From 5659df95c835a709598b1f773e8dda61cfce0fd0 Mon Sep 17 00:00:00 2001 From: Karel Srot Date: Tue, 14 May 2024 09:55:46 +0200 Subject: [PATCH] tests: Update CI test plan for C10S Resolves: RHEL-36256 Signed-off-by: Karel Srot --- ci_tests.fmf | 17 +++++++++++++++++ e2e_tests.fmf | 36 ------------------------------------ 2 files changed, 17 insertions(+), 36 deletions(-) create mode 100644 ci_tests.fmf delete mode 100644 e2e_tests.fmf diff --git a/ci_tests.fmf b/ci_tests.fmf new file mode 100644 index 0000000..6a596dc --- /dev/null +++ b/ci_tests.fmf @@ -0,0 +1,17 @@ +/e2e: + plan: + import: + url: https://github.com/RedHat-SP-Security/keylime-plans.git + name: /generic/e2e + +/package-update: + plan: + import: + url: https://github.com/RedHat-SP-Security/keylime-plans.git + name: /generic/package-update + +/rpmverify: + plan: + import: + url: https://github.com/RedHat-SP-Security/keylime-plans.git + name: /generic/rpmverify diff --git a/e2e_tests.fmf b/e2e_tests.fmf deleted file mode 100644 index b942f7f..0000000 --- a/e2e_tests.fmf +++ /dev/null @@ -1,36 +0,0 @@ -summary: run keylime e2e tests - -# define context to filter out all test requiring TPM device -context: - swtpm: yes - agent: rust - faked_measured_boot_log: no - -prepare: - - how: shell - script: - - dnf config-manager --set-enabled updates-testing updates-testing-modular - -discover: - how: fmf - url: https://github.com/RedHat-SP-Security/keylime-tests - ref: "@.tmt/dynamic_ref.fmf" - test: - - /setup/configure_tpm_emulator - # change IMA policy to simple and run one attestation scenario - # this is to utilize also a different parser - - /setup/configure_kernel_ima_module/ima_policy_simple - - /setup/inject_SELinux_AVC_check - - /functional/basic-attestation-on-localhost - # now change IMA policy to signing and run all tests - - /setup/configure_kernel_ima_module/ima_policy_signing - - "^/functional/.*" - -execute: - how: tmt - -adjust: - - when: distro == fedora-rawhide - environment: - AVC_CHECK_AUSEARCH_PARAMS: "-se keylime" - because: "On Rawhide we ignore SELinux AVCs not related to keylime"