Bug 1496562
| Summary: | freeipa tests in Fedora28+ shouldn't test for specific NSS database filenames, but should be flexible | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Kai Engert (:kaie) (inactive account) <kengert> |
| Component: | pki-core | Assignee: | Matthew Harmsen <mharmsen> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 28 | CC: | abokovoy, alee, awilliam, cheimes, dueno, edewata, gmarr, hkario, ipa-maint, jhrozek, kwright, mharmsen, mkosek, normand, pasik, pvoborni, rcritten, robatino, rrelyea, ssorce, tomek |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | AcceptedBlocker | ||
| Fixed In Version: | pki-core-10.6.0-0.2.fc28 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-03-18 00:48:41 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1469204, 1496560 | ||
|
Description
Kai Engert (:kaie) (inactive account)
2017-09-27 18:53:08 UTC
This will be done as part of https://pagure.io/freeipa/issue/7049 These "checks" are for things like file backups, permissions, etc. Upstream ticket: https://pagure.io/freeipa/issue/7209 FYI, I'd like to make the change to NSS next week. I believe this is now affecting (and blocking) Rawhide. In recent Rawhide composes, the openQA FreeIPA tests fail during server deployment, with these errors logged from ipa-server-install :
Installing CA into /var/lib/pki/pki-tomcat.
Storing deployment configuration into /etc/sysconfig/pki/tomcat/pki-tomcat/ca/deployment.cfg.
Installation failed: File '/etc/pki/pki-tomcat/alias/cert8.db' is either missing or is NOT a regular file!
2017-11-27T13:23:39Z DEBUG stderr=pkispawn : ERROR ....... File '/etc/pki/pki-tomcat/alias/cert8.db' is either missing or is NOT a regular file!
2017-11-27T13:23:39Z CRITICAL Failed to configure CA instance: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmppefbup0h' returned non-zero exit status 1.
2017-11-27T13:23:39Z CRITICAL See the installation logs and the following files/directories for more information:
2017-11-27T13:23:39Z CRITICAL /var/log/pki/pki-tomcat
2017-11-27T13:23:39Z DEBUG Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/ipaserver/install/dogtaginstance.py", line 147, in spawn_instance
ipautil.run(args, nolog=nolog_list)
File "/usr/lib/python3.6/site-packages/ipapython/ipautil.py", line 523, in run
raise CalledProcessError(p.returncode, arg_string, str(output))
subprocess.CalledProcessError: Command '/usr/sbin/pkispawn -s CA -f /tmp/tmppefbup0h' returned non-zero exit status 1.
Proposing as an F28 Beta blocker; this is a clear violation of Basic criterion "Release-blocking roles and the supported role configuration interfaces must meet the core functional Role Definition Requirements to the extent that supported roles can be successfully deployed, started, stopped, brought to a working configuration, and queried", as 'domain controller' is a release-blocking role.
Discussed during the 2017-12-11 blocker review meeting: [1] The decision to classify this bug as an AcceptedBlocker was made as it violates the following blocker criteria: "Release-blocking roles and the supported role configuration interfaces must meet the core functional Role Definition Requirements to the extent that supported roles can be successfully deployed, started, stopped, brought to a working configuration, and queried" [1] https://meetbot.fedoraproject.org/fedora-blocker-review/2017-12-11/f28-blocker-review.2017-12-11-17.01.txt *** Bug 1530074 has been marked as a duplicate of this bug. *** Latest tests fail on https://bugzilla.redhat.com/show_bug.cgi?id=1542600 Not sure if we're past this one now, or if that one happens before this one. This bug appears to have been reported against 'rawhide' during the Fedora 28 development cycle. Changing version to '28'. *now* rawhide is failing on: https://bugzilla.redhat.com/show_bug.cgi?id=1551677 again not sure if that happens before or after this. basically I'm only going to close this once we have at least one compose where ipa-server-install actually *succeeds*. freeipa-4.6.90.pre1-1.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-2fd7295cb9 dogtag-pki-10.6.0-0.2.fc28, dogtag-pki-theme-10.6.0-0.2.fc28, freeipa-4.6.90.pre1-1.fc28, pki-console-10.6.0-0.2.fc28, pki-core-10.6.0-0.2.fc28, tomcat-8.5.29-1.fc28, tomcatjss-7.3.0-0.2.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-2fd7295cb9 dogtag-pki-10.6.0-0.2.fc28, dogtag-pki-theme-10.6.0-0.2.fc28, freeipa-4.6.90.pre1-1.fc28, pki-console-10.6.0-0.2.fc28, pki-core-10.6.0-0.2.fc28, tomcat-8.5.29-1.fc28, tomcatjss-7.3.0-0.2.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report. |