From 94ea41534e67cb2e2527b6536965cc39b8dbbcd4 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <lautrbach@redhat.com>
Date: Wed, 9 Apr 2025 18:03:00 +0200
Subject: [PATCH] Add selinux-policy-epel test plan

- should be triggered only in CI by commit
- should check current selinux-policy version and latest
  selinux-policy-epel version and fail if they're different to notify
  maintainer about needed action

Related: RHEL-74424
---
 plans/tests.fmf                            |  8 +++++++
 tests/check-selinux-policy-epel-version.sh | 25 ++++++++++++++++++++++
 2 files changed, 33 insertions(+)
 create mode 100755 tests/check-selinux-policy-epel-version.sh

diff --git a/plans/tests.fmf b/plans/tests.fmf
index 3d6c13ee..77d0cd93 100644
--- a/plans/tests.fmf
+++ b/plans/tests.fmf
@@ -13,3 +13,11 @@ execute:
         url: https://src.fedoraproject.org/tests/selinux.git
         filter: "component:selinux-policy & tag:-failinfedora & tag:-epel"
 
+/selinux-policy-epel:
+    discover:
+      name: tests related to selinux-policy-epel
+      how: shell
+      tests:
+        - name: check selinux-policy-epel version
+          require: [git,rpm-build]
+          test: ./tests/check-selinux-policy-epel-version.sh
diff --git a/tests/check-selinux-policy-epel-version.sh b/tests/check-selinux-policy-epel-version.sh
new file mode 100755
index 00000000..fdb185e8
--- /dev/null
+++ b/tests/check-selinux-policy-epel-version.sh
@@ -0,0 +1,25 @@
+#!/usr/bin/bash
+
+SELINUX_POLICY_VERSION=$(rpm -q --qf '%{version}' selinux-policy)
+
+TMP_DIR=`mktemp -d --tmpdir selinux-policy-epel.XXXXXX`
+pushd ${TMP_DIR} > /dev/null
+
+git clone --depth=1 -q https://src.fedoraproject.org/rpms/selinux-policy-epel -b epel10
+pushd selinux-policy-epel > /dev/null
+
+SELINUX_POLICY_EPEL_VERSION=$(rpmspec -q --queryformat='%{version}' --srpm selinux-policy-epel.spec)
+
+popd > /dev/null
+
+rm -rf ${TMP_DIR}
+
+if [ "${SELINUX_POLICY_VERSION}" != "${SELINUX_POLICY_EPEL_VERSION}" ]; then
+    echo "selinux-policy version ${SELINUX_POLICY_VERSION} does not match selinux-policy-epel version ${SELINUX_POLICY_EPEL_VERSION}"
+    echo "Please update selinux-policy-epel, see" \
+         "https://src.fedoraproject.org/rpms/selinux-policy-epel/raw/epel10/f/README.md"
+    exit 1
+fi
+
+echo "selinux-policy version ${SELINUX_POLICY_VERSION} matches selinux-policy-epel version ${SELINUX_POLICY_EPEL_VERSION}"
+exit 0