tests: Run firewall tests

As the firewalld tests expect the libvirt "default" network, add
cockpit-machines test dependency, which pulls in the libvirt stack. We
will soon test the Machines page anyway.

tests/tests.yml

@@ -13,8 +13,11 @@
     - cockpit
     - cockpit-tests
     - cockpit-dashboard
+    - cockpit-machines
     - cockpit-sosreport
     - cockpit-storaged
+    - firewalld
+    - libvirt-daemon-config-network
     - podman
     tests:
     - smoke:

tests/verify.sh

@@ -15,6 +15,11 @@ if ! id admin 2>/dev/null; then
     echo admin:foobar | chpasswd
 fi
 
+# make sure that we can access cockpit through the firewall
+systemctl start firewalld
+firewall-cmd --add-service=cockpit --permanent
+firewall-cmd --add-service=cockpit
+
 # The cockpit/tests container has chromium-browser and other test
 # dependencies, which we don't have on RHEL itself. Also, we don't actually
 # want to install these on the tested image, so run the test in a container,
@@ -47,6 +52,8 @@ test/verify/check-accounts -tv --machine \$HOST:22 --browser \$HOST:9090 TestAcc
 test/verify/check-login -tv --machine \$HOST:22 --browser \$HOST:9090 TestLogin.{testExpired,testSELinuxRestrictedUser}
 # storage-lvm is buggy: https://github.com/cockpit-project/cockpit/pull/13777 and https://github.com/cockpit-project/cockpit/pull/13779
 test/verify/check-storage-lvm2 -tv --machine \$HOST:22 --browser \$HOST:9090 TestStorage.testSnapshots
+# TestFirewall.testNetworkingPage does not see libvirt zone, and testMultipleZones assumes eth1
+test/verify/check-networking-firewall -tv --machine \$HOST:22 --browser \$HOST:9090 TestFirewall.{testAddCustomServices,testAddServices,testFirewallPage}
 
 # check-menu is not @nondestructive yet, keep it last
 for t in sosreport storage-basic storage-ignored storage-partitions storage-used menu; do