container-selinux-4:2.235.0-2.el10

- fetch TMT tests and plan from upstream
- Resolves: RHEL-80817

Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>

container-selinux.spec

@@ -36,7 +36,7 @@ Epoch: 4
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
 Version: 2.235.0
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
 Summary: SELinux policies for container runtimes
@@ -114,6 +114,9 @@ fi
 #define license tag if not already defined
 %{!?_licensedir:%global license %doc}
 
+# Placeholder check to silence rpmlint
+%check
+
 %files
 %doc README.md
 %{_datadir}/selinux/*
@@ -135,6 +138,10 @@ if %{_sbindir}/selinuxenabled ; then
 fi
 
 %changelog
+* Tue Mar 04 2025 Lokesh Mandvekar <lsm5@redhat.com> - 4:2.235.0-2
+- fetch TMT tests and plan from upstream
+- Resolves: RHEL-80817
+
 * Mon Feb 24 2025 Jindrich Novy <jnovy@redhat.com> - 4:2.235.0-1
 - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
 - Resolves: RHEL-80476

plans/main.fmf

@@ -2,39 +2,19 @@ discover:
     how: fmf
 execute:
     how: tmt
-adjust:
+prepare:
+    - when: distro == centos-stream or distro == rhel
+      how: shell
+      script: |
+        dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-$(rpm --eval '%{?rhel}').noarch.rpm
+        dnf -y config-manager --set-enabled epel
+      order: 10
     - when: initiator == packit
-      because: "We need to test with updated packages from rhcontainerbot/podman-next copr"
+      how: shell
-      prepare+:
+      script: |
-        how: shell
+        COPR_REPO_FILE="/etc/yum.repos.d/*podman-next*.repo"
-        script: |
+        if compgen -G $COPR_REPO_FILE > /dev/null; then
-            sed -i -n '/^priority=/!p;$apriority=1' /etc/yum.repos.d/*podman-next*.repo
+            sed -i -n '/^priority=/!p;$apriority=1' $COPR_REPO_FILE
-            dnf -y upgrade --allowerasing
+        fi
-    # FIXME: Use epel10 once bats is available there
+        dnf -y upgrade --allowerasing
-    - when: distro == centos-stream-10 or distro == rhel-10
+      order: 20
-      because: "bats isn't yet available on epel10"
-      prepare+:
-        how: install
-        copr: rhcontainerbot/bats-el10
-        package: bats
-    - when: distro == centos-stream-9 or distro == rhel-9
-      because: "bats is present on EPEL on rhel9 / c9s"
-      prepare+:
-        how: feature
-        epel: enabled
-
-/upstream:
-    summary: Run SELinux specific Podman tests on upstream PRs
-    discover+:
-        filter: tag:upstream
-    adjust+:
-        - enabled: false
-          when: initiator is not defined or initiator != packit
-
-/downstream:
-    summary: Run SELinux specific Podman tests on bodhi / errata and dist-git PRs
-    discover+:
-        filter: tag:downstream
-    adjust+:
-        - enabled: false
-          when: initiator == packit

test/Makefile

@@ -1,16 +0,0 @@
-.PHONY: basic_check
-basic_check:
-	semodule --list=full | grep container
-	semodule -B
-	rpm -Vqf /var/lib/selinux/*/active/modules/200/container
-
-.PHONY: podman_e2e_test
-podman_e2e_test:
-	bash ./podman-tests.sh e2e
-
-.PHONY: podman_system_test
-podman_system_test:
-	bash ./podman-tests.sh system
-
-clean:
-	rm -rf podman-*dev* podman.spec

test/main.fmf

@@ -1,19 +1,17 @@
 require:
+    - attr
     - bats
     - container-selinux
-    - cpio
-    - golang
-    - make
-    - podman
     - podman-tests
     - policycoreutils
 
 /basic_check:
-    tag: [ upstream, downstream ]
     summary: Run basic checks
-    test: make basic_check
+    test: |
+        semodule --list=full | grep container
+        semodule -B
+        rpm -Vqf /var/lib/selinux/*/active/modules/200/container
 
 /podman_system_test:
-    tag: [ upstream, downstream ]
     summary: Run SELinux specific Podman system tests
-    test: make podman_system_test
+    test: bash ./podman-tests.sh

test/podman-tests.sh

@@ -10,7 +10,7 @@ if [[ "$(id -u)" -ne 0 ]];then
 fi
 
 # Print versions of distro and installed packages
-rpm -q bats container-selinux golang podman podman-tests selinux-policy
+rpm -q bats container-selinux podman podman-tests policycoreutils selinux-policy
 
 # Run podman system tests
 bats /usr/share/podman/test/system/410-selinux.bats