Enable Fedora CI tests
Run end to end tests on Fedora CI Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
This commit is contained in:
parent
e3ff08388b
commit
0f8dd657fa
1
.fmf/version
Normal file
1
.fmf/version
Normal file
@ -0,0 +1 @@
|
||||
1
|
||||
36
e2e_tests.fmf
Normal file
36
e2e_tests.fmf
Normal file
@ -0,0 +1,36 @@
|
||||
summary: run keylime e2e tests
|
||||
|
||||
context:
|
||||
# define context to filter out all test requiring TPM device
|
||||
swtpm: yes
|
||||
agent: rust
|
||||
|
||||
prepare:
|
||||
- how: shell
|
||||
script:
|
||||
- dnf config-manager --set-enabled updates-testing updates-testing-modular
|
||||
|
||||
discover:
|
||||
how: fmf
|
||||
url: https://github.com/RedHat-SP-Security/keylime-tests
|
||||
ref: "@.tmt/dynamic_ref.fmf"
|
||||
test:
|
||||
- /setup/configure_tpm_emulator
|
||||
# change IMA policy to simple and run one attestation scenario
|
||||
# this is to utilize also a different parser
|
||||
- /setup/configure_kernel_ima_module/ima_policy_simple
|
||||
- /setup/inject_SELinux_AVC_check
|
||||
- /functional/basic-attestation-on-localhost
|
||||
# now change IMA policy to signing and run all tests
|
||||
- /setup/configure_kernel_ima_module/ima_policy_signing
|
||||
- "/functional/.*"
|
||||
|
||||
execute:
|
||||
how: tmt
|
||||
|
||||
adjust:
|
||||
- when: distro == fedora-rawhide
|
||||
environment:
|
||||
AVC_CHECK_AUSEARCH_PARAMS: "-se keylime"
|
||||
because: "On Rawhide we ignore SELinux AVCs not related to keylime"
|
||||
|
||||
Loading…
Reference in New Issue
Block a user