> On Oct 21, 2014, at 8:53 PM, Adam Williamson <adamwill@xxxxxxxxxxxxxxxxx> wrote: > > Today I did some server validation testing - and, unfortunately, filed > multiple blocker bugs: > > https://bugzilla.redhat.com/show_bug.cgi?id=1155301 > https://bugzilla.redhat.com/show_bug.cgi?id=1155304 > https://bugzilla.redhat.com/show_bug.cgi?id=1155329 These first three are all SELinux policy. CCing Miroslav to look at them. Miroslav, I'll be online in about 90 minutes to discuss this on IRC if you need me to, but the short version is this: previously, ipa-server-install would have always been run by root running in the unconfined domain. We now have a service that will invoke it (rolekit). We need to update the policy to allow the roled daemon to perform these tasks. > https://bugzilla.redhat.com/show_bug.cgi?id=1155334 Simo, this is likely the bug that Dan Mossor was trying to report yesterday as well. Can you please get the FreeIPA team to look at this ASAP? As noted, all of these are likely to be approved as blockers to Fedora 21 Beta and we really don't want to slip if we can help it; the current target date is already too close to the winter holidays for our comfort. > > I also wrote a couple of new test cases and modified the Server release > validation matrix somewhat: > > * https://fedoraproject.org/wiki/QA:Testcase_Server_role_deploy is a > generic 'test basic role functionality' test > * https://fedoraproject.org/wiki/QA:Testcase_Server_cockpit_basic covers > the Cockpit functionality that's meant to be present at Beta > > I added new tables to the matrix - > https://fedoraproject.org/wiki/Template:Server_test_matrix - which apply > the generic role functionality test to 'Release-blocking roles' and > 'Non-release-blocking roles' - at present we only have one of each, but > the idea is that the test will be listed once for each role we ship, in > the appropriate table. I added the new Cockpit test directly to the > 'general tests' section (where the tests we previously had live). > > I've applied all these changes to > https://fedoraproject.org/wiki/Test_Results:Fedora_21_Beta_TC4_Server , > and they'll show up 'automagically' for all future composes. Thanks, Adam. I'll look at them in greater detail when I get to my desk (currently typing on a mobile device). Thanks for the comprehensive testing yesterday. > > We still need test cases for the specific FreeIPA functionality covered > in the criteria, and a couple other bits and pieces we specified for > Beta; I'll look at adding those ASAP. > -- > Adam Williamson > Fedora QA Community Monkey > IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net > http://www.happyassassin.net > > _______________________________________________ > server mailing list > server@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/server -- test mailing list test@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
