From 5661cdadcabc37dd0a767a7b624f077512f06403 Mon Sep 17 00:00:00 2001 From: James Antill Date: Mon, 20 Feb 2023 01:55:50 -0500 Subject: [PATCH] Update yaml --- .gitignore | 2 + container-tools-2.0.yaml | 235 ++++++++++++++++++ container-tools.yaml | 110 ++++++++ gating.yaml | 8 + tests/roles/bats_installed/tasks/main.yml | 12 + tests/roles/fetch_pkg/tasks/main.yml | 36 +++ tests/roles/nonroot_user/tasks/main.yml | 7 + .../files/helper.buildah-root.sh | 37 +++ .../run_bats_tests/files/run_bats_tests.sh | 103 ++++++++ tests/roles/run_bats_tests/tasks/main.yml | 50 ++++ .../run_bats_tests/tasks/run_one_test.yml | 52 ++++ tests/tests.yml | 48 ++++ 12 files changed, 700 insertions(+) create mode 100644 .gitignore create mode 100644 container-tools-2.0.yaml create mode 100644 container-tools.yaml create mode 100644 gating.yaml create mode 100644 tests/roles/bats_installed/tasks/main.yml create mode 100644 tests/roles/fetch_pkg/tasks/main.yml create mode 100644 tests/roles/nonroot_user/tasks/main.yml create mode 100644 tests/roles/run_bats_tests/files/helper.buildah-root.sh create mode 100755 tests/roles/run_bats_tests/files/run_bats_tests.sh create mode 100644 tests/roles/run_bats_tests/tasks/main.yml create mode 100644 tests/roles/run_bats_tests/tasks/run_one_test.yml create mode 100644 tests/tests.yml diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..ef35754 --- /dev/null +++ b/.gitignore @@ -0,0 +1,2 @@ +artifacts +tests/packages diff --git a/container-tools-2.0.yaml b/container-tools-2.0.yaml new file mode 100644 index 0000000..ae66f20 --- /dev/null +++ b/container-tools-2.0.yaml @@ -0,0 +1,235 @@ +--- +document: modulemd +version: 2 +data: + name: container-tools + stream: 2.0 + version: 8050020211110012904 + context: faa19cc5 + summary: Stable versions of podman 1.6, buildah 1.11, skopeo 0.1, runc, conmon, + etc as well as dependencies such as container-selinux built and tested together, + and supported as documented on the Application Stream lifecycle page. + description: >- + Stable versions of podman 1.6, buildah 1.11, skopeo 0.1, runc, conmon, CRIU, Udica, + etc as well as dependencies such as container-selinux built and tested together. + Released with RHEL 8.2 and supported for 24 months. During the support lifecycle, + back ports of important, critical vulnerabilities (CVEs, RHSAs) and bug fixes + (RHBAs) are provided to this stream, and versions do not move forward. For more + information see: https://access.redhat.com/support/policy/updates/containertools + license: + module: + - MIT + xmd: + mbs: + buildrequires: + go-toolset: + context: 8aa62369 + filtered_rpms: [] + koji_tag: module-go-toolset-rhel8-8050020211109182503-8aa62369 + ref: cb670533665782620e566504296ad7b8c03ef49e + stream: rhel8 + version: 8050020211109182503 + golang-ecosystem: + context: cdc1202b + filtered_rpms: [] + koji_tag: module-golang-ecosystem-1.0-8010020191120164442-cdc1202b + ref: a9bfdf33835d03622fc88ac8f1779ce78fde26fd + stream: 1.0 + version: 8010020191120164442 + platform: + context: 00000000 + filtered_rpms: [] + koji_tag: module-centos-8.5.0-build + ref: virtual + stream: el8.5.0 + stream_collision_modules: + ursine_rpms: + version: 2 + commit: 1a0eb7e6b8a72896aa87ad869e0ceb06e58189b8 + mse: TRUE + rpms: + buildah: + ref: 9e95e60f82fc396c7064d47ff54e4b6c2561527c + cockpit-podman: + ref: 02b97eef153de249189dba1e0e21c7c91a133b64 + conmon: + ref: 7487620a83b8f4457c79ffeb18ad839378db1234 + container-selinux: + ref: 157060e41fa591ba085718adc21c50e8f987ab3a + containernetworking-plugins: + ref: 564d23191c8fd603c24dcd55aff3b13aa50b3cfd + criu: + ref: 401e1c09551c4ab1b4499e7c3e84b725b1475806 + fuse-overlayfs: + ref: ad05595804a163e384496a534320f4ba60f2f5b4 + podman: + ref: 15daf6ac08ca4640c183cdc78e5d62aa5dedae48 + python-podman-api: + ref: ff312ca6feb42aafe4e465a5d6b228a4eff2515b + runc: + ref: 12912468ba536d0c2459437d0e27c1f9e6cc121a + skopeo: + ref: a35725100185046b861a511b6fe758efdf40be29 + slirp4netns: + ref: 891f0cc3fc181b99b71420a029ad1eed462f120f + toolbox: + ref: f053632d53f7152de2a2222bf33de2efdd8abfb0 + udica: + ref: 96006621ab5e7ad594c3dd83f15deac846ef47df + scmurl: git+https://git.centos.org/modules/container-tools.git?#1a0eb7e6b8a72896aa87ad869e0ceb06e58189b8 + ursine_rpms: + - golang-src-0:1.16.7-1.module_el8.5.0+891+69fdb1de.noarch + - golang-bin-0:1.16.7-1.module_el8.5.0+891+69fdb1de.aarch64 + - go-toolset-0:1.16.7-1.module_el8.5.0+891+69fdb1de.x86_64 + - delve-0:1.6.0-1.module_el8.5.0+730+05f9090d.src + - golang-race-0:1.16.7-1.module_el8.5.0+891+69fdb1de.x86_64 + - go-toolset-0:1.16.7-1.module_el8.5.0+891+69fdb1de.ppc64le + - golang-misc-0:1.16.7-1.module_el8.5.0+891+69fdb1de.noarch + - delve-0:1.6.0-1.module_el8.5.0+730+05f9090d.x86_64 + - golang-tests-0:1.16.7-1.module_el8.5.0+891+69fdb1de.noarch + - golang-0:1.16.7-1.module_el8.5.0+891+69fdb1de.src + - golang-docs-0:1.16.7-1.module_el8.5.0+891+69fdb1de.noarch + - go-toolset-0:1.16.7-1.module_el8.5.0+891+69fdb1de.aarch64 + - golang-0:1.16.7-1.module_el8.5.0+891+69fdb1de.aarch64 + - golang-0:1.16.7-1.module_el8.5.0+891+69fdb1de.ppc64le + - golang-0:1.16.7-1.module_el8.5.0+891+69fdb1de.x86_64 + - delve-debuginfo-0:1.6.0-1.module_el8.5.0+730+05f9090d.x86_64 + - golang-bin-0:1.16.7-1.module_el8.5.0+891+69fdb1de.ppc64le + - go-toolset-0:1.16.7-1.module_el8.5.0+891+69fdb1de.src + - delve-debugsource-0:1.6.0-1.module_el8.5.0+730+05f9090d.x86_64 + - golang-bin-0:1.16.7-1.module_el8.5.0+891+69fdb1de.x86_64 + dependencies: + - buildrequires: + go-toolset: [rhel8] + golang-ecosystem: [1.0] + platform: [el8.5.0] + requires: + platform: [el8] + references: + community: https://github.com/projectatomic + documentation: https://projectatomic.io + tracker: https://github.com/projectatomic + profiles: + common: + rpms: + - buildah + - cockpit-podman + - conmon + - container-selinux + - containernetworking-plugins + - criu + - fuse-overlayfs + - podman + - python-podman-api + - runc + - skopeo + - slirp4netns + - toolbox + - udica + api: + rpms: + - buildah + - conmon + - container-selinux + - containernetworking-plugins + - containers-common + - fuse-overlayfs + - podman + - podman-docker + - podman-manpages + - podman-remote + - python-podman-api + - runc + - skopeo + - slirp4netns + buildopts: + rpms: + macros: > + %_with_ignore_tests 1 + components: + rpms: + buildah: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/buildah + cache: https://git.centos.org/repo/pkgs/buildah + ref: 9e95e60f82fc396c7064d47ff54e4b6c2561527c + arches: [aarch64, i686, ppc64le, x86_64] + cockpit-podman: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/cockpit-podman + cache: https://git.centos.org/repo/pkgs/cockpit-podman + ref: 02b97eef153de249189dba1e0e21c7c91a133b64 + arches: [aarch64, i686, ppc64le, x86_64] + conmon: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/conmon + cache: https://git.centos.org/repo/pkgs/conmon + ref: 7487620a83b8f4457c79ffeb18ad839378db1234 + arches: [aarch64, i686, ppc64le, x86_64] + container-selinux: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/container-selinux + cache: https://git.centos.org/repo/pkgs/container-selinux + ref: 157060e41fa591ba085718adc21c50e8f987ab3a + arches: [aarch64, i686, ppc64le, x86_64] + containernetworking-plugins: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/containernetworking-plugins + cache: https://git.centos.org/repo/pkgs/containernetworking-plugins + ref: 564d23191c8fd603c24dcd55aff3b13aa50b3cfd + arches: [aarch64, i686, ppc64le, x86_64] + criu: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/criu + cache: https://git.centos.org/repo/pkgs/criu + ref: 401e1c09551c4ab1b4499e7c3e84b725b1475806 + arches: [aarch64, i686, ppc64le, x86_64] + fuse-overlayfs: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/fuse-overlayfs + cache: https://git.centos.org/repo/pkgs/fuse-overlayfs + ref: ad05595804a163e384496a534320f4ba60f2f5b4 + arches: [aarch64, i686, ppc64le, x86_64] + podman: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/podman + cache: https://git.centos.org/repo/pkgs/podman + ref: 15daf6ac08ca4640c183cdc78e5d62aa5dedae48 + arches: [aarch64, i686, ppc64le, x86_64] + python-podman-api: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/python-podman-api + cache: https://git.centos.org/repo/pkgs/python-podman-api + ref: ff312ca6feb42aafe4e465a5d6b228a4eff2515b + arches: [aarch64, i686, ppc64le, x86_64] + runc: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/runc + cache: https://git.centos.org/repo/pkgs/runc + ref: 12912468ba536d0c2459437d0e27c1f9e6cc121a + arches: [aarch64, i686, ppc64le, x86_64] + skopeo: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/skopeo + cache: https://git.centos.org/repo/pkgs/skopeo + ref: a35725100185046b861a511b6fe758efdf40be29 + arches: [aarch64, i686, ppc64le, x86_64] + slirp4netns: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/slirp4netns + cache: https://git.centos.org/repo/pkgs/slirp4netns + ref: 891f0cc3fc181b99b71420a029ad1eed462f120f + arches: [aarch64, i686, ppc64le, x86_64] + toolbox: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/toolbox + cache: https://git.centos.org/repo/pkgs/toolbox + ref: f053632d53f7152de2a2222bf33de2efdd8abfb0 + arches: [aarch64, i686, ppc64le, x86_64] + udica: + rationale: Primary component of this module + repository: git+https://git.centos.org/rpms/udica + cache: https://git.centos.org/repo/pkgs/udica + ref: 96006621ab5e7ad594c3dd83f15deac846ef47df + arches: [aarch64, i686, ppc64le, x86_64] +... diff --git a/container-tools.yaml b/container-tools.yaml new file mode 100644 index 0000000..5143640 --- /dev/null +++ b/container-tools.yaml @@ -0,0 +1,110 @@ +--- +document: modulemd +version: 2 +data: + name: container-tools + stream: 3.0 + summary: >- + Stable versions of podman 3.0, buildah 1.19, skopeo 1.2, runc, conmon, etc as + well as dependencies such as container-selinux built and tested together, and + supported as documented on the Application Stream lifecycle page. + description: >- + Stable versions of podman 3.0, buildah 1.19, skopeo 1.2, runc, conmon, CRIU, + Udica, etc as well as dependencies such as container-selinux built and tested + together. Released with RHEL 8.4 and supported for 24 months. During the + support lifecycle, back ports of important, critical vulnerabilities (CVEs, + RHSAs) and bug fixes (RHBAs) are provided to this stream, and versions do not + move forward. For more information see: + https://access.redhat.com/support/policy/updates/containertools + license: + module: + - MIT + dependencies: + - buildrequires: + platform: [el9beta] + requires: + platform: [el9beta] + references: + community: https://github.com/projectatomic + documentation: https://projectatomic.io + tracker: https://github.com/projectatomic + profiles: + common: + rpms: + - buildah + - cockpit-podman + - conmon + - container-selinux + - containernetworking-plugins + - crun + - fuse-overlayfs + - podman + - runc + - skopeo + - slirp4netns + - toolbox + - udica + api: + rpms: + - buildah + - conmon + - container-selinux + - containernetworking-plugins + - containers-common + - fuse-overlayfs + - podman + - podman-docker + - podman-manpages + - podman-remote + - runc + - skopeo + - slirp4netns + buildopts: + rpms: + macros: | + %_with_ignore_tests 1 + components: + rpms: + buildah: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + cockpit-podman: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + conmon: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + container-selinux: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + containernetworking-plugins: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + crun: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + fuse-overlayfs: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + oci-seccomp-bpf-hook: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + podman: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + runc: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + skopeo: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + slirp4netns: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + toolbox: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta + udica: + rationale: Primary component of this module + ref: stream-container-tools-3.0-rhel-9.0.0-beta +... diff --git a/gating.yaml b/gating.yaml new file mode 100644 index 0000000..524cfad --- /dev/null +++ b/gating.yaml @@ -0,0 +1,8 @@ +# recipients: jnovy, santiago, lsm5 +--- !Policy +product_versions: + - rhel-9 +decision_context: osci_compose_gate_modules +subject_type: redhat-module +rules: + - !PassingTestCaseRule {test_case_name: baseos-ci.redhat-module.tier0.functional} diff --git a/tests/roles/bats_installed/tasks/main.yml b/tests/roles/bats_installed/tasks/main.yml new file mode 100644 index 0000000..242d444 --- /dev/null +++ b/tests/roles/bats_installed/tasks/main.yml @@ -0,0 +1,12 @@ +--- +# Sigh; RHEL8 doesn't have BATS +- name: bats | fetch and unpack tarball + unarchive: + src: https://github.com/bats-core/bats-core/archive/v1.1.0.tar.gz + dest: /root + remote_src: true + +- name: bats | install + command: ./install.sh /usr/local + args: + chdir: /root/bats-core-1.1.0 diff --git a/tests/roles/fetch_pkg/tasks/main.yml b/tests/roles/fetch_pkg/tasks/main.yml new file mode 100644 index 0000000..fe89af8 --- /dev/null +++ b/tests/roles/fetch_pkg/tasks/main.yml @@ -0,0 +1,36 @@ +# standard role for fetching a package dist-git into the Ansible controller for running its tests +# variables: +# - package: dist-git source package name +# - modulemd: file name of module metadata description, for getting correct branch name +--- +- name: Install git + dnf: name=git state=installed + +- name: Clone package dist-git + git: + repo: git://pkgs.devel.redhat.com/rpms/{{ package }} + # read package branch from module md file + version: "{{ (lookup('file', modulemd) | from_yaml)['data']['components']['rpms'][package]['ref'] }}" + dest: "/tmp/packages/{{ package }}" + +# fetch can only get a single file, so we have to do this in a loop +- name: Get package test file list + find: + paths: "/tmp/packages/{{ package }}/tests" + recurse: yes + register: test_files_to_fetch + +- name: Copy package test files to controller + fetch: + src: "{{ item.path }}" + # strip off /tmp/ prefix + dest: "{{ playbook_dir }}/{{ item.path[5:] }}" + flat: yes + with_items: "{{ test_files_to_fetch.files }}" + +- name: Copy package files + fetch: + src: "/tmp/packages/{{ package }}/{{ item }}" + dest: "{{ playbook_dir }}/packages/{{ package }}/" + flat: yes + with_items: ["{{ package }}.spec", "sources"] diff --git a/tests/roles/nonroot_user/tasks/main.yml b/tests/roles/nonroot_user/tasks/main.yml new file mode 100644 index 0000000..51bf44a --- /dev/null +++ b/tests/roles/nonroot_user/tasks/main.yml @@ -0,0 +1,7 @@ +--- +- name: create nonroot user + user: + name: testuser + shell: /bin/bash +- name: enable linger + command: loginctl enable-linger testuser diff --git a/tests/roles/run_bats_tests/files/helper.buildah-root.sh b/tests/roles/run_bats_tests/files/helper.buildah-root.sh new file mode 100644 index 0000000..d95e8d8 --- /dev/null +++ b/tests/roles/run_bats_tests/files/helper.buildah-root.sh @@ -0,0 +1,37 @@ +#!/bin/bash +# +# setup and teardown helpers for buildah test +# + +function setup() { + REGISTRY_FQIN=quay.io/libpod/registry:2 + + AUTHDIR=/tmp/buildah-tests-auth.$$ + mkdir -p $AUTHDIR + + CERT=$AUTHDIR/domain.crt + if [ ! -e $CERT ]; then + openssl req -newkey rsa:4096 -nodes -sha256 \ + -keyout $AUTHDIR/domain.key -x509 -days 2 \ + -out $AUTHDIR/domain.crt \ + -subj "/C=US/ST=Foo/L=Bar/O=Red Hat, Inc./CN=localhost" + fi + + if [ ! -e $AUTHDIR/htpasswd ]; then + htpasswd -Bbn testuser testpassword > $AUTHDIR/htpasswd + fi + + podman run -d -p 5000:5000 \ + --name registry \ + -v $AUTHDIR:/auth:Z \ + -e "REGISTRY_AUTH=htpasswd" \ + -e "REGISTRY_AUTH_HTPASSWD_REALM=Registry Realm" \ + -e REGISTRY_AUTH_HTPASSWD_PATH=/auth/htpasswd \ + -e REGISTRY_HTTP_TLS_CERTIFICATE=/auth/domain.crt \ + -e REGISTRY_HTTP_TLS_KEY=/auth/domain.key \ + $REGISTRY_FQIN +} + +function teardown() { + podman rm -f registry +} diff --git a/tests/roles/run_bats_tests/files/run_bats_tests.sh b/tests/roles/run_bats_tests/files/run_bats_tests.sh new file mode 100755 index 0000000..fa3542f --- /dev/null +++ b/tests/roles/run_bats_tests/files/run_bats_tests.sh @@ -0,0 +1,103 @@ +#!/bin/bash +# +# Run bats tests for a given $TEST_PACKAGE, e.g. buildah, podman +# +# This is invoked by the 'run_bats_tests' role; we assume that +# the package foo has a foo-tests subpackage which provides the +# directory /usr/share/foo/test/system, containing one or more .bats +# test files. +# + +export PATH=/usr/local/bin:/usr/sbin:/usr/bin + +# Keep all logs in /tmp/artifacts - this seems to be an undocumented +# (and therefore dangerous and unreliable) convention of the Standard +# Test Roles package. As of 2020-05 we have to coexist with cockpit +# which uses standard-test-basic, which means we need to conform to +# its conventions. +# We rely on our parent playbook to create /tmp/artifacts and make it +# world-writable so nonroot tests can use it. +TEST_LOG_TXT=/tmp/artifacts/test.log +TEST_LOG_YML=/tmp/artifacts/results.yml + +# "podman root" -> "podman-root" +testname_oneword=${TEST_NAME// /-} + +FULL_LOG=/tmp/artifacts/test.${testname_oneword}.debug.log +BATS_LOG=/tmp/artifacts/test.${testname_oneword}.bats.log +rm -f $FULL_LOG $BATS_LOG +touch $FULL_LOG $BATS_LOG + +exec &> $FULL_LOG + +# Log program versions +echo "Packages:" +( + uname -r + rpm -qa |\ + egrep 'buildah|conmon|container|crun|iptable|podman|runc|skopeo|slirp|systemd' |\ + sort +) | sed -e 's/^/ /' + +echo "------------------------------" +printenv | sort + +testdir=/usr/share/${TEST_PACKAGE}/test/system + +if ! cd $testdir; then + echo "FAIL ${TEST_NAME} : cd $testdir" >> $TEST_LOG_TXT + echo "- { test: '${TEST_NAME}', result: error, logs: [ $(basename $FULL_LOG) ] }" >> $TEST_LOG_YML + exit 0 +fi + +if [ -e /tmp/helper.sh ]; then + echo "------------------------------" + echo ". /tmp/helper.sh" + . /tmp/helper.sh +fi + +if [ "$(type -t setup)" = "function" ]; then + echo "------------------------------" + echo "\$ setup" + setup + if [ $? -ne 0 ]; then + echo "FAIL ${TEST_NAME} : setup" >> $TEST_LOG_TXT + echo "- { test: '${TEST_NAME}', result: error, logs: [ $(basename $FULL_LOG) ] }" >> $TEST_LOG_YML + exit 0 + fi +fi + +echo "------------------------------" +echo "\$ bats ." +TMPDIR=/var/tmp bats . &> $BATS_LOG +rc=$? + +echo "------------------------------" +echo "bats completed with status $rc" + +status=PASS +if [ $rc -ne 0 ]; then + status=FAIL +fi + +echo "${status} ${TEST_NAME}" >> $TEST_LOG_TXT + +# Append a stanza to results.yml +( + echo "- test: ${TEST_NAME}" + # pass/fail - the ',,' (comma comma) converts to lower-case + echo " result: ${status,,}" + echo " logs:" + echo " - $(basename $BATS_LOG)" + echo " - $(basename $FULL_LOG)" +) >> $TEST_LOG_YML + + +if [ "$(type -t teardown)" = "function" ]; then + echo "------------------------------" + echo "\$ teardown" + teardown +fi + +# FIXME: for CI purposes, always exit 0. This allows subsequent tests. +exit 0 diff --git a/tests/roles/run_bats_tests/tasks/main.yml b/tests/roles/run_bats_tests/tasks/main.yml new file mode 100644 index 0000000..ef97d3a --- /dev/null +++ b/tests/roles/run_bats_tests/tasks/main.yml @@ -0,0 +1,50 @@ +--- +# Create a directory for artifacts on remote host +- name: create remote artifacts directory + file: + path: /tmp/artifacts + state: directory + mode: 0777 + +# Create empty results file, world-writable so rootless test can log to it +- name: initialize test.log file + copy: dest=/tmp/artifacts/test.log content='' force=yes mode=0666 + +# Same with results.yml file +- name: initialize results.yml file + copy: dest=/tmp/artifacts/results.yml content='results:\n' force=yes mode=0666 + +- name: execute tests + include: run_one_test.yml + with_items: "{{ tests }}" + loop_control: + loop_var: test + +- name: pull test.log and results.yml + fetch: + src: "{{ item }}" + dest: "{{ artifacts }}/" + flat: yes + with_items: + - /tmp/artifacts/test.log + - /tmp/artifacts/results.yml + +# Copied from standard-test-basic +- name: check results + shell: grep "^FAIL" /tmp/artifacts/test.log + register: test_fails + # Never fail at this step. Just store result of tests. + failed_when: False + +- name: preserve results + set_fact: + role_result_failed: "{{ (test_fails.stdout|d|length > 0) or (test_fails.stderr|d|length > 0) }}" + role_result_msg: "{{ test_fails.stdout|d('tests failed.') }}" + +- name: display results + vars: + msg: | + Tests failed: {{ role_result_failed|d('Undefined') }} + Tests msg: {{ role_result_msg|d('None') }} + debug: + msg: "{{ msg.split('\n') }}" diff --git a/tests/roles/run_bats_tests/tasks/run_one_test.yml b/tests/roles/run_bats_tests/tasks/run_one_test.yml new file mode 100644 index 0000000..00d5291 --- /dev/null +++ b/tests/roles/run_bats_tests/tasks/run_one_test.yml @@ -0,0 +1,52 @@ +--- +- name: "{{ test.name }} | install test packages" + dnf: name="{{ test.package }}-tests" state=installed + +- name: "{{ test.name }} | define helper variables" + set_fact: + test_name_oneword: "{{ test.name | replace(' ','-') }}" + +# UGH. This is necessary because our caller sets some environment variables +# and we need to set a few more based on other caller variables; then we +# need to combine the two dicts when running the test. This seems to be +# the only way to do it in ansible. +- name: "{{ test.name }} | define local environment" + set_fact: + local_environment: + TEST_NAME: "{{ test.name }}" + TEST_PACKAGE: "{{ test.package }}" + TEST_ENV: "{{ test.environment }}" + +- name: "{{ test.name }} | setup/teardown helper | see if exists" + local_action: stat path={{ role_path }}/files/helper.{{ test_name_oneword }}.sh + register: helper + +- name: "{{ test.name }} | setup/teardown helper | install" + copy: src=helper.{{ test_name_oneword }}.sh dest=/tmp/helper.sh + when: helper.stat.exists + +- name: "{{ test.name }} | run test" + script: ./run_bats_tests.sh + args: + chdir: /usr/share/{{ test.package }}/test/system + become: "{{ true if test.become is defined else false }}" + become_user: testuser + environment: "{{ local_environment | combine(test.environment) }}" + +- name: "{{ test.name }} | pull logs" + fetch: + src: "/tmp/artifacts/test.{{ test_name_oneword }}.{{ item }}.log" + dest: "{{ artifacts }}/" + flat: yes + with_items: + - bats + - debug + +- name: "{{ test.name }} | remove remote logs and helpers" + file: + dest=/tmp/{{ item }} + state=absent + with_items: + - artifacts/test.{{ test_name_oneword }}.bats.log + - artifacts/test.{{ test_name_oneword }}.debug.log + - helper.sh diff --git a/tests/tests.yml b/tests/tests.yml new file mode 100644 index 0000000..311e7de --- /dev/null +++ b/tests/tests.yml @@ -0,0 +1,48 @@ +--- +- hosts: localhost + tags: classic + vars: + - artifacts: ./artifacts + roles: + - role: bats_installed + - role: nonroot_user + - role: run_bats_tests + tests: + - name: podman root + package: podman + environment: + PODMAN: /usr/bin/podman + + - name: podman nonroot + package: podman + environment: + PODMAN: /usr/bin/podman + become: true + + #- name: podman-remote root + #package: podman + #environment: + # PODMAN: /usr/bin/podman-remote + + - name: buildah root + package: buildah + environment: + BUILDAH_BINARY: /usr/bin/buildah + IMGTYPE_BINARY: /usr/bin/buildah-imgtype + COPY_BINARY: /usr/bin/buildah-copy + + - name: skopeo root + package: skopeo + environment: + SKOPEO_BINARY: /usr/bin/skopeo + + # cockpit-podman + - role: fetch_pkg + package: cockpit-podman + modulemd: ../container-tools.yaml + tasks: + - include_role: + name: ./packages/cockpit-podman/tests/roles/test + vars: + pkgdir: ./packages/cockpit-podman/ + test_script_dir: tests