Attachment 907640 Details for Bug 1108123 – ami-8a8476e2.yaml

ami-8a8476e2.yaml

ami-8a8476e2.yaml (text/yaml), 29.80 KB, created by mkovacik on 2014-06-11 13:06:09 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: mkovacik

Created: 2014-06-11 13:06:09 UTC

Size: 29.80 KB

patch

obsolete

>ami: ami-8a8476e2
>arch: i386
>console_output: {m1.small: "Xen Minimal OS!\r\n  start_info: 0xb30000(VA)\r\n    nr_pages:\
>    \ 0x6a400\r\n  shared_inf: 0x00b81000(MA)\r\n     pt_base: 0xb33000(VA)\r\nnr_pt_frames:\
>    \ 0x9\r\n    mfn_list: 0x987000(VA)\r\n   mod_start: 0x0(VA)\r\n     mod_len:\
>    \ 0\r\n       flags: 0x0\r\n    cmd_line:  root=/dev/sda1 ro 4\r\n  stack:   \
>    \   0x966780-0x986780\r\nMM: Init\r\n      _text: 0x0(VA)\r\n     _etext: 0x7fbc5(VA)\r\
>    \n   _erodata: 0x98000(VA)\r\n     _edata: 0x9c008(VA)\r\nstack start: 0x966780(VA)\r\
>    \n       _end: 0x986d30(VA)\r\n  start_pfn: b3f\r\n    max_pfn: 3fffd\r\nMapping\
>    \ memory range 0xc00000 - 0x3fffd000\r\nsetting 0x0-0x98000 readonly\r\nskipped\
>    \ 0x1000\r\nMM: Initialise page allocator for d39000(d39000)-0(3fffd000)\r\nMM:\
>    \ done\r\nDemand map pfns at 3fffe000-bfffe000.\r\nHeap resides at bffff000-fffff000.\r\
>    \nInitialising timer interface\r\nInitialising console ... done.\r\ngnttab_table\
>    \ mapped at 0x3fffe000.\r\nInitialising scheduler\r\nThread \"Idle\": pointer:\
>    \ 0xbffff030, stack: 0x3ff50000\r\nThread \"xenstore\": pointer: 0xbffff4a0, stack:\
>    \ 0x3ff60000\r\nxenbus initialised on irq 1 mfn 0x354940\r\nThread \"shutdown\"\
>    : pointer: 0xbffff910, stack: 0x3ff70000\r\nDummy main: start_info=0x986880\r\n\
>    Thread \"main\": pointer: 0xbffffd80, stack: 0xd80000\r\n\"main\" \"root=/dev/sda1\"\
>    \ \"ro\" \"4\" \r\nvbd 2049 is hd0\r\n******************* BLKFRONT for device/vbd/2049\
>    \ **********\r\n\r\n\r\nbackend at /local/domain/0/backend/vbd/4531/2049\r\nFailed\
>    \ to read /local/domain/0/backend/vbd/4531/2049/feature-barrier.\r\nFailed to\
>    \ read /local/domain/0/backend/vbd/4531/2049/feature-flush-cache.\r\n31457280\
>    \ sectors of 0 bytes\r\n**************************\r\nvbd 2051 is hd1\r\n*******************\
>    \ BLKFRONT for device/vbd/2051 **********\r\n\r\n\r\nbackend at /local/domain/0/backend/vbd/4531/2051\r\
>    \nFailed to read /local/domain/0/backend/vbd/4531/2051/feature-barrier.\r\nFailed\
>    \ to read /local/domain/0/backend/vbd/4531/2051/feature-flush-cache.\r\n1835008\
>    \ sectors of 0 bytes\r\n**************************\r\nvbd 2128 is hd2\r\n*******************\
>    \ BLKFRONT for device/vbd/2128 **********\r\n\r\n\r\nbackend at /local/domain/0/backend/vbd/4531/2128\r\
>    \nFailed to read /local/domain/0/backend/vbd/4531/2128/feature-barrier.\r\nFailed\
>    \ to read /local/domain/0/backend/vbd/4531/2128/feature-flush-cache.\r\n312705024\
>    \ sectors of 0 bytes\r\n**************************\r\nThread \"kbdfront\": pointer:\
>    \ 0xc00009a8, stack: 0xda0000\r\n******************* FBFRONT for device/vfb/0\
>    \ **********\r\n\r\n\r\n******************* KBDFRONT for device/vkbd/0 **********\r\
>    \n\r\n\r\nFailed to read device/vfb/0/backend-id.\r\nFailed to read device/vkbd/0/backend-id.\r\
>    \nerror writing initialized: ENOENT\r\nAbort transaction switching state\r\n\r\
>    Press `ESC' to enter the menu... 0   \e[H\e[J  Booting 'Red Hat Enterprise Linux\
>    \ (2.6.32-431.17.1.el6.i686)'\r\r\n\r\r\nroot (hd0)\r\r\nError ENOENT when reading\
>    \ the backend path device/vkbd/0/backend\r\nThread \"kbdfront\" exited.\r\n Filesystem\
>    \ type is ext2fs, using whole disk\r\r\nkernel /boot/vmlinuz-2.6.32-431.17.1.el6.i686\
>    \ console=ttyS0 ro root=UUID=8857bd\r\r\n1d-6666-498b-834f-006f0a8e1fcc rd_NO_LUKS\
>    \  KEYBOARDTYPE=pc KEYTABLE=us LANG=en_\r\r\nUS.UTF-8 xen_blkfront.sda_is_xvda=1\
>    \ console=ttyS0,115200n8 console=tty0 rd_NO_M\r\r\nD SYSFONT=latarcyrheb-sun16\
>    \ crashkernel=auto rd_NO_LVM rd_NO_DM rhgb quiet\r\r\ninitrd /boot/initramfs-2.6.32-431.17.1.el6.i686.img\r\
>    \r\n\r\r\n============= Init TPM Front ================\r\nTpmfront:Error Unable\
>    \ to read device/vtpm/0/backend-id during tpmfront initialization! error = ENOENT\r\
>    \nTpmfront:Info Shutting down tpmfront\r\nclose blk: backend=/local/domain/0/backend/vbd/4531/2049\
>    \ node=device/vbd/2049\r\nclose blk: backend=/local/domain/0/backend/vbd/4531/2051\
>    \ node=device/vbd/2051\r\nclose blk: backend=/local/domain/0/backend/vbd/4531/2128\
>    \ node=device/vbd/2128\r\nPCI: Fatal: No config space access function found\r\n\
>    ipmi_si: Could not set up I/O space\r\nipmi_si: Could not set up I/O space\r\n\
>    ipmi_si: Could not set up I/O space\r\nisapnp: Write Data Register 0xa79 already\
>    \ used\r\nmicrocode: CPU0 update to revision 0xa0b failed\r\nmicrocode: CPU0 update\
>    \ to revision 0xa0b failed\r\nmicrocode: CPU0 update to revision 0xa0b failed\r\
>    \nmicrocode: CPU0 update to revision 0xa0b failed\r\nRestarting system.\r\n"}
>product: RHEL
>region: us-east-1
>result:
>  m1.small:
>    stage1:testcase_01_bash_history:
>    - {command: '[ ! -f ~/.bash_history ] && echo 0 || cat ~/.bash_history | wc -l',
>      expectation: "\r\n0\r\n", result: passed}
>    stage1:testcase_02_selinux_context:
>    - {command: 'restorecon -R -v -n -e /proc -e /sys -e /mnt / | sed -e ''s, context
>        , ,'' -e ''s,^restorecon reset ,,'' | cat > /tmp/restorecon_output.txt &&
>        echo SUCCESS', expectation: "\r\nSUCCESS\r\n", result: passed}
>    - {comment: '
>
>        Lost entries:[[''/var/cache/yum.*'', [''file_t'', ''rpm_var_cache_t'']]]',
>      result: warning}
>    stage1:testcase_03_running_services:
>    - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed,
>      value: 'False'}
>    - {command: chkconfig --list auditd, expectation: '3:on', result: passed}
>    - {command: chkconfig --list crond, expectation: '3:on', result: passed}
>    stage1:testcase_04_cloud_firstboot:
>    - {command: chkconfig --list rh-cloud-firstboot, expectation: '3:off', result: passed}
>    - {command: test -f /etc/sysconfig/rh-cloud-firstboot, result: passed}
>    - {command: cat /etc/sysconfig/rh-cloud-firstboot, expectation: RUN_FIRSTBOOT=NO,
>      result: passed}
>    stage1:testcase_05_grub:
>    - {command: test -h /boot/grub/menu.lst, result: passed}
>    - {command: readlink -e /boot/grub/menu.lst, expectation: /boot/grub/grub.conf,
>      result: passed}
>    - {command: 'grep ''(hd0,0)'' /boot/grub/grub.conf', result: passed}
>    stage1:testcase_06_inittab:
>    - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed,
>      value: 'False'}
>    - {command: 'grep ''^id:'' /etc/inittab', expectation: 'id:3:initdefault', result: passed}
>    stage1:testcase_07_libc6_xen_conf:
>    - {command: test -f /etc/ld.so.conf.d/libc6-xen.conf, result: passed}
>    stage1:testcase_08_memory:
>    - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: '.*\r\nMemTotal:\s*([0-9]+) ',
>      result: passed, value: '[''1711584'']'}
>    - {command: '[ 1711584 -gt 1700000 ]', result: passed}
>    stage1:testcase_09_nameserver:
>    - {command: dig clock.redhat.com | grep 66.187.233.4, result: passed}
>    stage1:testcase_10_networking:
>    - {command: grep "^NETWORKING=yes" /etc/sysconfig/network, result: passed}
>    - {command: egrep "^DEVICE=(|\")eth0(|\")" /etc/sysconfig/network-scripts/ifcfg-eth0,
>      result: passed}
>    stage1:testcase_11_package_set:
>    - {command: 'rpm -qa --queryformat ''%{NAME},'' && echo', match: ".*\r\n(.*),\r\
>        \n.*", result: passed, value: '[''libXtst,perl-ExtUtils-CBuilder,mesa-dri-filesystem,libXinerama,perl-CPAN,basesystem,libXt,dash,kernel-headers,java-1.7.0-openjdk,less,libX11-common,mesa-libGL,cracklib-dicts,redhat-release-server,libXv,xdg-utils,words,gtk2,jline,ql2100-firmware,liboil,alsa-lib,ql2500-firmware,ipa-client,rpcbind,rt61pci-firmware,cas,rhino,ipw2100-firmware,system-config-firewall-tui,libsndfile,libgcc,dstat,bind-libs,ncurses-libs,iwl100-firmware,fipscheck,zlib,aic94xx-firmware,sssd-client,dbus-libs,Red_Hat_Enterprise_Linux-Release_Notes-6-en-US,cvs,nspr,perl-XML-Twig,mailx,libacl,phonon-backend-gstreamer,xmlrpc-c-client,libjpeg-turbo,fprintd-pam,rpm,libtalloc,subscription-manager,gpgme,sed,sysstat,hesiod,libtevent,pcmciautils,libevent,libblkid,openssh-server,libdhash,krb5-libs,setuptool,libyaml,pciutils-libs,acpid,libpath_utils,procps,cpuspeed,policycoreutils,dbus,ledmon,util-linux-ng,pkgconfig,alsa-utils,libdrm,cpio,audit,device-mapper-event-libs,file-libs,latencytop-tui,kbd,lua,mlocate,samba-common,libtiff,lsof,foomatic-db,sysvinit-tools,nano,cryptsetup-luks-libs,perl-version,libitm,hal,perl-Locale-Maketext-Simple,vconfig,kernel,perl-Log-Message,zip,wireless-tools,libtasn1,b43-fwcutter,ypbind,perl-IO-Zlib,libtopology,cyrus-sasl,perl-Object-Accessor,cronie,perl-URI,libffi,perl-Digest-SHA,python-iniparse,libtheora,python-nose,keyutils,python-prettytable,checkpolicy,python-markdown,cups-libs,libproxy,m4,libreport-plugin-rhtsupport,libtar,libreport-plugin-reportuploader,lzo,newt-python,newt,python-ethtool,openjpeg-libs,authconfig,perl-parent,libselinux-python,perl-libwww-perl,sos,perl-XML-Parser,python-rhsm,libXfont,libreport-plugin-kerneloops,ca-certificates,libreport-cli,elfutils,python-ldap,dbus-glib,python-kerberos,eggdbus,setools-libs-python,gstreamer,python-urlgrabber,iw,rhn-setup,MAKEDEV,samba4-libs,ttmkfdir,audit-libs-python,upstart,redhat-lsb-core,hunspell,libxcb,perl-ExtUtils-ParseXS,cairo,perl-File-Fetch,setup,perl-Test-Simple,filesystem,perl-Module-Build,foomatic-db-filesystem,perl-ExtUtils-Embed,tzdata-java,mesa-private-llvm,poppler-data,vim-common,iso-codes,cdparanoia-libs,fontpackages-filesystem,groff,mailcap,coreutils-libs,ncurses-base,cracklib,kbd-misc,coreutils,dhcp-common,jpackage-utils,man-pages,redhat-logos,redhat-indexhtml,hicolor-icon-theme,iwl5000-firmware,openssl,ivtv-firmware,module-init-tools,xorg-x11-drv-ati-firmware,hwdata,atmel-firmware,libssh2,iwl4965-firmware,xorg-x11-fonts-Type1,iwl3945-firmware,ghostscript-fonts,rt73usb-firmware,qt-sqlite,ql23xx-firmware,libpciaccess,rootfiles,poppler,glibc-common,wget,glibc,bind-utils,bash,fipscheck-lib,libcap,at,libstdc++,krb5-workstation,libcom_err,ConsoleKit-libs,libxml2,ConsoleKit,chkconfig,logrotate,audit-libs,nss-sysinit,nss-util,nss-tools,bzip2-libs,libcurl,libpng,gnupg2,db4,rpm-libs,expat,man,libsepol,passwd,shadow-utils,nss_compat_ossl,readline,ethtool,sqlite,mingetty,libuuid,sg3_utils-libs,libSM,plymouth-core-libs,xmlrpc-c,libsss_idmap,keyutils-libs,c-ares,libtdb,gpm-libs,btparser,pixman,libnl,libref_array,libogg,libini_config,which,libsemanage,libcap-ng,iptables,libgpg-error,iputils,libudev,initscripts,elfutils-libs,selinux-policy,bzip2,usermode,binutils,device-mapper,grep,cups,libtirpc,kpartx,nss-softokn,rsyslog,net-tools,openssh,tar,samba-winbind-clients,e2fsprogs-libs,foomatic-db-ppds,dmidecode,dmraid,gdbm,lvm2-libs,perl-libs,cryptsetup-luks,perl-Module-Pluggable,perl,perl-Params-Check,perl-Module-Load-Conditional,perl-IO-Compress-Base,perl-Compress-Raw-Zlib,lcms-libs,perl-Compress-Zlib,perl-Archive-Tar,perl-Term-UI,perl-Module-Loaded,perl-CGI,libmng,gnutls,perl-Compress-Raw-Bzip2,file,xz,cyrus-sasl-gssapi,bc,libselinux-utils,jasper-libs,avahi-libs,libss,diffutils,gmp,libusb,libfontenc,numactl,crash,slang,libcollection,libgfortran,perl-DBIx-Simple,perl-IO-Compress-Bzip2,perl-Parse-CPAN-Meta,perl-HTML-Parser,gdbm-devel,glibc-headers,perl-libxml-perl,atlas,xorg-x11-font-utils,p11-kit-trust,perl-Time-Piece,tmpwatch,shared-mime-info,gamin,atk,libgudev1,grubby,gstreamer-tools,libxslt,flac,tcp_wrappers,libutempter,patch,db4-utils,pinentry,libnih,ed,libgomp,db4-cxx,perl-Test-Harness,perl-ExtUtils-MakeMaker,perl-IPC-Cmd,libXfixes,libXcursor,libXft,pulseaudio-libs,giflib,ghostscript,redhat-lsb-printing,qt3,libXxf86vm,mesa-dri1-drivers,mesa-libGLU,libXcomposite,pango,python-matplotlib,fprintd,libvisual,cloud-init,rh-amazon-rhui-client,yum-utils,system-config-network-tui,redhat-support-tool,perf,iotop,selinux-policy-targeted,iwl5150-firmware,iwl6050-firmware,iwl6000g2a-firmware,iwl6000-firmware,man-pages-overrides,perl-core,perl-XML-Grove,perl-XML-Dumper,qt-x11,redhat-lsb-graphics,redhat-lsb,latencytop,hwloc,vim-enhanced,libhugetlbfs-utils,kexec-tools,irqbalance,lvm2,cifs-utils,openssh-clients,parted,biosdevname,quota,rng-tools,microcode_ctl,smartmontools,tcpdump,elinks,usbutils,perl-Crypt-SSLeay,pam_passwdqc,psacct,powertop,ntsysv,valgrind,oprofile,cyrus-sasl-plain,ltrace,rsync,attr,scl-utils,hal-info,mtr,plymouth,setserial,dracut-kernel,dosfstools,autofs,rdate,crda,bridge-utils,ntpdate,strace,yp-tools,latrace,certmonger,crash-trace-command,oddjob-mkhomedir,gpg-pubkey,postfix,xdelta,cronie-anacron,virt-what,libasyncns,python,python-dateutil,python-ordereddict,python-pygments,python-nss,python-boto,python-configobj,python-netaddr,pytz,libproxy-bin,libproxy-python,python-backports-ssl_match_hostname,libreport-python,libreport,rpm-python,abrt,python-lxml,libxml2-python,m2crypto,python-dmidecode,pyOpenSSL,nfs-utils,pygobject2,redhat-support-lib-python,python-urllib3,python-gudev,abrt-addon-ccpp,abrt-tui,abrt-addon-kerneloops,libreport-plugin-logger,python-cheetah,PyYAML,python-iwlib,pygpgme,libipa_hbac-python,libsemanage-python,python-crypto,python-pycurl,yum,rhnsd,yum-rhn-plugin,pytalloc,sssd,python-krbV,policycoreutils-python,pax,SDL,libXau,libX11,libXrender,libXi,perl-Archive-Extract,tzdata,libXrandr,perl-CPANPLUS,latencytop-common,libXdamage,libhugetlbfs,xml-common,foomatic,ncurses,dejavu-fonts-common,pycairo,gzip,busybox,mesa-dri-drivers,pam,kernel-firmware,libthai,plymouth-scripts,ql2400-firmware,libfprint,fontconfig,libertas-usb8388-firmware,seekwatcher,qt,zd1211-firmware,yum-plugin-security,urw-fonts,ql2200-firmware,abrt-cli,pciutils,ipw2200-firmware,grub,poppler-utils,nss-softokn-freebl,bfa-firmware,mysql-libs,libattr,b43-openfwwf,pam_krb5,info,iwl1000-firmware,polkit,popt,hunspell-en,nss,freetype,gstreamer-plugins-base,openldap,gawk,redhat-lsb-compat,curl,elfutils-libelf,java-1.6.0-openjdk,libuser,libselinux,gdb,libaio,cyrus-sasl-lib,systemtap-runtime,libsss_autofs,libICE,samba-client,hdparm,tcp_wrappers-libs,numad,libpcap,findutils,dhclient,sgpio,xz-libs,readahead,ustr,libidn,prelink,iproute,libgcrypt,sudo,udev,libgssglue,pinfo,device-mapper-libs,pcre,tcsh,device-mapper-event,libvorbis,crash-gcore-command,libcgroup,psmisc,efibootmgr,samba-winbind,make,unzip,dmraid-events,perl-Pod-Escapes,nfs4-acl-tools,pm-utils,perl-Pod-Simple,traceroute,dracut,perl-Module-Load,rfkill,mdadm,perl-Package-Constants,eject,ntp,perl-IO-Compress-Zlib,trace-cmd,oddjob,perl-Log-Message-Simple,gpg-pubkey,crontabs,perl-Module-CoreList,iptables-ipv6,p11-kit,python-libs,perl-DBI,python-setuptools,libldb,system-config-firewall-base,vim-minimal,python-argparse,acl,python-chardet,e2fsprogs,python-six,snappy,libreport-compat,libedit,abrt-libs,pth,python-simplejson,libusb1,dbus-python,perl-DBD-SQLite,nfs-utils-lib,perl-HTML-Tagset,rhnlib,dejavu-sans-fonts,python-requests,glibc-devel,abrt-addon-python,xz-lzma-compat,libreport-plugin-mailx,perl-Time-HiRes,numpy,glib2,yum-metadata-parser,libipa_hbac,ipa-python,desktop-file-utils,python-paramiko,hal-libs,rhn-client-tools,setools-libs,rhn-check,device-mapper-persistent-data,blktrace,portreserve,gettext,time,theora-tools,db4-devel,libXext,perl-devel'']'}
>    - {comment: 'Newly introduced packages: [''db4-cxx'', ''db4-devel'', ''gdbm-devel'',
>        ''glibc-devel'', ''glibc-headers'', ''kernel-headers'', ''lzo'', ''mesa-private-llvm'',
>        ''p11-kit'', ''p11-kit-trust'', ''python-backports-ssl_match_hostname'', ''python-chardet'',
>        ''python-ordereddict'', ''python-requests'', ''python-six'', ''python-urllib3'',
>        ''redhat-support-lib-python'', ''redhat-support-tool'', ''shared-mime-info'',
>        ''snappy'', ''ttmkfdir'', ''xorg-x11-fonts-Type1'']', result: passed}
>    - {comment: All required package are included, result: passed}
>    stage1:testcase_12_passwd_group:
>    - {command: 'grep ''^root:x:0:0:root:/root:/bin/bash'' /etc/passwd', result: passed}
>    - {command: 'grep ''^nobody:x:99:99:Nobody:/:/sbin/nologin'' /etc/passwd', result: passed}
>    - {command: 'grep ''^sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin''
>        /etc/passwd', result: passed}
>    - {command: 'grep ''^root:x:0:'' /etc/group', result: passed}
>    - {command: 'grep ''^daemon:x:2:bin,daemon'' /etc/group', result: passed}
>    - {command: 'grep ''^bin:x:1:bin,daemon'' /etc/group', result: passed}
>    stage1:testcase_13_resize2fs:
>    - {command: df -h | grep 15G, result: passed}
>    stage1:testcase_14_host_details:
>    - {command: '[ ! -z ''`curl http://169.254.169.254/latest/dynamic/instance-identity/signature`''
>        ]', result: passed}
>    - {command: 'curl http://169.254.169.254/latest/dynamic/instance-identity/document',
>      match: '.*({.*}).*', result: passed, value: '[''{\r\n  "instanceId" : "i-ef785fbf",\r\n  "billingProducts"
>        : [ "bp-63a5400a" ],\r\n  "imageId" : "ami-8a8476e2",\r\n  "architecture"
>        : "i386",\r\n  "pendingTime" : "2014-06-11T10:49:42Z",\r\n  "instanceType"
>        : "m1.small",\r\n  "accountId" : "567014786890",\r\n  "kernelId" : "aki-8f9dcae6",\r\n  "ramdiskId"
>        : null,\r\n  "region" : "us-east-1",\r\n  "version" : "2010-08-31",\r\n  "availabilityZone"
>        : "us-east-1c",\r\n  "devpayProductCodes" : null,\r\n  "privateIp" : "10.214.19.81"\r\n}'']'}
>    - {command: '[ ''ami-8a8476e2'' = ''ami-8a8476e2'' ]', result: passed}
>    - {command: '[ ''i386'' = ''i386'' ]', result: passed}
>    - {command: '[ ''us-east-1'' = ''us-east-1'' ]', result: passed}
>    - {command: '[ ''bp-63a5400a'' = ''bp-63a5400a'' ]', result: passed}
>    stage1:testcase_15_rhel_version:
>    - {command: 'rpm -q --qf ''%{RELEASE}
>
>        '' --whatprovides redhat-release', match: '.*\r\n([0-9]\.[0-9]+\..*)\r\n.*',
>      result: passed, value: '[''6.5.0.1.el6'']'}
>    - {command: '[ ''6.5'' = ''6.5'' ]', result: passed}
>    stage1:testcase_16_selinux:
>    - {command: getenforce, expectation: "\r\nEnforcing\r\n", result: passed}
>    - {command: grep '^SELINUX=enforcing' /etc/sysconfig/selinux, result: passed}
>    - {command: grep '^SELINUXTYPE=targeted' /etc/sysconfig/selinux, result: passed}
>    - {command: setenforce Permissive && getenforce, expectation: "\r\nPermissive\r\
>        \n", result: passed}
>    - {command: setenforce Enforcing && getenforce, expectation: "\r\nEnforcing\r\n",
>      result: passed}
>    stage1:testcase_17_shells:
>    - {command: grep 'bin/bash$' /etc/shells, result: passed}
>    - {command: grep 'bin/nologin$' /etc/shells, result: passed}
>    stage1:testcase_18_sshd:
>    - {command: rpm -q systemd > /dev/null && echo True || echo False, result: passed,
>      value: 'False'}
>    - {command: 'chkconfig --list sshd | grep ''0:off[[:space:]]*1:off[[:space:]]*2:on[[:space:]]*3:on[[:space:]]*4:on[[:space:]]*5:on[[:space:]]*6:off''',
>      result: passed}
>    - {command: service sshd status | grep running, result: passed}
>    - {command: grep 'PasswordAuthentication no' /etc/ssh/sshd_config, result: passed}
>    stage1:testcase_19_rhn_system_id:
>    - {command: '[ ! -f /etc/sysconfig/rhn/systemid ]', result: passed}
>    stage1:testcase_20_auditd:
>    - {command: md5sum /etc/sysconfig/auditd  | cut -f 1 -d ' ', expectation: d4d43637708e30418c30003e212f76fc,
>      result: passed}
>    - {command: md5sum /etc/audit/auditd.conf | cut -f 1 -d ' ', expectation: e1886162554c18906df2ecd258aa4794,
>      result: passed}
>    - {command: md5sum /etc/audit/audit.rules | cut -f 1 -d ' ', expectation: f9869e1191838c461f5b9051c78a638d,
>      result: passed}
>    stage1:testcase_21_disk_size_format:
>    - {command: 'mount | grep ''^/dev'' | awk ''{print $1}''', result: passed, value: "/dev/xvda1\r\
>        \n/dev/xvdf"}
>    - {command: 'echo ''###'' ;mount | grep ''^/dev/xvda1'' | awk ''{print $3}'';
>        echo ''###''', match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''/'']'}
>    - {command: 'echo ''###'' ;mount | grep ''^/dev/xvda1'' | awk ''{print $5}'';
>        echo ''###''', match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''ext4'']'}
>    - {command: '[ `df -k /dev/xvda1 | awk ''{ print $2 }'' | tail -n 1` -gt 3937219
>        ]', result: passed}
>    - {command: '[ ext4 = ext4 ]', result: passed}
>    - {command: 'echo ''###'' ;mount | grep ''^/dev/xvdf'' | awk ''{print $3}''; echo
>        ''###''', match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''/mnt'']'}
>    - {command: 'echo ''###'' ;mount | grep ''^/dev/xvdf'' | awk ''{print $5}''; echo
>        ''###''', match: ".*\r\n###\r\n(.*)\r\n###\r\n.*", result: passed, value: '[''ext3'']'}
>    - {command: '[ `df -k /dev/xvdf | awk ''{ print $2 }'' | tail -n 1` -gt 3937219
>        ]', result: passed}
>    - {command: '[ ext3 = ext3 ]', result: passed}
>    stage1:testcase_22_gpg_keys:
>    - {command: grep '^gpgcheck=' /etc/yum.repos.d/redhat-*.repo | cut -d\= -f2 |
>        sort -uf | tr -d ' ', expectation: "\r\n1\r\n", result: passed}
>    - {command: rpm -qa gpg-pubkey* | wc -l, expectation: "\r\n2\r\n", result: passed}
>    - {command: rpm -q gpg-pubkey-2fa658e0-45700c69, result: passed}
>    - {command: rpm -q gpg-pubkey-fd431d51-4ae0493b, result: passed}
>    stage1:testcase_23_syslog:
>    - {command: md5sum /etc/rsyslog.conf | cut -f 1 -d ' ', result: passed, value: 8b91b32300134e98ef4aee632ed61e21}
>    - {comment: /etc/rsyslog.conf md5 matches, result: passed}
>    stage1:testcase_24_yum_plugin:
>    - {command: 'grep ''^enabled[[:space:]]*=[[:space:]]*[^0 ]'' /etc/yum/pluginconf.d/rhnplugin.conf',
>      result: passed}
>    stage1:testcase_25_uname:
>    - {command: 'uname -r | sed -e ''s,\.i686$,,''  -e ''s,\.x86_64$,,''', result: passed,
>      value: 2.6.32-431.17.1.el6}
>    - {command: 'rpm -q --last kernel | sed -e ''s,^kernel-,,'' -e ''s,[[:space:]].*$,,''
>        | head -1 | sed -e ''s,\.i686$,,''  -e ''s,\.x86_64$,,''', result: passed,
>      value: 2.6.32-431.17.1.el6}
>    - {command: uname -o, result: passed, value: GNU/Linux}
>    - {command: '[ 2.6.32-431.17.1.el6 = 2.6.32-431.17.1.el6 ]', result: passed}
>    - {command: '[ GNU/Linux = ''GNU/Linux'' ]', result: passed}
>    - {command: grep UPDATEDEFAULT=yes /etc/sysconfig/kernel, result: passed}
>    - {command: grep DEFAULTKERNEL=kernel /etc/sysconfig/kernel, result: passed}
>    stage1:testcase_26_verify_rpms:
>    - actual modified files: {/etc/pam.d/fingerprint-auth: true, /etc/pam.d/password-auth: true,
>        /etc/pam.d/smartcard-auth: true, /etc/pam.d/system-auth: true, /etc/ssh/sshd_config: true}
>      expected modified files: {/etc/pam.d/fingerprint-auth: true, /etc/pam.d/password-auth: true,
>        /etc/pam.d/smartcard-auth: true, /etc/pam.d/system-auth: true, /etc/ssh/sshd_config: true}
>      result: passed
>    stage1:testcase_27_yum_repos:
>    - actual repos: {rhel-source: false, rhel-source-beta: false, rhui-REGION-client-config-server-6: true,
>        rhui-REGION-rhel-server-debug-rh-common: false, rhui-REGION-rhel-server-debug-rhscl: false,
>        rhui-REGION-rhel-server-debug-supplementary: false, rhui-REGION-rhel-server-releases: true,
>        rhui-REGION-rhel-server-releases-optional: true, rhui-REGION-rhel-server-releases-optional-source: false,
>        rhui-REGION-rhel-server-releases-source: false, rhui-REGION-rhel-server-rh-common: true,
>        rhui-REGION-rhel-server-rhscl: true, rhui-REGION-rhel-server-source-rh-common: false,
>        rhui-REGION-rhel-server-source-rhscl: false, rhui-REGION-rhel-server-source-supplementary: false,
>        rhui-REGION-rhel-server-supplementary: false}
>      expected repos: {rhel-source: false, rhel-source-beta: false, rhui-REGION-client-config-server-6: true,
>        rhui-REGION-rhel-server-debug-rh-common: false, rhui-REGION-rhel-server-debug-rhscl: false,
>        rhui-REGION-rhel-server-debug-supplementary: false, rhui-REGION-rhel-server-releases: true,
>        rhui-REGION-rhel-server-releases-optional: true, rhui-REGION-rhel-server-releases-optional-source: false,
>        rhui-REGION-rhel-server-releases-source: false, rhui-REGION-rhel-server-rh-common: true,
>        rhui-REGION-rhel-server-rhscl: true, rhui-REGION-rhel-server-source-rh-common: false,
>        rhui-REGION-rhel-server-source-rhscl: false, rhui-REGION-rhel-server-source-supplementary: false,
>        rhui-REGION-rhel-server-supplementary: false}
>      result: passed
>    stage1:testcase_29_swap_file:
>    - {command: 'parted -l | grep linux-swap | awk ''{print $4}'' | awk -F''MB'' ''{print
>        $1}''', result: passed, value: '940'}
>    - {command: 'parted -l | grep -B 6 swap | grep ''^Disk /'' | awk ''{print $2}''
>        | sed ''$s/.$//'' | head -1', result: passed, value: /dev/xvda3}
>    - {command: '[ 940 -gt 0 ]', result: passed}
>    - {command: swapoff /dev/xvda3 ; echo, result: passed}
>    - {command: swapon /dev/xvda3, result: passed}
>    - {command: swapoff /dev/xvda3 && swapon /dev/xvda3, result: passed}
>    stage1:testcase_30_rhn_certificates:
>    - {command: rpm -ql rh-amazon-rhui-client | egrep '.*\.(pem|crt)', result: passed,
>      value: "/etc/pki/rhui/ca.crt\r\n/etc/pki/rhui/cdn.redhat.com-chain.crt\r\n/etc/pki/rhui/product/content-rhel6.crt\r\
>        \n/etc/pki/rhui/product/rhui-client-config-server-6.crt"}
>    - {command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates | grep notAfter,
>      result: passed, value: 'notAfter=Nov 30 19:46:02 2017 GMT'}
>    - {comment: '(/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02; expecting: 2017-11-10
>        00:00:00', result: passed}
>    - {command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt -noout -dates
>        | grep notAfter, result: passed, value: 'notAfter=Mar 13 11:24:54 2030 GMT'}
>    - {comment: '(/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13 11:24:54;
>        expecting: 2017-11-10 00:00:00', result: passed}
>    - {command: openssl x509 -in /etc/pki/rhui/product/content-rhel6.crt -noout -dates
>        | grep notAfter, result: passed, value: 'notAfter=Nov 16 15:35:48 2023 GMT'}
>    - {comment: '(/etc/pki/rhui/product/content-rhel6.crt).notAfter=2023-11-16 15:35:48;
>        expecting: 2017-11-10 00:00:00', result: passed}
>    - {command: openssl x509 -in /etc/pki/rhui/product/rhui-client-config-server-6.crt
>        -noout -dates | grep notAfter, result: passed, value: 'notAfter=Nov 30 18:38:07
>        2020 GMT'}
>    - {comment: '(/etc/pki/rhui/product/rhui-client-config-server-6.crt).notAfter=2020-11-30
>        18:38:07; expecting: 2017-11-10 00:00:00', result: passed}
>    stage1:testcase_31_subscription_management:
>    - {command: yum --disablerepo='*' -v repolist, expectation: Not loading "subscription-manager"
>        plugin, result: passed}
>    - {command: yum --enableplugin=subscription-manager --disablerepo='*' -v repolist,
>      expectation: Loading "subscription-manager" plugin, result: passed}
>    - {command: subscription-manager list, expectation: Installed Product Status,
>      result: passed}
>    stage1:testcase_32_ephemeral:
>    - {command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l, result: passed, value: '1'}
>    - {command: fdisk -l /dev/xvdf | grep '^Disk', result: passed}
>    - {command: grep '/dev/xvdf ' /proc/mounts  | wc -l, result: passed, value: '1'}
>    stage1:testcase_33_userdata:
>    - {command: 'rpm -q --queryformat ''%{NAME}
>
>        '' cloud-init', result: passed, value: cloud-init}
>    - {command: ls -l /userdata_test, result: passed}
>    - {command: rpm -q xdelta, result: passed}
>    stage1:testcase_34_cpu:
>    - {command: cat /proc/cpuinfo | grep '^processor' | wc -l, expectation: '1', result: passed}
>    stage1:testcase_360_ebs:
>    - {command: ls -l /dev/xvdk, result: passed}
>    - {command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l, result: passed, value: '1'}
>    - {command: mkfs.vfat -I /dev/xvdk, result: passed}
>    stage1:testcase_39_root_is_locked:
>    - {command: 'egrep "^root:(\!\!|\*|x|locked):" /etc/shadow', result: passed}
>    stage1:testcase_41_rh_amazon_rhui_client:
>    - {command: rpm -q rh-amazon-rhui-client, result: passed}
>    stage1:testcase_42_ipv6:
>    - {command: grep NETWORKING_IPV6=no /etc/sysconfig/network, result: passed}
>    stage1:testcase_50_yum_package_install:
>    - {command: yum clean all, result: passed}
>    - {command: yum repolist, result: passed}
>    - {command: yum search zsh, result: passed}
>    - {command: yum -y install zsh, result: passed}
>    - {command: 'rpm -q --queryformat ''%{NAME}'' zsh', result: passed}
>    - {command: rpm -e zsh, result: passed}
>    stage1:testcase_55_yum_group_install:
>    - {command: yum -y groupinstall 'Development tools', result: passed}
>    - {command: rpm -q glibc-devel, result: passed}
>    stage1:testcase_60_yum_update:
>    - {command: 'rpm -q matahari-net && yum -y remove matahari-net ||:', result: passed}
>    - {command: yum -y install kernel, result: passed}
>    - {command: yum -y update, result: passed}
>    stage1:testcase_61_yum_proxy:
>    - {comment: No proxy set, result: skip}
>    stage1:testcase_80_no_avc_denials:
>    - {command: 'echo START; grep ''avc:[[:space:]]*denied'' /var/log/messages /var/log/audit/audit.log
>        | grep -v userdata; echo END', expectation: "\r\nSTART\r\nEND\r\n", result: passed}
>    stage1:testcase_99_reboot:
>    - {command: echo 'doing reboot', result: passed}
>    - {command: nohup sleep 1s && nohup reboot &, result: passed}
>    stage2:testcase_08_memory:
>    - {command: 'grep --color=none ''MemTotal:'' /proc/meminfo', match: '.*\r\nMemTotal:\s*([0-9]+) ',
>      result: passed, value: '[''1711584'']'}
>    - {command: '[ 1711584 -gt 1700000 ]', result: passed}
>    stage2:testcase_25_uname:
>    - {command: 'uname -r | sed -e ''s,\.i686$,,''  -e ''s,\.x86_64$,,''', result: passed,
>      value: 2.6.32-431.17.1.el6}
>    - {command: 'rpm -q --last kernel | sed -e ''s,^kernel-,,'' -e ''s,[[:space:]].*$,,''
>        | head -1 | sed -e ''s,\.i686$,,''  -e ''s,\.x86_64$,,''', result: passed,
>      value: 2.6.32-431.17.1.el6}
>    - {command: uname -o, result: passed, value: GNU/Linux}
>    - {command: '[ 2.6.32-431.17.1.el6 = 2.6.32-431.17.1.el6 ]', result: passed}
>    - {command: '[ GNU/Linux = ''GNU/Linux'' ]', result: passed}
>    - {command: grep UPDATEDEFAULT=yes /etc/sysconfig/kernel, result: passed}
>    - {command: grep DEFAULTKERNEL=kernel /etc/sysconfig/kernel, result: passed}
>    stage2:testcase_37_sshd_bug923996:
>    - {command: '[ `grep ^PermitRootLogin /etc/ssh/sshd_config | wc -l` -eq 0 ]',
>      result: passed}
>    stage2:testcase_80_no_avc_denials:
>    - {command: 'echo START; grep ''avc:[[:space:]]*denied'' /var/log/messages /var/log/audit/audit.log
>        | grep -v userdata; echo END', expectation: "\r\nSTART\r\nEND\r\n", result: passed}
>version: '6.5'

Actions: View

Attachments on bug 1108123: 907640