tests: Update CI test plan for C10S

Resolves: RHEL-35979

Signed-off-by: Karel Srot <ksrot@redhat.com>
This commit is contained in:
Karel Srot 2024-05-06 11:13:00 +02:00
parent feee12343d
commit 4241665e37
2 changed files with 17 additions and 36 deletions

17
ci_tests.fmf Normal file
View File

@ -0,0 +1,17 @@
/e2e:
plan:
import:
url: https://github.com/RedHat-SP-Security/keylime-plans.git
name: /generic/e2e
/package-update:
plan:
import:
url: https://github.com/RedHat-SP-Security/keylime-plans.git
name: /generic/package-update
/rpmverify:
plan:
import:
url: https://github.com/RedHat-SP-Security/keylime-plans.git
name: /generic/rpmverify

View File

@ -1,36 +0,0 @@
summary: run keylime e2e tests
# define context to filter out all test requiring TPM device
context:
swtpm: yes
agent: rust
faked_measured_boot_log: no
prepare:
- how: shell
script:
- dnf config-manager --set-enabled updates-testing
discover:
how: fmf
url: https://github.com/RedHat-SP-Security/keylime-tests
ref: "@.tmt/dynamic_ref.fmf"
test:
- /setup/configure_tpm_emulator
# change IMA policy to simple and run one attestation scenario
# this is to utilize also a different parser
- /setup/configure_kernel_ima_module/ima_policy_simple
- /setup/inject_SELinux_AVC_check
- /functional/basic-attestation-on-localhost
# now change IMA policy to signing and run all tests
- /setup/configure_kernel_ima_module/ima_policy_signing
- "^/functional/.*"
execute:
how: tmt
adjust:
- when: distro == fedora-rawhide
environment:
AVC_CHECK_AUSEARCH_PARAMS: "-se keylime"
because: "On Rawhide we ignore SELinux AVCs not related to keylime"