Enable Fedora CI tests

Run end to end tests on Fedora CI

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
This commit is contained in:
Anderson Toshiyuki Sasaki 2023-02-23 19:44:26 +01:00
parent e3ff08388b
commit 0f8dd657fa
2 changed files with 37 additions and 0 deletions

1
.fmf/version Normal file
View File

@ -0,0 +1 @@
1

36
e2e_tests.fmf Normal file
View File

@ -0,0 +1,36 @@
summary: run keylime e2e tests
context:
# define context to filter out all test requiring TPM device
swtpm: yes
agent: rust
prepare:
- how: shell
script:
- dnf config-manager --set-enabled updates-testing updates-testing-modular
discover:
how: fmf
url: https://github.com/RedHat-SP-Security/keylime-tests
ref: "@.tmt/dynamic_ref.fmf"
test:
- /setup/configure_tpm_emulator
# change IMA policy to simple and run one attestation scenario
# this is to utilize also a different parser
- /setup/configure_kernel_ima_module/ima_policy_simple
- /setup/inject_SELinux_AVC_check
- /functional/basic-attestation-on-localhost
# now change IMA policy to signing and run all tests
- /setup/configure_kernel_ima_module/ima_policy_signing
- "/functional/.*"
execute:
how: tmt
adjust:
- when: distro == fedora-rawhide
environment:
AVC_CHECK_AUSEARCH_PARAMS: "-se keylime"
because: "On Rawhide we ignore SELinux AVCs not related to keylime"