,libXrandr,libXfixes,libXcursor,libXinerama,libXi,glibc-headers,redhat-logos,bitstream-vera-fonts,libXp,mozldap,jwhois,ftp,udftools,nano,dialog,telnet,unzip,fbset,acl,attr,beecrypt,compat-db,lslk,unix2dos,dosfstools,symlinks,pam_passwdqc,libaio,pam_smb,setarch,man-pages-ko,man-pages-fr,redhat-release-notes,man-pages-it,man-pages-ja,man-pages-cs,words,libgcc,zlib,nspr,nss,ncurses,audit-libs,libX11,libidn,cyrus-sasl-lib,compat-db,beecrypt,libaio,pam_passwdqc,gcc,shadow-utils,e2fsprogs-libs,aspell,psmisc,logrotate,libutempter,e2fsprogs,patch,cryptsetup-luks,lvm2,vim-minimal,tmpwatch,mlocate,nss_db,aspell-pt,aspell-cs,aspell-fr,aspell-it,aspell-es,coreutils,krb5-libs,openldap,fontconfig,postgresql-libs,fipscheck-lib,dbus-libs,mysql,libXft,curl,rsyslog,httpd,vixie-cron,openssh,dmraid,cracklib,which,libsmbclient,net-snmp-libs,ruby-libs,fipscheck,bind-libs,tcsh,dmraid-events,bind-utils,samba-client,nss_ldap,openssh-server,mod_perl,postgresql,vsftpd,dhclient,quota,xterm,postgresql-odbc,prelink,autofs,cyrus-sasl-md5,pam_ccreds,pkinit-nss,pam_krb5,pam_pkcs11,tux,ksh,hicolor-icon-theme,libgcj,ruby-irb,sgml-common,psgml,Deployment_Guide-fr-FR,Deployment_Guide-pt-BR,Deployment_Guide-ru-RU,Deployment_Guide-zh-TW,Deployment_Guide-zh-CN,Deployment_Guide-it-IT,liberation-fonts,libselinux,e2fsprogs-libs,openssl,cyrus-sasl-md5,cyrus-sasl-gssapi,nss_db,newt,rhpl,libxml2-python,m2crypto,gettext,rpm-python,java-1.4.2-gcj-compat,libsemanage,system-config-securitylevel-tui,libuser,usermode,kbd,antlr,gamin-python,python-sqlite,audit-libs-python,python-ethtool,pyOpenSSL,policycoreutils,pygtk2,PyXML,iscsi-initiator-utils,module-init-tools,setools,setuptool,net-snmp,mod_python,subversion,readahead,hwdata,selinux-policy,redhat-lsb,usbutils,subscription-manager,yum-updatesd,yum-updateonboot,selinux-policy-targeted,system-config-securitylevel,rhel-instnum,pam,pam_ccreds,nss_ldap,redhat-lsb,hal,rhnsd,xorg-x11-xfs,yum-rhn-plugin,system-config-network-tui,firstboot-tui,fonts-japanese,rh-amazon-rhui-client,fonts-KOI8-R-100dpi,gpg-pubkey,setup,mailcap,zlib,popt,cyrus-sasl-lib,bzip2-libs,libattr,keyutils-libs,libusb,gdbm,libgcrypt,slang,perl-BSD-Resource,mingetty,libnl,libvolume_id,libtool-ltdl,termcap,info,libsepol,libxml2,procps,cpio,ed,gpm,iptables-ipv6,cpp,iputils,virt-what,libXext,libXmu,jpackage-utils,libXtst,glibc-devel,nash,iptstate,lftp,mgetty,nc,sysfsutils,cyrus-sasl-plain,finger,traceroute,hdparm,setserial,grub,man-pages-es,rootfiles,man-pages,libstdc++,libXau,db4,libXext,libXp,compat-libstdc++-33,cyrus-sasl-plain,device-mapper,apr,kpartx,libselinux-utils,device-mapper-event,aspell-en,lsof,aspell-de,aspell-pl,kernel-xen-devel,openssl,cairo,SysVinit,dbus-glib,at,exim,nscd,gnupg,samba-common,ruby,cups-libs,mtools,webalizer,mod_authz_ldap,rng-utils,dhcpv6-client,mysql-connector-odbc,openldap-clients,tcpdump,cyrus-sasl-gssapi,audit,htmlview,libglade2,pinfo,Deployment_Guide-ja-JP,Deployment_Guide-ko-KR,Deployment_Guide-en-US,logwatch,krb5-libs,curl,python,python-libs,pygobject2,python-iniparse,man,passwd,python-rhsm,ntsysv,mx,libselinux-python,pygtk2-libglade,mkinitrd,postgresql-python,mutt,libhugetlbfs,pciutils,python-urlgrabber,yum-security,yum-fastestmirror,sos,pam_pkcs11,libhugetlbfs,kudzu,rhn-client-tools,fonts-KOI8-R,fonts-chinese,fonts-KOI8-R-75dpi'']'} > - {comment: All required package are included, result: passed} > testcase_12_passwd_group: > - {command: 'grep ''^root:x:0:0:root:/root:/bin/bash'' /etc/passwd', result: passed} > - {command: 'grep ''^nobody:x:99:99:Nobody:/:/sbin/nologin'' /etc/passwd', result: passed} > - {command: 'grep ''^sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin'' > /etc/passwd', result: passed} > - {command: 'grep ''^root:x:0:root'' /etc/group', result: passed} > - {command: 'grep ''^daemon:x:2:root,bin,daemon'' /etc/group', result: passed} > - {command: 'grep ''^bin:x:1:root,bin,daemon'' /etc/group', result: passed} > testcase_13_resize2fs: > - {command: resize2fs -p /dev/sda1 15000M, result: passed} > - {command: df -h | grep 15G, result: passed} > testcase_14_host_details: > - {command: '[ ! -z "`curl http://169.254.169.254/latest/dynamic/instance-identity/signature`" > ]', result: passed} > - {command: 'curl http://169.254.169.254/latest/dynamic/instance-identity/document', > match: '.*({.*}).*', result: passed, value: '[''{\r\n "instanceId" : "i-6be1341a",\r\n "billingProducts" > : [ "bp-63a5400a" ],\r\n "version" : "2010-08-31",\r\n "imageId" : "ami-4f53dd26",\r\n "accountId" > : "567014786890",\r\n "instanceType" : "m2.2xlarge",\r\n "architecture" > : "x86_64",\r\n "kernelId" : "aki-ecfa0185",\r\n "ramdiskId" : null,\r\n "pendingTime" > : "2013-01-03T10:21:06Z",\r\n "availabilityZone" : "us-east-1c",\r\n "devpayProductCodes" > : null,\r\n "privateIp" : "10.142.136.85",\r\n "region" : "us-east-1"\r\n}'']'} > - {command: '[ "ami-4f53dd26" = "ami-4f53dd26" ]', result: passed} > - {command: '[ "x86_64" = "x86_64" ]', result: passed} > - {command: '[ "us-east-1" = "us-east-1" ]', result: passed} > - {command: '[ "bp-63a5400a" = "bp-63a5400a" ]', result: passed} > testcase_15_rhel_version: > - {command: 'rpm -q --qf ''%{RELEASE} > > '' --whatprovides redhat-release', match: ".*\r\n([0-9]\\.[0-9]\\..*)\r\n\ > .*", result: passed, value: '[''5.9.0.2'']'} > - {command: '[ ''5.9'' = ''5.9'' ]', result: passed} > testcase_16_selinux: > - {command: getenforce, expectation: "\r\nEnforcing\r\n", result: passed} > - {command: grep '^SELINUX=enforcing' /etc/sysconfig/selinux, result: passed} > - {command: grep '^SELINUXTYPE=targeted' /etc/sysconfig/selinux, result: passed} > - {command: setenforce Permissive && getenforce, expectation: "\r\nPermissive\r\ > \n", result: passed} > - {command: setenforce Enforcing && getenforce, expectation: "\r\nEnforcing\r\ > \n", result: passed} > testcase_17_shells: > - {command: grep 'bin/bash$' /etc/shells, result: passed} > - {command: grep 'bin/nologin$' /etc/shells, result: passed} > testcase_18_sshd: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: 'chkconfig --list sshd | grep ''0:off[[:space:]]*1:off[[:space:]]*2:on[[:space:]]*3:on[[:space:]]*4:on[[:space:]]*5:on[[:space:]]*6:off''', > result: passed} > - {command: service sshd status | grep running, result: passed} > - {command: grep 'PasswordAuthentication no' /etc/ssh/sshd_config, result: passed} > testcase_19_rhn_system_id: > - {command: '[ ! -f /etc/sysconfig/rhn/systemid ]', result: passed} > testcase_20_auditd: > - {command: md5sum /etc/audit/auditd.conf | cut -f 1 -d ' ', expectation: 612ddf28c3916530d47ef56a1b1ed1ed, > result: passed} > - {command: md5sum /etc/sysconfig/auditd | cut -f 1 -d ' ', expectation: 123beb3a97a32d96eba4f11509e39da2, > result: passed} > - {command: md5sum /etc/audit/audit.rules | cut -f 1 -d ' ', expectation: f9869e1191838c461f5b9051c78a638d, > result: passed} > - {command: chkconfig --list auditd, expectation: '3:on.*5:on', result: passed} > testcase_21_disk_size_format: > - {command: 'mount | grep ''^/dev'' | awk ''{print $1}''', result: passed, value: /dev/sda1} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $3}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''/'']'} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $5}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''ext3'']'} > - {command: '[ `df -k / | awk ''{ print $2 }'' | tail -n 1` -gt 3937219 ]', > result: passed} > - {command: '[ ext3 = ext3 ]', result: passed} > testcase_22_gpg_keys: > - {command: grep '^gpgcheck=' /etc/yum.repos.d/redhat-*.repo | cut -d\= -f2 > | sort -uf | tr -d ' ', expectation: "\r\n1\r\n", result: passed} > - {command: rpm -qa gpg-pubkey* | wc -l, expectation: "\r\n2\r\n", result: passed} > - {command: rpm -q gpg-pubkey-2fa658e0-45700c69, result: passed} > - {command: rpm -q gpg-pubkey-37017186-45761324, result: passed} > testcase_23_syslog: > - {command: md5sum /etc/rsyslog.conf | cut -f 1 -d ' ', result: passed, value: 15936b6fe4e8fadcea87b54de495f975} > - {command: '([ 15936b6fe4e8fadcea87b54de495f975 = bd4e328df4b59d41979ef7202a05e074 > ] || [ 15936b6fe4e8fadcea87b54de495f975 = 15936b6fe4e8fadcea87b54de495f975 > ])', result: passed} > testcase_24_yum_plugin: > - {command: 'grep ''^enabled[[:space:]]*=[[:space:]]*[^0 ]'' /etc/yum/pluginconf.d/rhnplugin.conf', > result: passed} > testcase_26_verify_rpms: > - {command: rpm -Va --nomtime --nosize --nomd5 | sort -fu | wc -l, result: passed, > value: '3'} > - {command: 'rpm -q --queryformat ''%{RELEASE} > > '' redhat-release | cut -d. -f1,2', result: passed, value: '5.9'} > - {command: '[ 3 = 3 ]', result: passed} > - {command: '[ 5.9 = 5.9 ]', result: passed} > - {command: 'rpm -qa --queryformat ''%{PACKAGER} > > '' | sort -u | grep -v ''Red Hat, Inc.''', result: passed, value: (none)} > testcase_27_yum_repos: > - {command: 'yum repolist -v all | csplit --prefix=repolist_xx - ''%pkgsack > time:%1''', result: passed} > - actual repos: > rhel-debuginfo: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server: {repo-status: enabled} > rhui-us-east-1-rhel-server-source: {repo-status: disabled} > expected repos: > rhel-source: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional-source: {repo-status: disabled} > result: failed > testcase_28_iptables: > - {command: 'iptables -L -n | grep :22 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: 'iptables -L -n | grep RELATED,ESTABLISHED | grep ACCEPT | wc -l', > expectation: "\r\n1\r\n", result: passed} > - {command: 'iptables -L -n | grep :631 | grep ACCEPT | wc -l', expectation: "\r\n\ > 2\r\n", result: passed} > - {command: 'iptables -L -n | grep :5353 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: iptables -L -n | grep -e esp -e ah | grep ACCEPT | wc -l, expectation: "\r\n\ > 2\r\n", result: passed} > - {command: iptables -L -n | grep REJECT | grep all | grep 0.0.0.0/0 | grep > icmp-host-prohibited | wc -l, expectation: "\r\n1\r\n", result: passed} > testcase_29_swap_file: {comment: not applicable for arch = x86_64, result: skipped} > testcase_30_rhn_certificates: > - {command: rpm -ql rh-amazon-rhui-client | egrep '.*\.(pem|crt)', result: passed, > value: "/etc/pki/entitlement/ca.crt\r\n/etc/pki/entitlement/cdn.redhat.com-chain.crt\r\ > \n/etc/pki/entitlement/product/content-rhel5.crt\r\n/etc/pki/entitlement/product/rhui-client-config-server-5.crt"} > - {command: openssl x509 -in /etc/pki/entitlement/ca.crt -noout -dates | grep > notAfter, result: passed, value: 'notAfter=Nov 30 19:46:02 2017 GMT'} > - {comment: '(/etc/pki/entitlement/ca.crt).notAfter=2017-11-30 19:46:02; expecting: > 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/cdn.redhat.com-chain.crt -noout > -dates | grep notAfter, result: passed, value: 'notAfter=Mar 13 11:24:54 > 2030 GMT'} > - {comment: '(/etc/pki/entitlement/cdn.redhat.com-chain.crt).notAfter=2030-03-13 > 11:24:54; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/content-rhel5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:44:41 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/content-rhel5.crt).notAfter=2017-03-31 > 18:44:41; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/rhui-client-config-server-5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:41:55 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/rhui-client-config-server-5.crt).notAfter=2017-03-31 > 18:41:55; expecting: 2017-03-14 00:00:00', result: passed} > testcase_31_subscription_management: {comment: not applicable for version = > 5.9, result: skipped} > testcase_50_yum_package_install: > - {command: yum repolist, result: passed} > - {command: yum search zsh, result: passed} > - {command: yum -y install zsh, result: passed} > - {command: 'rpm -q --queryformat ''%{NAME}'' zsh', result: passed} > - {command: rpm -e zsh, result: passed} > testcase_55_yum_group_install: > - {actual: '1', command: yum -y groupinstall 'Development tools', result: failed} > testcase_60_yum_update: > - {command: yum -y update, result: passed} > testcase_99_reboot: > - {command: "sed -i 's,\\(default\\)=.*$,\x01=0,' /boot/grub/menu.lst", result: passed} > - {command: reboot, result: passed} > stage2: > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''35840000'']'} > - {command: '[ 35840000 -gt 34200000 ]', result: passed} > testcase_25_uname: > - {command: 'uname -r | sed ''s,\.el5xen,.el5,''', result: passed, value: 2.6.18-348.el5} > - {command: 'rpm -q --queryformat ''%{VERSION}-%{RELEASE} > > '' kernel-xen | sort | tail -1', result: passed, value: 2.6.18-348.el5} > - {command: uname -o, result: passed, value: GNU/Linux} > - {command: '[ 2.6.18-348.el5 = 2.6.18-348.el5 ]', result: passed} > - {command: '[ GNU/Linux = ''GNU/Linux'' ]', result: passed} > - {command: grep UPDATEDEFAULT=yes /etc/sysconfig/kernel, result: passed} > - {command: grep DEFAULTKERNEL=kernel /etc/sysconfig/kernel, result: passed} > m2.4xlarge: > stage1: > testcase_01_ipv6: > - {command: grep NETWORKING_IPV6=no /etc/sysconfig/network, result: passed} > testcase_02_bash_history: > - {command: '[ ! -f ~/.bash_history ] && echo 0 || cat ~/.bash_history | wc > -l', expectation: "\r\n0\r\n", result: passed} > testcase_03_chkconfig: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: chkconfig --list crond, expectation: '3:on', result: passed} > - {command: chkconfig --list iptables, expectation: '3:on', result: passed} > - {command: chkconfig --list yum-updatesd, expectation: '3:on', result: passed} > testcase_04_cloud_firstboot: > - {command: chkconfig --list rh-cloud-firstboot, expectation: '3:off', result: passed} > - {command: test -f /etc/sysconfig/rh-cloud-firstboot, result: passed} > - {command: cat /etc/sysconfig/rh-cloud-firstboot, expectation: RUN_FIRSTBOOT=NO, > result: passed} > testcase_05_grub: > - {command: test -h /boot/grub/menu.lst, result: passed} > - {command: readlink -e /boot/grub/menu.lst, expectation: /boot/grub/grub.conf, > result: passed} > - {command: 'grep ''(hd0,0)'' /boot/grub/grub.conf', result: passed} > testcase_06_inittab: > - {command: 'grep ''^id:'' /etc/inittab', expectation: 'id:3:initdefault', result: passed} > - {command: 'grep ''^si:'' /etc/inittab', expectation: 'si::sysinit:/etc/rc.d/rc.sysinit', > result: passed} > testcase_07_libc6_xen_conf: > - {command: test -f /etc/ld.so.conf.d/libc6-xen.conf, result: passed} > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''71680000'']'} > - {command: '[ 71680000 -gt 68400000 ]', result: passed} > testcase_09_nameserver: > - {command: dig clock.redhat.com | grep 66.187.233.4, result: passed} > testcase_10_networking: > - {command: grep '^NETWORKING=yes' /etc/sysconfig/network, result: passed} > - {command: grep '^DEVICE=eth0' /etc/sysconfig/network-scripts/ifcfg-eth0, result: passed} > testcase_11_package_set: > - {command: 'rpm -qa --queryformat ''%{NAME},'' && echo', match: ".*\r\n(.*),\r\ > \n.*", result: passed, value: '[''basesystem,glibc-common,glib2,libstdc++,db4,libpng,pcre,elfutils-libelf,libgpg-error,dmidecode,libtiff,zip,perl-String-CRC32,sgpio,mailx,wireless-tools,perl-URI,bash,nss,gawk,binutils,make,libXfont,m4,gzip,hmaccalc,desktop-file-utils,lm_sensors,xorg-x11-filesystem,xorg-x11-font-utils,libXpm,libXaw,redhat-menus,redhat-release,anacron,crash,nss-tools,mtr,cpuspeed,rsync,libicu,dos2unix,ncompress,compat-libstdc++-33,tree,man-pages-de,man-pages-pl,man-pages-ru,glibc,libsepol,keyutils-libs,libXdmcp,readline,libicu,pam_smb,libselinux,findutils,tar,net-tools,device-mapper-multipath,MAKEDEV,parted,vim-enhanced,aspell-ru,pam,util-linux,udev,apr-util,pango,initscripts,mcstrans,dbus,gd,distcache,neon,alsa-lib,mod_ssl,openssh-clients,acpid,irqbalance,openswan,krb5-workstation,stunnel,nmap,screen,conman,gtk2,w3m,ruby-rdoc,Deployment_Guide-de-DE,Deployment_Guide-es-ES,xinetd,device-mapper,openldap,parted,rpm,dbus-python,rpm-libs,python-dmidecode,python-simplejson,authconfig,gjdoc,pycairo,yum-metadata-parser,python-numeric,python-elementtree,sudo,postgresql-jdbc,MySQL-python,cracklib,rhnlib,yum,yum-utils,kernel-xen,python-setuptools,pam_krb5,chkfontpath,pm-utils,rhn-setup,fonts-korean,rhn-check,gpg-pubkey,libgcc,filesystem,cracklib-dicts,tzdata,glibc,chkconfig,mktemp,nspr,audit-libs,expat,tcp_wrappers,atk,libcap,libacl,libjpeg,libICE,libSM,file,libsysfs,perl,libXau,gnutls,libfontenc,unixODBC-libs,pax,perl-DBI,gmp,ethtool,libXdmcp,pkgconfig,libFS,libart_lgpl,checkpolicy,hesiod,kernel-headers,libtermcap,ncurses,grep,readline,sed,freetype,sqlite,diffutils,ttmkfdir,libidn,iptables,bc,libgomp,time,less,bzip2,vim-common,svrcore,groff,iproute,gamin,tcl,crontabs,libX11,libXrender,libXt,libXrandr,libXfixes,libXcursor,libXinerama,libXi,glibc-headers,redhat-logos,bitstream-vera-fonts,libXp,mozldap,jwhois,ftp,udftools,nano,dialog,telnet,unzip,fbset,acl,attr,beecrypt,compat-db,lslk,unix2dos,dosfstools,symlinks,pam_passwdqc,libaio,pam_smb,setarch,man-pages-ko,man-pages-fr,redhat-release-notes,man-pages-it,man-pages-ja,man-pages-cs,words,libgcc,zlib,nspr,nss,ncurses,audit-libs,libX11,libidn,cyrus-sasl-lib,compat-db,beecrypt,libaio,pam_passwdqc,gcc,shadow-utils,e2fsprogs-libs,aspell,psmisc,logrotate,libutempter,e2fsprogs,patch,cryptsetup-luks,lvm2,vim-minimal,tmpwatch,mlocate,nss_db,aspell-pt,aspell-cs,aspell-fr,aspell-it,aspell-es,coreutils,krb5-libs,openldap,fontconfig,postgresql-libs,fipscheck-lib,dbus-libs,mysql,libXft,curl,rsyslog,httpd,vixie-cron,openssh,dmraid,cracklib,which,libsmbclient,net-snmp-libs,ruby-libs,fipscheck,bind-libs,tcsh,dmraid-events,bind-utils,samba-client,nss_ldap,openssh-server,mod_perl,postgresql,vsftpd,dhclient,quota,xterm,postgresql-odbc,prelink,autofs,cyrus-sasl-md5,pam_ccreds,pkinit-nss,pam_krb5,pam_pkcs11,tux,ksh,hicolor-icon-theme,libgcj,ruby-irb,sgml-common,psgml,Deployment_Guide-fr-FR,Deployment_Guide-pt-BR,Deployment_Guide-ru-RU,Deployment_Guide-zh-TW,Deployment_Guide-zh-CN,Deployment_Guide-it-IT,liberation-fonts,libselinux,e2fsprogs-libs,openssl,cyrus-sasl-md5,cyrus-sasl-gssapi,nss_db,newt,rhpl,libxml2-python,m2crypto,gettext,rpm-python,java-1.4.2-gcj-compat,libsemanage,system-config-securitylevel-tui,libuser,usermode,kbd,antlr,gamin-python,python-sqlite,audit-libs-python,python-ethtool,pyOpenSSL,policycoreutils,pygtk2,PyXML,iscsi-initiator-utils,module-init-tools,setools,setuptool,net-snmp,mod_python,subversion,readahead,hwdata,selinux-policy,redhat-lsb,usbutils,subscription-manager,yum-updatesd,yum-updateonboot,selinux-policy-targeted,system-config-securitylevel,rhel-instnum,pam,pam_ccreds,nss_ldap,redhat-lsb,hal,rhnsd,xorg-x11-xfs,yum-rhn-plugin,system-config-network-tui,firstboot-tui,fonts-japanese,rh-amazon-rhui-client,fonts-KOI8-R-100dpi,gpg-pubkey,setup,mailcap,zlib,popt,cyrus-sasl-lib,bzip2-libs,libattr,keyutils-libs,libusb,gdbm,libgcrypt,slang,perl-BSD-Resource,mingetty,libnl,libvolume_id,libtool-ltdl,termcap,info,libsepol,libxml2,procps,cpio,ed,gpm,iptables-ipv6,cpp,iputils,virt-what,libXext,libXmu,jpackage-utils,libXtst,glibc-devel,nash,iptstate,lftp,mgetty,nc,sysfsutils,cyrus-sasl-plain,finger,traceroute,hdparm,setserial,grub,man-pages-es,rootfiles,man-pages,libstdc++,libXau,db4,libXext,libXp,compat-libstdc++-33,cyrus-sasl-plain,device-mapper,apr,kpartx,libselinux-utils,device-mapper-event,aspell-en,lsof,aspell-de,aspell-pl,kernel-xen-devel,openssl,cairo,SysVinit,dbus-glib,at,exim,nscd,gnupg,samba-common,ruby,cups-libs,mtools,webalizer,mod_authz_ldap,rng-utils,dhcpv6-client,mysql-connector-odbc,openldap-clients,tcpdump,cyrus-sasl-gssapi,audit,htmlview,libglade2,pinfo,Deployment_Guide-ja-JP,Deployment_Guide-ko-KR,Deployment_Guide-en-US,logwatch,krb5-libs,curl,python,python-libs,pygobject2,python-iniparse,man,passwd,python-rhsm,ntsysv,mx,libselinux-python,pygtk2-libglade,mkinitrd,postgresql-python,mutt,libhugetlbfs,pciutils,python-urlgrabber,yum-security,yum-fastestmirror,sos,pam_pkcs11,libhugetlbfs,kudzu,rhn-client-tools,fonts-KOI8-R,fonts-chinese,fonts-KOI8-R-75dpi'']'} > - {comment: All required package are included, result: passed} > testcase_12_passwd_group: > - {command: 'grep ''^root:x:0:0:root:/root:/bin/bash'' /etc/passwd', result: passed} > - {command: 'grep ''^nobody:x:99:99:Nobody:/:/sbin/nologin'' /etc/passwd', result: passed} > - {command: 'grep ''^sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin'' > /etc/passwd', result: passed} > - {command: 'grep ''^root:x:0:root'' /etc/group', result: passed} > - {command: 'grep ''^daemon:x:2:root,bin,daemon'' /etc/group', result: passed} > - {command: 'grep ''^bin:x:1:root,bin,daemon'' /etc/group', result: passed} > testcase_13_resize2fs: > - {command: resize2fs -p /dev/sda1 15000M, result: passed} > - {command: df -h | grep 15G, result: passed} > testcase_14_host_details: > - {command: '[ ! -z "`curl http://169.254.169.254/latest/dynamic/instance-identity/signature`" > ]', result: passed} > - {command: 'curl http://169.254.169.254/latest/dynamic/instance-identity/document', > match: '.*({.*}).*', result: passed, value: '[''{\r\n "instanceId" : "i-6de1341c",\r\n "billingProducts" > : [ "bp-63a5400a" ],\r\n "version" : "2010-08-31",\r\n "imageId" : "ami-4f53dd26",\r\n "accountId" > : "567014786890",\r\n "instanceType" : "m2.4xlarge",\r\n "architecture" > : "x86_64",\r\n "kernelId" : "aki-ecfa0185",\r\n "ramdiskId" : null,\r\n "pendingTime" > : "2013-01-03T10:21:07Z",\r\n "availabilityZone" : "us-east-1c",\r\n "devpayProductCodes" > : null,\r\n "privateIp" : "10.143.130.207",\r\n "region" : "us-east-1"\r\n}'']'} > - {command: '[ "ami-4f53dd26" = "ami-4f53dd26" ]', result: passed} > - {command: '[ "x86_64" = "x86_64" ]', result: passed} > - {command: '[ "us-east-1" = "us-east-1" ]', result: passed} > - {command: '[ "bp-63a5400a" = "bp-63a5400a" ]', result: passed} > testcase_15_rhel_version: > - {command: 'rpm -q --qf ''%{RELEASE} > > '' --whatprovides redhat-release', match: ".*\r\n([0-9]\\.[0-9]\\..*)\r\n\ > .*", result: passed, value: '[''5.9.0.2'']'} > - {command: '[ ''5.9'' = ''5.9'' ]', result: passed} > testcase_16_selinux: > - {command: getenforce, expectation: "\r\nEnforcing\r\n", result: passed} > - {command: grep '^SELINUX=enforcing' /etc/sysconfig/selinux, result: passed} > - {command: grep '^SELINUXTYPE=targeted' /etc/sysconfig/selinux, result: passed} > - {command: setenforce Permissive && getenforce, expectation: "\r\nPermissive\r\ > \n", result: passed} > - {command: setenforce Enforcing && getenforce, expectation: "\r\nEnforcing\r\ > \n", result: passed} > testcase_17_shells: > - {command: grep 'bin/bash$' /etc/shells, result: passed} > - {command: grep 'bin/nologin$' /etc/shells, result: passed} > testcase_18_sshd: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: 'chkconfig --list sshd | grep ''0:off[[:space:]]*1:off[[:space:]]*2:on[[:space:]]*3:on[[:space:]]*4:on[[:space:]]*5:on[[:space:]]*6:off''', > result: passed} > - {command: service sshd status | grep running, result: passed} > - {command: grep 'PasswordAuthentication no' /etc/ssh/sshd_config, result: passed} > testcase_19_rhn_system_id: > - {command: '[ ! -f /etc/sysconfig/rhn/systemid ]', result: passed} > testcase_20_auditd: > - {command: md5sum /etc/audit/auditd.conf | cut -f 1 -d ' ', expectation: 612ddf28c3916530d47ef56a1b1ed1ed, > result: passed} > - {command: md5sum /etc/sysconfig/auditd | cut -f 1 -d ' ', expectation: 123beb3a97a32d96eba4f11509e39da2, > result: passed} > - {command: md5sum /etc/audit/audit.rules | cut -f 1 -d ' ', expectation: f9869e1191838c461f5b9051c78a638d, > result: passed} > - {command: chkconfig --list auditd, expectation: '3:on.*5:on', result: passed} > testcase_21_disk_size_format: > - {command: 'mount | grep ''^/dev'' | awk ''{print $1}''', result: passed, value: /dev/sda1} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $3}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''/'']'} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $5}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''ext3'']'} > - {command: '[ `df -k / | awk ''{ print $2 }'' | tail -n 1` -gt 3937219 ]', > result: passed} > - {command: '[ ext3 = ext3 ]', result: passed} > testcase_22_gpg_keys: > - {command: grep '^gpgcheck=' /etc/yum.repos.d/redhat-*.repo | cut -d\= -f2 > | sort -uf | tr -d ' ', expectation: "\r\n1\r\n", result: passed} > - {command: rpm -qa gpg-pubkey* | wc -l, expectation: "\r\n2\r\n", result: passed} > - {command: rpm -q gpg-pubkey-2fa658e0-45700c69, result: passed} > - {command: rpm -q gpg-pubkey-37017186-45761324, result: passed} > testcase_23_syslog: > - {command: md5sum /etc/rsyslog.conf | cut -f 1 -d ' ', result: passed, value: 15936b6fe4e8fadcea87b54de495f975} > - {command: '([ 15936b6fe4e8fadcea87b54de495f975 = bd4e328df4b59d41979ef7202a05e074 > ] || [ 15936b6fe4e8fadcea87b54de495f975 = 15936b6fe4e8fadcea87b54de495f975 > ])', result: passed} > testcase_24_yum_plugin: > - {command: 'grep ''^enabled[[:space:]]*=[[:space:]]*[^0 ]'' /etc/yum/pluginconf.d/rhnplugin.conf', > result: passed} > testcase_26_verify_rpms: > - {command: rpm -Va --nomtime --nosize --nomd5 | sort -fu | wc -l, result: passed, > value: '3'} > - {command: 'rpm -q --queryformat ''%{RELEASE} > > '' redhat-release | cut -d. -f1,2', result: passed, value: '5.9'} > - {command: '[ 3 = 3 ]', result: passed} > - {command: '[ 5.9 = 5.9 ]', result: passed} > - {command: 'rpm -qa --queryformat ''%{PACKAGER} > > '' | sort -u | grep -v ''Red Hat, Inc.''', result: passed, value: (none)} > testcase_27_yum_repos: > - {command: 'yum repolist -v all | csplit --prefix=repolist_xx - ''%pkgsack > time:%1''', result: passed} > - actual repos: > rhel-debuginfo: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server: {repo-status: enabled} > rhui-us-east-1-rhel-server-source: {repo-status: disabled} > expected repos: > rhel-source: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional-source: {repo-status: disabled} > result: failed > testcase_28_iptables: > - {command: 'iptables -L -n | grep :22 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: 'iptables -L -n | grep RELATED,ESTABLISHED | grep ACCEPT | wc -l', > expectation: "\r\n1\r\n", result: passed} > - {command: 'iptables -L -n | grep :631 | grep ACCEPT | wc -l', expectation: "\r\n\ > 2\r\n", result: passed} > - {command: 'iptables -L -n | grep :5353 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: iptables -L -n | grep -e esp -e ah | grep ACCEPT | wc -l, expectation: "\r\n\ > 2\r\n", result: passed} > - {command: iptables -L -n | grep REJECT | grep all | grep 0.0.0.0/0 | grep > icmp-host-prohibited | wc -l, expectation: "\r\n1\r\n", result: passed} > testcase_29_swap_file: {comment: not applicable for arch = x86_64, result: skipped} > testcase_30_rhn_certificates: > - {command: rpm -ql rh-amazon-rhui-client | egrep '.*\.(pem|crt)', result: passed, > value: "/etc/pki/entitlement/ca.crt\r\n/etc/pki/entitlement/cdn.redhat.com-chain.crt\r\ > \n/etc/pki/entitlement/product/content-rhel5.crt\r\n/etc/pki/entitlement/product/rhui-client-config-server-5.crt"} > - {command: openssl x509 -in /etc/pki/entitlement/ca.crt -noout -dates | grep > notAfter, result: passed, value: 'notAfter=Nov 30 19:46:02 2017 GMT'} > - {comment: '(/etc/pki/entitlement/ca.crt).notAfter=2017-11-30 19:46:02; expecting: > 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/cdn.redhat.com-chain.crt -noout > -dates | grep notAfter, result: passed, value: 'notAfter=Mar 13 11:24:54 > 2030 GMT'} > - {comment: '(/etc/pki/entitlement/cdn.redhat.com-chain.crt).notAfter=2030-03-13 > 11:24:54; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/content-rhel5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:44:41 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/content-rhel5.crt).notAfter=2017-03-31 > 18:44:41; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/rhui-client-config-server-5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:41:55 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/rhui-client-config-server-5.crt).notAfter=2017-03-31 > 18:41:55; expecting: 2017-03-14 00:00:00', result: passed} > testcase_31_subscription_management: {comment: not applicable for version = > 5.9, result: skipped} > testcase_50_yum_package_install: > - {command: yum repolist, result: passed} > - {command: yum search zsh, result: passed} > - {command: yum -y install zsh, result: passed} > - {command: 'rpm -q --queryformat ''%{NAME}'' zsh', result: passed} > - {command: rpm -e zsh, result: passed} > testcase_55_yum_group_install: > - {actual: '1', command: yum -y groupinstall 'Development tools', result: failed} > testcase_60_yum_update: > - {command: yum -y update, result: passed} > testcase_99_reboot: > - {command: "sed -i 's,\\(default\\)=.*$,\x01=0,' /boot/grub/menu.lst", result: passed} > - {actual: None, command: reboot, result: failed} > stage2: > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''71680000'']'} > - {command: '[ 71680000 -gt 68400000 ]', result: passed} > testcase_25_uname: > - {command: 'uname -r | sed ''s,\.el5xen,.el5,''', result: passed, value: 2.6.18-348.el5} > - {command: 'rpm -q --queryformat ''%{VERSION}-%{RELEASE} > > '' kernel-xen | sort | tail -1', result: passed, value: 2.6.18-348.el5} > - {command: uname -o, result: passed, value: GNU/Linux} > - {command: '[ 2.6.18-348.el5 = 2.6.18-348.el5 ]', result: passed} > - {command: '[ GNU/Linux = ''GNU/Linux'' ]', result: passed} > - {command: grep UPDATEDEFAULT=yes /etc/sysconfig/kernel, result: passed} > - {command: grep DEFAULTKERNEL=kernel /etc/sysconfig/kernel, result: passed} > m2.xlarge: > stage1: > testcase_01_ipv6: > - {command: grep NETWORKING_IPV6=no /etc/sysconfig/network, result: passed} > testcase_02_bash_history: > - {command: '[ ! -f ~/.bash_history ] && echo 0 || cat ~/.bash_history | wc > -l', expectation: "\r\n0\r\n", result: passed} > testcase_03_chkconfig: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: chkconfig --list crond, expectation: '3:on', result: passed} > - {command: chkconfig --list iptables, expectation: '3:on', result: passed} > - {command: chkconfig --list yum-updatesd, expectation: '3:on', result: passed} > testcase_04_cloud_firstboot: > - {command: chkconfig --list rh-cloud-firstboot, expectation: '3:off', result: passed} > - {command: test -f /etc/sysconfig/rh-cloud-firstboot, result: passed} > - {command: cat /etc/sysconfig/rh-cloud-firstboot, expectation: RUN_FIRSTBOOT=NO, > result: passed} > testcase_05_grub: > - {command: test -h /boot/grub/menu.lst, result: passed} > - {command: readlink -e /boot/grub/menu.lst, expectation: /boot/grub/grub.conf, > result: passed} > - {command: 'grep ''(hd0,0)'' /boot/grub/grub.conf', result: passed} > testcase_06_inittab: > - {command: 'grep ''^id:'' /etc/inittab', expectation: 'id:3:initdefault', result: passed} > - {command: 'grep ''^si:'' /etc/inittab', expectation: 'si::sysinit:/etc/rc.d/rc.sysinit', > result: passed} > testcase_07_libc6_xen_conf: > - {command: test -f /etc/ld.so.conf.d/libc6-xen.conf, result: passed} > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''17920000'']'} > - {command: '[ 17920000 -gt 17100000 ]', result: passed} > testcase_09_nameserver: > - {command: dig clock.redhat.com | grep 66.187.233.4, result: passed} > testcase_10_networking: > - {command: grep '^NETWORKING=yes' /etc/sysconfig/network, result: passed} > - {command: grep '^DEVICE=eth0' /etc/sysconfig/network-scripts/ifcfg-eth0, result: passed} > testcase_11_package_set: > - {command: 'rpm -qa --queryformat ''%{NAME},'' && echo', match: ".*\r\n(.*),\r\ > \n.*", result: passed, value: '[''basesystem,glibc-common,glib2,libstdc++,db4,libpng,pcre,elfutils-libelf,libgpg-error,dmidecode,libtiff,zip,perl-String-CRC32,sgpio,mailx,wireless-tools,perl-URI,bash,nss,gawk,binutils,make,libXfont,m4,gzip,hmaccalc,desktop-file-utils,lm_sensors,xorg-x11-filesystem,xorg-x11-font-utils,libXpm,libXaw,redhat-menus,redhat-release,anacron,crash,nss-tools,mtr,cpuspeed,rsync,libicu,dos2unix,ncompress,compat-libstdc++-33,tree,man-pages-de,man-pages-pl,man-pages-ru,glibc,libsepol,keyutils-libs,libXdmcp,readline,libicu,pam_smb,libselinux,findutils,tar,net-tools,device-mapper-multipath,MAKEDEV,parted,vim-enhanced,aspell-ru,pam,util-linux,udev,apr-util,pango,initscripts,mcstrans,dbus,gd,distcache,neon,alsa-lib,mod_ssl,openssh-clients,acpid,irqbalance,openswan,krb5-workstation,stunnel,nmap,screen,conman,gtk2,w3m,ruby-rdoc,Deployment_Guide-de-DE,Deployment_Guide-es-ES,xinetd,device-mapper,openldap,parted,rpm,dbus-python,rpm-libs,python-dmidecode,python-simplejson,authconfig,gjdoc,pycairo,yum-metadata-parser,python-numeric,python-elementtree,sudo,postgresql-jdbc,MySQL-python,cracklib,rhnlib,yum,yum-utils,kernel-xen,python-setuptools,pam_krb5,chkfontpath,pm-utils,rhn-setup,fonts-korean,rhn-check,gpg-pubkey,libgcc,filesystem,cracklib-dicts,tzdata,glibc,chkconfig,mktemp,nspr,audit-libs,expat,tcp_wrappers,atk,libcap,libacl,libjpeg,libICE,libSM,file,libsysfs,perl,libXau,gnutls,libfontenc,unixODBC-libs,pax,perl-DBI,gmp,ethtool,libXdmcp,pkgconfig,libFS,libart_lgpl,checkpolicy,hesiod,kernel-headers,libtermcap,ncurses,grep,readline,sed,freetype,sqlite,diffutils,ttmkfdir,libidn,iptables,bc,libgomp,time,less,bzip2,vim-common,svrcore,groff,iproute,gamin,tcl,crontabs,libX11,libXrender,libXt,libXrandr,libXfixes,libXcursor,libXinerama,libXi,glibc-headers,redhat-logos,bitstream-vera-fonts,libXp,mozldap,jwhois,ftp,udftools,nano,dialog,telnet,unzip,fbset,acl,attr,beecrypt,compat-db,lslk,unix2dos,dosfstools,symlinks,pam_passwdqc,libaio,pam_smb,setarch,man-pages-ko,man-pages-fr,redhat-release-notes,man-pages-it,man-pages-ja,man-pages-cs,words,libgcc,zlib,nspr,nss,ncurses,audit-libs,libX11,libidn,cyrus-sasl-lib,compat-db,beecrypt,libaio,pam_passwdqc,gcc,shadow-utils,e2fsprogs-libs,aspell,psmisc,logrotate,libutempter,e2fsprogs,patch,cryptsetup-luks,lvm2,vim-minimal,tmpwatch,mlocate,nss_db,aspell-pt,aspell-cs,aspell-fr,aspell-it,aspell-es,coreutils,krb5-libs,openldap,fontconfig,postgresql-libs,fipscheck-lib,dbus-libs,mysql,libXft,curl,rsyslog,httpd,vixie-cron,openssh,dmraid,cracklib,which,libsmbclient,net-snmp-libs,ruby-libs,fipscheck,bind-libs,tcsh,dmraid-events,bind-utils,samba-client,nss_ldap,openssh-server,mod_perl,postgresql,vsftpd,dhclient,quota,xterm,postgresql-odbc,prelink,autofs,cyrus-sasl-md5,pam_ccreds,pkinit-nss,pam_krb5,pam_pkcs11,tux,ksh,hicolor-icon-theme,libgcj,ruby-irb,sgml-common,psgml,Deployment_Guide-fr-FR,Deployment_Guide-pt-BR,Deployment_Guide-ru-RU,Deployment_Guide-zh-TW,Deployment_Guide-zh-CN,Deployment_Guide-it-IT,liberation-fonts,libselinux,e2fsprogs-libs,openssl,cyrus-sasl-md5,cyrus-sasl-gssapi,nss_db,newt,rhpl,libxml2-python,m2crypto,gettext,rpm-python,java-1.4.2-gcj-compat,libsemanage,system-config-securitylevel-tui,libuser,usermode,kbd,antlr,gamin-python,python-sqlite,audit-libs-python,python-ethtool,pyOpenSSL,policycoreutils,pygtk2,PyXML,iscsi-initiator-utils,module-init-tools,setools,setuptool,net-snmp,mod_python,subversion,readahead,hwdata,selinux-policy,redhat-lsb,usbutils,subscription-manager,yum-updatesd,yum-updateonboot,selinux-policy-targeted,system-config-securitylevel,rhel-instnum,pam,pam_ccreds,nss_ldap,redhat-lsb,hal,rhnsd,xorg-x11-xfs,yum-rhn-plugin,system-config-network-tui,firstboot-tui,fonts-japanese,rh-amazon-rhui-client,fonts-KOI8-R-100dpi,gpg-pubkey,setup,mailcap,zlib,popt,cyrus-sasl-lib,bzip2-libs,libattr,keyutils-libs,libusb,gdbm,libgcrypt,slang,perl-BSD-Resource,mingetty,libnl,libvolume_id,libtool-ltdl,termcap,info,libsepol,libxml2,procps,cpio,ed,gpm,iptables-ipv6,cpp,iputils,virt-what,libXext,libXmu,jpackage-utils,libXtst,glibc-devel,nash,iptstate,lftp,mgetty,nc,sysfsutils,cyrus-sasl-plain,finger,traceroute,hdparm,setserial,grub,man-pages-es,rootfiles,man-pages,libstdc++,libXau,db4,libXext,libXp,compat-libstdc++-33,cyrus-sasl-plain,device-mapper,apr,kpartx,libselinux-utils,device-mapper-event,aspell-en,lsof,aspell-de,aspell-pl,kernel-xen-devel,openssl,cairo,SysVinit,dbus-glib,at,exim,nscd,gnupg,samba-common,ruby,cups-libs,mtools,webalizer,mod_authz_ldap,rng-utils,dhcpv6-client,mysql-connector-odbc,openldap-clients,tcpdump,cyrus-sasl-gssapi,audit,htmlview,libglade2,pinfo,Deployment_Guide-ja-JP,Deployment_Guide-ko-KR,Deployment_Guide-en-US,logwatch,krb5-libs,curl,python,python-libs,pygobject2,python-iniparse,man,passwd,python-rhsm,ntsysv,mx,libselinux-python,pygtk2-libglade,mkinitrd,postgresql-python,mutt,libhugetlbfs,pciutils,python-urlgrabber,yum-security,yum-fastestmirror,sos,pam_pkcs11,libhugetlbfs,kudzu,rhn-client-tools,fonts-KOI8-R,fonts-chinese,fonts-KOI8-R-75dpi'']'} > - {comment: All required package are included, result: passed} > testcase_12_passwd_group: > - {command: 'grep ''^root:x:0:0:root:/root:/bin/bash'' /etc/passwd', result: passed} > - {command: 'grep ''^nobody:x:99:99:Nobody:/:/sbin/nologin'' /etc/passwd', result: passed} > - {command: 'grep ''^sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin'' > /etc/passwd', result: passed} > - {command: 'grep ''^root:x:0:root'' /etc/group', result: passed} > - {command: 'grep ''^daemon:x:2:root,bin,daemon'' /etc/group', result: passed} > - {command: 'grep ''^bin:x:1:root,bin,daemon'' /etc/group', result: passed} > testcase_13_resize2fs: > - {command: resize2fs -p /dev/sda1 15000M, result: passed} > - {command: df -h | grep 15G, result: passed} > testcase_14_host_details: > - {command: '[ ! -z "`curl http://169.254.169.254/latest/dynamic/instance-identity/signature`" > ]', result: passed} > - {command: 'curl http://169.254.169.254/latest/dynamic/instance-identity/document', > match: '.*({.*}).*', result: passed, value: '[''{\r\n "instanceId" : "i-4be6333a",\r\n "billingProducts" > : [ "bp-63a5400a" ],\r\n "version" : "2010-08-31",\r\n "imageId" : "ami-4f53dd26",\r\n "accountId" > : "567014786890",\r\n "instanceType" : "m2.xlarge",\r\n "architecture" > : "x86_64",\r\n "kernelId" : "aki-ecfa0185",\r\n "ramdiskId" : null,\r\n "pendingTime" > : "2013-01-03T10:20:42Z",\r\n "availabilityZone" : "us-east-1d",\r\n "devpayProductCodes" > : null,\r\n "privateIp" : "10.218.99.231",\r\n "region" : "us-east-1"\r\n}'']'} > - {command: '[ "ami-4f53dd26" = "ami-4f53dd26" ]', result: passed} > - {command: '[ "x86_64" = "x86_64" ]', result: passed} > - {command: '[ "us-east-1" = "us-east-1" ]', result: passed} > - {command: '[ "bp-63a5400a" = "bp-63a5400a" ]', result: passed} > testcase_15_rhel_version: > - {command: 'rpm -q --qf ''%{RELEASE} > > '' --whatprovides redhat-release', match: ".*\r\n([0-9]\\.[0-9]\\..*)\r\n\ > .*", result: passed, value: '[''5.9.0.2'']'} > - {command: '[ ''5.9'' = ''5.9'' ]', result: passed} > testcase_16_selinux: > - {command: getenforce, expectation: "\r\nEnforcing\r\n", result: passed} > - {command: grep '^SELINUX=enforcing' /etc/sysconfig/selinux, result: passed} > - {command: grep '^SELINUXTYPE=targeted' /etc/sysconfig/selinux, result: passed} > - {command: setenforce Permissive && getenforce, expectation: "\r\nPermissive\r\ > \n", result: passed} > - {command: setenforce Enforcing && getenforce, expectation: "\r\nEnforcing\r\ > \n", result: passed} > testcase_17_shells: > - {command: grep 'bin/bash$' /etc/shells, result: passed} > - {command: grep 'bin/nologin$' /etc/shells, result: passed} > testcase_18_sshd: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: 'chkconfig --list sshd | grep ''0:off[[:space:]]*1:off[[:space:]]*2:on[[:space:]]*3:on[[:space:]]*4:on[[:space:]]*5:on[[:space:]]*6:off''', > result: passed} > - {command: service sshd status | grep running, result: passed} > - {command: grep 'PasswordAuthentication no' /etc/ssh/sshd_config, result: passed} > testcase_19_rhn_system_id: > - {command: '[ ! -f /etc/sysconfig/rhn/systemid ]', result: passed} > testcase_20_auditd: > - {command: md5sum /etc/audit/auditd.conf | cut -f 1 -d ' ', expectation: 612ddf28c3916530d47ef56a1b1ed1ed, > result: passed} > - {command: md5sum /etc/sysconfig/auditd | cut -f 1 -d ' ', expectation: 123beb3a97a32d96eba4f11509e39da2, > result: passed} > - {command: md5sum /etc/audit/audit.rules | cut -f 1 -d ' ', expectation: f9869e1191838c461f5b9051c78a638d, > result: passed} > - {command: chkconfig --list auditd, expectation: '3:on.*5:on', result: passed} > testcase_21_disk_size_format: > - {command: 'mount | grep ''^/dev'' | awk ''{print $1}''', result: passed, value: /dev/sda1} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $3}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''/'']'} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $5}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''ext3'']'} > - {command: '[ `df -k / | awk ''{ print $2 }'' | tail -n 1` -gt 3937219 ]', > result: passed} > - {command: '[ ext3 = ext3 ]', result: passed} > testcase_22_gpg_keys: > - {command: grep '^gpgcheck=' /etc/yum.repos.d/redhat-*.repo | cut -d\= -f2 > | sort -uf | tr -d ' ', expectation: "\r\n1\r\n", result: passed} > - {command: rpm -qa gpg-pubkey* | wc -l, expectation: "\r\n2\r\n", result: passed} > - {command: rpm -q gpg-pubkey-2fa658e0-45700c69, result: passed} > - {command: rpm -q gpg-pubkey-37017186-45761324, result: passed} > testcase_23_syslog: > - {command: md5sum /etc/rsyslog.conf | cut -f 1 -d ' ', result: passed, value: 15936b6fe4e8fadcea87b54de495f975} > - {command: '([ 15936b6fe4e8fadcea87b54de495f975 = bd4e328df4b59d41979ef7202a05e074 > ] || [ 15936b6fe4e8fadcea87b54de495f975 = 15936b6fe4e8fadcea87b54de495f975 > ])', result: passed} > testcase_24_yum_plugin: > - {command: 'grep ''^enabled[[:space:]]*=[[:space:]]*[^0 ]'' /etc/yum/pluginconf.d/rhnplugin.conf', > result: passed} > testcase_26_verify_rpms: > - {command: rpm -Va --nomtime --nosize --nomd5 | sort -fu | wc -l, result: passed, > value: '3'} > - {command: 'rpm -q --queryformat ''%{RELEASE} > > '' redhat-release | cut -d. -f1,2', result: passed, value: '5.9'} > - {command: '[ 3 = 3 ]', result: passed} > - {command: '[ 5.9 = 5.9 ]', result: passed} > - {command: 'rpm -qa --queryformat ''%{PACKAGER} > > '' | sort -u | grep -v ''Red Hat, Inc.''', result: passed, value: (none)} > testcase_27_yum_repos: > - {command: 'yum repolist -v all | csplit --prefix=repolist_xx - ''%pkgsack > time:%1''', result: passed} > - actual repos: > rhel-debuginfo: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server: {repo-status: enabled} > rhui-us-east-1-rhel-server-source: {repo-status: disabled} > expected repos: > rhel-source: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional-source: {repo-status: disabled} > result: failed > testcase_28_iptables: > - {command: 'iptables -L -n | grep :22 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: 'iptables -L -n | grep RELATED,ESTABLISHED | grep ACCEPT | wc -l', > expectation: "\r\n1\r\n", result: passed} > - {command: 'iptables -L -n | grep :631 | grep ACCEPT | wc -l', expectation: "\r\n\ > 2\r\n", result: passed} > - {command: 'iptables -L -n | grep :5353 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: iptables -L -n | grep -e esp -e ah | grep ACCEPT | wc -l, expectation: "\r\n\ > 2\r\n", result: passed} > - {command: iptables -L -n | grep REJECT | grep all | grep 0.0.0.0/0 | grep > icmp-host-prohibited | wc -l, expectation: "\r\n1\r\n", result: passed} > testcase_29_swap_file: {comment: not applicable for arch = x86_64, result: skipped} > testcase_30_rhn_certificates: > - {command: rpm -ql rh-amazon-rhui-client | egrep '.*\.(pem|crt)', result: passed, > value: "/etc/pki/entitlement/ca.crt\r\n/etc/pki/entitlement/cdn.redhat.com-chain.crt\r\ > \n/etc/pki/entitlement/product/content-rhel5.crt\r\n/etc/pki/entitlement/product/rhui-client-config-server-5.crt"} > - {command: openssl x509 -in /etc/pki/entitlement/ca.crt -noout -dates | grep > notAfter, result: passed, value: 'notAfter=Nov 30 19:46:02 2017 GMT'} > - {comment: '(/etc/pki/entitlement/ca.crt).notAfter=2017-11-30 19:46:02; expecting: > 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/cdn.redhat.com-chain.crt -noout > -dates | grep notAfter, result: passed, value: 'notAfter=Mar 13 11:24:54 > 2030 GMT'} > - {comment: '(/etc/pki/entitlement/cdn.redhat.com-chain.crt).notAfter=2030-03-13 > 11:24:54; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/content-rhel5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:44:41 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/content-rhel5.crt).notAfter=2017-03-31 > 18:44:41; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/rhui-client-config-server-5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:41:55 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/rhui-client-config-server-5.crt).notAfter=2017-03-31 > 18:41:55; expecting: 2017-03-14 00:00:00', result: passed} > testcase_31_subscription_management: {comment: not applicable for version = > 5.9, result: skipped} > testcase_50_yum_package_install: > - {command: yum repolist, result: passed} > - {command: yum search zsh, result: passed} > - {command: yum -y install zsh, result: passed} > - {command: 'rpm -q --queryformat ''%{NAME}'' zsh', result: passed} > - {command: rpm -e zsh, result: passed} > testcase_55_yum_group_install: > - {actual: '1', command: yum -y groupinstall 'Development tools', result: failed} > testcase_60_yum_update: > - {command: yum -y update, result: passed} > testcase_99_reboot: > - {command: "sed -i 's,\\(default\\)=.*$,\x01=0,' /boot/grub/menu.lst", result: passed} > - {actual: None, command: reboot, result: failed} > stage2: > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''17920000'']'} > - {command: '[ 17920000 -gt 17100000 ]', result: passed} > testcase_25_uname: > - {command: 'uname -r | sed ''s,\.el5xen,.el5,''', result: passed, value: 2.6.18-348.el5} > - {command: 'rpm -q --queryformat ''%{VERSION}-%{RELEASE} > > '' kernel-xen | sort | tail -1', result: passed, value: 2.6.18-348.el5} > - {command: uname -o, result: passed, value: GNU/Linux} > - {command: '[ 2.6.18-348.el5 = 2.6.18-348.el5 ]', result: passed} > - {command: '[ GNU/Linux = ''GNU/Linux'' ]', result: passed} > - {command: grep UPDATEDEFAULT=yes /etc/sysconfig/kernel, result: passed} > - {command: grep DEFAULTKERNEL=kernel /etc/sysconfig/kernel, result: passed} > t1.micro: > stage1: > testcase_01_ipv6: > - {command: grep NETWORKING_IPV6=no /etc/sysconfig/network, result: passed} > testcase_02_bash_history: > - {command: '[ ! -f ~/.bash_history ] && echo 0 || cat ~/.bash_history | wc > -l', expectation: "\r\n0\r\n", result: passed} > testcase_03_chkconfig: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: chkconfig --list crond, expectation: '3:on', result: passed} > - {command: chkconfig --list iptables, expectation: '3:on', result: passed} > - {command: chkconfig --list yum-updatesd, expectation: '3:on', result: passed} > testcase_04_cloud_firstboot: > - {command: chkconfig --list rh-cloud-firstboot, expectation: '3:off', result: passed} > - {command: test -f /etc/sysconfig/rh-cloud-firstboot, result: passed} > - {command: cat /etc/sysconfig/rh-cloud-firstboot, expectation: RUN_FIRSTBOOT=NO, > result: passed} > testcase_05_grub: > - {command: test -h /boot/grub/menu.lst, result: passed} > - {command: readlink -e /boot/grub/menu.lst, expectation: /boot/grub/grub.conf, > result: passed} > - {command: 'grep ''(hd0,0)'' /boot/grub/grub.conf', result: passed} > testcase_06_inittab: > - {command: 'grep ''^id:'' /etc/inittab', expectation: 'id:3:initdefault', result: passed} > - {command: 'grep ''^si:'' /etc/inittab', expectation: 'si::sysinit:/etc/rc.d/rc.sysinit', > result: passed} > testcase_07_libc6_xen_conf: > - {command: test -f /etc/ld.so.conf.d/libc6-xen.conf, result: passed} > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''629760'']'} > - {command: '[ 629760 -gt 600000 ]', result: passed} > testcase_09_nameserver: > - {command: dig clock.redhat.com | grep 66.187.233.4, result: passed} > testcase_10_networking: > - {command: grep '^NETWORKING=yes' /etc/sysconfig/network, result: passed} > - {command: grep '^DEVICE=eth0' /etc/sysconfig/network-scripts/ifcfg-eth0, result: passed} > testcase_11_package_set: > - {command: 'rpm -qa --queryformat ''%{NAME},'' && echo', match: ".*\r\n(.*),\r\ > \n.*", result: passed, value: '[''basesystem,glibc-common,glib2,libstdc++,db4,libpng,pcre,elfutils-libelf,libgpg-error,dmidecode,libtiff,zip,perl-String-CRC32,sgpio,mailx,wireless-tools,perl-URI,bash,nss,gawk,binutils,make,libXfont,m4,gzip,hmaccalc,desktop-file-utils,lm_sensors,xorg-x11-filesystem,xorg-x11-font-utils,libXpm,libXaw,redhat-menus,redhat-release,anacron,crash,nss-tools,mtr,cpuspeed,rsync,libicu,dos2unix,ncompress,compat-libstdc++-33,tree,man-pages-de,man-pages-pl,man-pages-ru,glibc,libsepol,keyutils-libs,libXdmcp,readline,libicu,pam_smb,libselinux,findutils,tar,net-tools,device-mapper-multipath,MAKEDEV,parted,vim-enhanced,aspell-ru,pam,util-linux,udev,apr-util,pango,initscripts,mcstrans,dbus,gd,distcache,neon,alsa-lib,mod_ssl,openssh-clients,acpid,irqbalance,openswan,krb5-workstation,stunnel,nmap,screen,conman,gtk2,w3m,ruby-rdoc,Deployment_Guide-de-DE,Deployment_Guide-es-ES,xinetd,device-mapper,openldap,parted,rpm,dbus-python,rpm-libs,python-dmidecode,python-simplejson,authconfig,gjdoc,pycairo,yum-metadata-parser,python-numeric,python-elementtree,sudo,postgresql-jdbc,MySQL-python,cracklib,rhnlib,yum,yum-utils,kernel-xen,python-setuptools,pam_krb5,chkfontpath,pm-utils,rhn-setup,fonts-korean,rhn-check,gpg-pubkey,libgcc,filesystem,cracklib-dicts,tzdata,glibc,chkconfig,mktemp,nspr,audit-libs,expat,tcp_wrappers,atk,libcap,libacl,libjpeg,libICE,libSM,file,libsysfs,perl,libXau,gnutls,libfontenc,unixODBC-libs,pax,perl-DBI,gmp,ethtool,libXdmcp,pkgconfig,libFS,libart_lgpl,checkpolicy,hesiod,kernel-headers,libtermcap,ncurses,grep,readline,sed,freetype,sqlite,diffutils,ttmkfdir,libidn,iptables,bc,libgomp,time,less,bzip2,vim-common,svrcore,groff,iproute,gamin,tcl,crontabs,libX11,libXrender,libXt,libXrandr,libXfixes,libXcursor,libXinerama,libXi,glibc-headers,redhat-logos,bitstream-vera-fonts,libXp,mozldap,jwhois,ftp,udftools,nano,dialog,telnet,unzip,fbset,acl,attr,beecrypt,compat-db,lslk,unix2dos,dosfstools,symlinks,pam_passwdqc,libaio,pam_smb,setarch,man-pages-ko,man-pages-fr,redhat-release-notes,man-pages-it,man-pages-ja,man-pages-cs,words,libgcc,zlib,nspr,nss,ncurses,audit-libs,libX11,libidn,cyrus-sasl-lib,compat-db,beecrypt,libaio,pam_passwdqc,gcc,shadow-utils,e2fsprogs-libs,aspell,psmisc,logrotate,libutempter,e2fsprogs,patch,cryptsetup-luks,lvm2,vim-minimal,tmpwatch,mlocate,nss_db,aspell-pt,aspell-cs,aspell-fr,aspell-it,aspell-es,coreutils,krb5-libs,openldap,fontconfig,postgresql-libs,fipscheck-lib,dbus-libs,mysql,libXft,curl,rsyslog,httpd,vixie-cron,openssh,dmraid,cracklib,which,libsmbclient,net-snmp-libs,ruby-libs,fipscheck,bind-libs,tcsh,dmraid-events,bind-utils,samba-client,nss_ldap,openssh-server,mod_perl,postgresql,vsftpd,dhclient,quota,xterm,postgresql-odbc,prelink,autofs,cyrus-sasl-md5,pam_ccreds,pkinit-nss,pam_krb5,pam_pkcs11,tux,ksh,hicolor-icon-theme,libgcj,ruby-irb,sgml-common,psgml,Deployment_Guide-fr-FR,Deployment_Guide-pt-BR,Deployment_Guide-ru-RU,Deployment_Guide-zh-TW,Deployment_Guide-zh-CN,Deployment_Guide-it-IT,liberation-fonts,libselinux,e2fsprogs-libs,openssl,cyrus-sasl-md5,cyrus-sasl-gssapi,nss_db,newt,rhpl,libxml2-python,m2crypto,gettext,rpm-python,java-1.4.2-gcj-compat,libsemanage,system-config-securitylevel-tui,libuser,usermode,kbd,antlr,gamin-python,python-sqlite,audit-libs-python,python-ethtool,pyOpenSSL,policycoreutils,pygtk2,PyXML,iscsi-initiator-utils,module-init-tools,setools,setuptool,net-snmp,mod_python,subversion,readahead,hwdata,selinux-policy,redhat-lsb,usbutils,subscription-manager,yum-updatesd,yum-updateonboot,selinux-policy-targeted,system-config-securitylevel,rhel-instnum,pam,pam_ccreds,nss_ldap,redhat-lsb,hal,rhnsd,xorg-x11-xfs,yum-rhn-plugin,system-config-network-tui,firstboot-tui,fonts-japanese,rh-amazon-rhui-client,fonts-KOI8-R-100dpi,gpg-pubkey,setup,mailcap,zlib,popt,cyrus-sasl-lib,bzip2-libs,libattr,keyutils-libs,libusb,gdbm,libgcrypt,slang,perl-BSD-Resource,mingetty,libnl,libvolume_id,libtool-ltdl,termcap,info,libsepol,libxml2,procps,cpio,ed,gpm,iptables-ipv6,cpp,iputils,virt-what,libXext,libXmu,jpackage-utils,libXtst,glibc-devel,nash,iptstate,lftp,mgetty,nc,sysfsutils,cyrus-sasl-plain,finger,traceroute,hdparm,setserial,grub,man-pages-es,rootfiles,man-pages,libstdc++,libXau,db4,libXext,libXp,compat-libstdc++-33,cyrus-sasl-plain,device-mapper,apr,kpartx,libselinux-utils,device-mapper-event,aspell-en,lsof,aspell-de,aspell-pl,kernel-xen-devel,openssl,cairo,SysVinit,dbus-glib,at,exim,nscd,gnupg,samba-common,ruby,cups-libs,mtools,webalizer,mod_authz_ldap,rng-utils,dhcpv6-client,mysql-connector-odbc,openldap-clients,tcpdump,cyrus-sasl-gssapi,audit,htmlview,libglade2,pinfo,Deployment_Guide-ja-JP,Deployment_Guide-ko-KR,Deployment_Guide-en-US,logwatch,krb5-libs,curl,python,python-libs,pygobject2,python-iniparse,man,passwd,python-rhsm,ntsysv,mx,libselinux-python,pygtk2-libglade,mkinitrd,postgresql-python,mutt,libhugetlbfs,pciutils,python-urlgrabber,yum-security,yum-fastestmirror,sos,pam_pkcs11,libhugetlbfs,kudzu,rhn-client-tools,fonts-KOI8-R,fonts-chinese,fonts-KOI8-R-75dpi'']'} > - {comment: All required package are included, result: passed} > testcase_12_passwd_group: > - {command: 'grep ''^root:x:0:0:root:/root:/bin/bash'' /etc/passwd', result: passed} > - {command: 'grep ''^nobody:x:99:99:Nobody:/:/sbin/nologin'' /etc/passwd', result: passed} > - {command: 'grep ''^sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin'' > /etc/passwd', result: passed} > - {command: 'grep ''^root:x:0:root'' /etc/group', result: passed} > - {command: 'grep ''^daemon:x:2:root,bin,daemon'' /etc/group', result: passed} > - {command: 'grep ''^bin:x:1:root,bin,daemon'' /etc/group', result: passed} > testcase_13_resize2fs: > - {command: resize2fs -p /dev/sda1 15000M, result: passed} > - {command: df -h | grep 15G, result: passed} > testcase_14_host_details: > - {command: '[ ! -z "`curl http://169.254.169.254/latest/dynamic/instance-identity/signature`" > ]', result: passed} > - {command: 'curl http://169.254.169.254/latest/dynamic/instance-identity/document', > match: '.*({.*}).*', result: passed, value: '[''{\r\n "instanceId" : "i-43e63332",\r\n "billingProducts" > : [ "bp-63a5400a" ],\r\n "version" : "2010-08-31",\r\n "imageId" : "ami-4f53dd26",\r\n "accountId" > : "567014786890",\r\n "instanceType" : "t1.micro",\r\n "architecture" > : "x86_64",\r\n "kernelId" : "aki-ecfa0185",\r\n "ramdiskId" : null,\r\n "pendingTime" > : "2013-01-03T10:20:42Z",\r\n "availabilityZone" : "us-east-1d",\r\n "devpayProductCodes" > : null,\r\n "privateIp" : "10.112.82.121",\r\n "region" : "us-east-1"\r\n}'']'} > - {command: '[ "ami-4f53dd26" = "ami-4f53dd26" ]', result: passed} > - {command: '[ "x86_64" = "x86_64" ]', result: passed} > - {command: '[ "us-east-1" = "us-east-1" ]', result: passed} > - {command: '[ "bp-63a5400a" = "bp-63a5400a" ]', result: passed} > testcase_15_rhel_version: > - {command: 'rpm -q --qf ''%{RELEASE} > > '' --whatprovides redhat-release', match: ".*\r\n([0-9]\\.[0-9]\\..*)\r\n\ > .*", result: passed, value: '[''5.9.0.2'']'} > - {command: '[ ''5.9'' = ''5.9'' ]', result: passed} > testcase_16_selinux: > - {command: getenforce, expectation: "\r\nEnforcing\r\n", result: passed} > - {command: grep '^SELINUX=enforcing' /etc/sysconfig/selinux, result: passed} > - {command: grep '^SELINUXTYPE=targeted' /etc/sysconfig/selinux, result: passed} > - {command: setenforce Permissive && getenforce, expectation: "\r\nPermissive\r\ > \n", result: passed} > - {command: setenforce Enforcing && getenforce, expectation: "\r\nEnforcing\r\ > \n", result: passed} > testcase_17_shells: > - {command: grep 'bin/bash$' /etc/shells, result: passed} > - {command: grep 'bin/nologin$' /etc/shells, result: passed} > testcase_18_sshd: > - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed, > value: 'False'} > - {command: 'chkconfig --list sshd | grep ''0:off[[:space:]]*1:off[[:space:]]*2:on[[:space:]]*3:on[[:space:]]*4:on[[:space:]]*5:on[[:space:]]*6:off''', > result: passed} > - {command: service sshd status | grep running, result: passed} > - {command: grep 'PasswordAuthentication no' /etc/ssh/sshd_config, result: passed} > testcase_19_rhn_system_id: > - {command: '[ ! -f /etc/sysconfig/rhn/systemid ]', result: passed} > testcase_20_auditd: > - {command: md5sum /etc/audit/auditd.conf | cut -f 1 -d ' ', expectation: 612ddf28c3916530d47ef56a1b1ed1ed, > result: passed} > - {command: md5sum /etc/sysconfig/auditd | cut -f 1 -d ' ', expectation: 123beb3a97a32d96eba4f11509e39da2, > result: passed} > - {command: md5sum /etc/audit/audit.rules | cut -f 1 -d ' ', expectation: f9869e1191838c461f5b9051c78a638d, > result: passed} > - {command: chkconfig --list auditd, expectation: '3:on.*5:on', result: passed} > testcase_21_disk_size_format: > - {command: 'mount | grep ''^/dev'' | awk ''{print $1}''', result: passed, value: /dev/sda1} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $3}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''/'']'} > - {command: 'echo ''###'' ;mount | grep ''^/'' | awk ''{print $5}''; echo ''###''', > match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''ext3'']'} > - {command: '[ `df -k / | awk ''{ print $2 }'' | tail -n 1` -gt 3937219 ]', > result: passed} > - {command: '[ ext3 = ext3 ]', result: passed} > testcase_22_gpg_keys: > - {command: grep '^gpgcheck=' /etc/yum.repos.d/redhat-*.repo | cut -d\= -f2 > | sort -uf | tr -d ' ', expectation: "\r\n1\r\n", result: passed} > - {command: rpm -qa gpg-pubkey* | wc -l, expectation: "\r\n2\r\n", result: passed} > - {command: rpm -q gpg-pubkey-2fa658e0-45700c69, result: passed} > - {command: rpm -q gpg-pubkey-37017186-45761324, result: passed} > testcase_23_syslog: > - {command: md5sum /etc/rsyslog.conf | cut -f 1 -d ' ', result: passed, value: 15936b6fe4e8fadcea87b54de495f975} > - {command: '([ 15936b6fe4e8fadcea87b54de495f975 = bd4e328df4b59d41979ef7202a05e074 > ] || [ 15936b6fe4e8fadcea87b54de495f975 = 15936b6fe4e8fadcea87b54de495f975 > ])', result: passed} > testcase_24_yum_plugin: > - {command: 'grep ''^enabled[[:space:]]*=[[:space:]]*[^0 ]'' /etc/yum/pluginconf.d/rhnplugin.conf', > result: passed} > testcase_26_verify_rpms: > - {command: rpm -Va --nomtime --nosize --nomd5 | sort -fu | wc -l, result: passed, > value: '3'} > - {command: 'rpm -q --queryformat ''%{RELEASE} > > '' redhat-release | cut -d. -f1,2', result: passed, value: '5.9'} > - {command: '[ 3 = 3 ]', result: passed} > - {command: '[ 5.9 = 5.9 ]', result: passed} > - {command: 'rpm -qa --queryformat ''%{PACKAGER} > > '' | sort -u | grep -v ''Red Hat, Inc.''', result: passed, value: (none)} > testcase_27_yum_repos: > - {command: 'yum repolist -v all | csplit --prefix=repolist_xx - ''%pkgsack > time:%1''', result: passed} > - actual repos: > rhel-debuginfo: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server: {repo-status: enabled} > rhui-us-east-1-rhel-server-source: {repo-status: disabled} > expected repos: > rhel-source: {repo-status: disabled} > rhui-us-east-1-client-config-server-5: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional: {repo-status: enabled} > rhui-us-east-1-rhel-server-releases-optional-source: {repo-status: disabled} > result: failed > testcase_28_iptables: > - {command: 'iptables -L -n | grep :22 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: 'iptables -L -n | grep RELATED,ESTABLISHED | grep ACCEPT | wc -l', > expectation: "\r\n1\r\n", result: passed} > - {command: 'iptables -L -n | grep :631 | grep ACCEPT | wc -l', expectation: "\r\n\ > 2\r\n", result: passed} > - {command: 'iptables -L -n | grep :5353 | grep ACCEPT | wc -l', expectation: "\r\n\ > 1\r\n", result: passed} > - {command: iptables -L -n | grep -e esp -e ah | grep ACCEPT | wc -l, expectation: "\r\n\ > 2\r\n", result: passed} > - {command: iptables -L -n | grep REJECT | grep all | grep 0.0.0.0/0 | grep > icmp-host-prohibited | wc -l, expectation: "\r\n1\r\n", result: passed} > testcase_29_swap_file: {comment: not applicable for arch = x86_64, result: skipped} > testcase_30_rhn_certificates: > - {command: rpm -ql rh-amazon-rhui-client | egrep '.*\.(pem|crt)', result: passed, > value: "/etc/pki/entitlement/ca.crt\r\n/etc/pki/entitlement/cdn.redhat.com-chain.crt\r\ > \n/etc/pki/entitlement/product/content-rhel5.crt\r\n/etc/pki/entitlement/product/rhui-client-config-server-5.crt"} > - {command: openssl x509 -in /etc/pki/entitlement/ca.crt -noout -dates | grep > notAfter, result: passed, value: 'notAfter=Nov 30 19:46:02 2017 GMT'} > - {comment: '(/etc/pki/entitlement/ca.crt).notAfter=2017-11-30 19:46:02; expecting: > 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/cdn.redhat.com-chain.crt -noout > -dates | grep notAfter, result: passed, value: 'notAfter=Mar 13 11:24:54 > 2030 GMT'} > - {comment: '(/etc/pki/entitlement/cdn.redhat.com-chain.crt).notAfter=2030-03-13 > 11:24:54; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/content-rhel5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:44:41 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/content-rhel5.crt).notAfter=2017-03-31 > 18:44:41; expecting: 2017-03-14 00:00:00', result: passed} > - {command: openssl x509 -in /etc/pki/entitlement/product/rhui-client-config-server-5.crt > -noout -dates | grep notAfter, result: passed, value: 'notAfter=Mar 31 18:41:55 > 2017 GMT'} > - {comment: '(/etc/pki/entitlement/product/rhui-client-config-server-5.crt).notAfter=2017-03-31 > 18:41:55; expecting: 2017-03-14 00:00:00', result: passed} > testcase_31_subscription_management: {comment: not applicable for version = > 5.9, result: skipped} > testcase_50_yum_package_install: > - {command: yum repolist, result: passed} > - {command: yum search zsh, result: passed} > - {command: yum -y install zsh, result: passed} > - {command: 'rpm -q --queryformat ''%{NAME}'' zsh', result: passed} > - {command: rpm -e zsh, result: passed} > testcase_55_yum_group_install: > - {actual: '1', command: yum -y groupinstall 'Development tools', result: failed} > testcase_60_yum_update: > - {command: yum -y update, result: passed} > testcase_99_reboot: > - {command: "sed -i 's,\\(default\\)=.*$,\x01=0,' /boot/grub/menu.lst", result: passed} > - {command: reboot, result: passed} > stage2: > testcase_08_memory: > - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: ".*\r\n\ > MemTotal:\\s*([0-9]+) ", result: passed, value: '[''629760'']'} > - {command: '[ 629760 -gt 600000 ]', result: passed} > testcase_25_uname: > - {command: 'uname -r | sed ''s,\.el5xen,.el5,''', result: passed, value: 2.6.18-348.el5} > - {command: 'rpm -q --queryformat ''%{VERSION}-%{RELEASE} > > '' kernel-xen | sort | tail -1', result: passed, value: 2.6.18-348.el5} > - {command: uname -o, result: passed, value: GNU/Linux} > - {command: '[ 2.6.18-348.el5 = 2.6.18-348.el5 ]', result: passed} > - {command: '[ GNU/Linux = ''GNU/Linux'' ]', result: passed} > - {command: grep UPDATEDEFAULT=yes /etc/sysconfig/kernel, result: passed} > - {command: grep DEFAULTKERNEL=kernel /etc/sysconfig/kernel, result: passed} >version: '5.9'
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=671978">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 891585
: 671978