Bug 1948274

Summary:	HE deployment checks host instead of appliance distribution when applying openscap profile
Product:	[oVirt] ovirt-ansible-collection	Reporter:	Asaf Rachmani <arachman>
Component:	hosted-engine-setup	Assignee:	Asaf Rachmani <arachman>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Nikolai Sednev <nsednev>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	1.4.1	CC:	bugs, sbonazzo
Target Milestone:	ovirt-4.4.6	Keywords:	Triaged
Target Release:	1.4.2	Flags:	pm-rhel: ovirt-4.4+ sbonazzo: devel_ack+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ovirt-ansible-collection-1.4.2	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-05-05 05:36:34 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Integration	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Asaf Rachmani 2021-04-11 10:29:18 UTC

Description of problem:
HE deployment checks host instead of appliance distribution when applying openscap profile

Version-Release number of selected component:
rhel 8.3 (host)
ovirt-ansible-collection-1.4.1-1.el8.noarch
ovirt-engine-appliance-4.4-20201110154142.1.el8.x86_64

How reproducible:
100%

Steps to Reproduce:
1. Install ovirt-appliance on a host that is based on rhel8.
2. Run hosted-engine deployment.
3. Apply openscap profile.

Actual results:
Deployment checks host distribution.

Expected results:
Deployment should check appliance distribution.

Comment 1 Asaf Rachmani 2021-04-12 09:04:38 UTC

For verification please check the 'oscap_dist' variable in ovirt-hosted-engine-setup log file.

Comment 2 Sandro Bonazzola 2021-05-04 12:43:44 UTC

ovirt-ansible-collection:master]$ git tag --contains 7e21099a1c280b2a2e0405ea4d31bf01e8105444
1.4.2-1

Comment 3 Nikolai Sednev 2021-05-04 13:52:44 UTC

[ INFO  ] skipping: [localhost]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Get appliance distribution]
[ INFO  ] ok: [localhost -> nsednev-he-1.qa.lab.tlv.redhat.com]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Initialize OpenSCAP variables]
[ INFO  ] ok: [localhost -> nsednev-he-1.qa.lab.tlv.redhat.com]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Set OpenSCAP datastream path]
[ INFO  ] ok: [localhost -> nsednev-he-1.qa.lab.tlv.redhat.com]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Verify OpenSCAP datastream]
[ INFO  ] ok: [localhost -> nsednev-he-1.qa.lab.tlv.redhat.com]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Set default OpenSCAP profile]
[ INFO  ] changed: [localhost -> nsednev-he-1.qa.lab.tlv.redhat.com]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Apply OpenSCAP profile]
[ INFO  ] changed: [localhost -> nsednev-he-1.qa.lab.tlv.redhat.com]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Reset PermitRootLogin for sshd]
[ INFO  ] changed: [localhost -> nsednev-he-1.qa.lab.tlv.redhat.com]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Reboot the engine VM to ensure that FIPS is enabled]
[ INFO  ] changed: [localhost -> nsednev-he-1.qa.lab.tlv.redhat.com]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Check if FIPS mode is enabled]
[ INFO  ] changed: [localhost -> nsednev-he-1.qa.lab.tlv.redhat.com]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Enforce FIPS mode on CentOS]
[ INFO  ] skipping: [localhost]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Enforce FIPS mode on Rhel]
[ INFO  ] skipping: [localhost]
[ INFO  ] TASK [ovirt.ovirt.hosted_engine_setup : Include before engine-setup custom tasks files for the engine VM]

2021-05-04 16:19:38,194+0300 DEBUG var changed: host "localhost" var "oscap_dist" type "<class 'ansible.utils.unsafe_p
roxy.AnsibleUnsafeText'>" value: ""RedHat""
/var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-ansible-bootstrap_local_vm-20210504160951-5pnszj.log

Tested on:
ovirt-engine-setup-4.4.6.6-0.10.el8ev.noarch
ovirt-hosted-engine-ha-2.4.6-1.el8ev.noarch
ovirt-hosted-engine-setup-2.5.0-2.el8ev.noarch
Linux 4.18.0-303.el8.x86_64 #1 SMP Wed Mar 31 01:33:15 EDT 2021 x86_64 x86_64 x86_64 GNU/Linux

Comment 4 Sandro Bonazzola 2021-05-05 05:36:34 UTC

This bugzilla is included in oVirt 4.4.6 release, published on May 4th 2021.

Since the problem described in this bug report should be resolved in oVirt 4.4.6 release, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.