add a cockpit realmd FreeIPA join test
Summary:
This requires a few other changes:
* turn clone_host_resolv into clone_host_file, letting you clone
any given host file (cloning /etc/hosts seems to make both
server deployment and client enrolment faster/more reliable)
* allow loading of multiple POSTINSTALL tests (so we can share
the freeipa_client_postinstall test). Note this is compatible,
existing uses will work fine
* move initial password change for the IPA test users into the
server deployment test (so the client tests don't conflict over
doing that)
* add GRUB_POSTINSTALL, for specifying boot parameters for boot of
the installed system, and make it work by tweaking _console_wait
_login (doesn't work for _graphical_wait_login yet, as I didn't
need that)
* make the static networking config for tap tests into a library
function so the tests can share it
* handle ABRT problem dirs showing up in /var/spool/abrt as well
as /var/tmp/abrt (because the enrol attempt hits #1330766 and
the crash report shows up in /var/spool/abrt, don't ask me why
the difference, I just work here)
* specify the DNS servers from the worker host's resolv.conf as
the forwarders for the FreeIPA server when deploying it; if we
don't do this, rolekit defaults to using the root servers as
forwarders(!) and thus we get the public, not phx2-appropriate,
results for e.g. mirrors.fedoraproject.org, some of which the
workers can't reach, so PackageKit package install always fails
(boy, was it fun figuring THAT mess out)
Even after all that, the test still doesn't actually pass, but
I'm reasonably confident this is because it's hitting actual bugs,
not because it's broken. It runs into #1330766 nearly every time
(I think I saw *one* time the enrolment actually succeeded), and
seems to run into a subsequent bug I hadn't seen before when
trying to work around that by trying the join again (see
https://bugzilla.redhat.com/show_bug.cgi?id=1330766#c37 ).
Test Plan:
Run the test, see what happens. If you're really lucky,
it'll actually pass. But you'll probably run into #1330766#c37,
I'm mostly posting for comment. You'll need a tap-capable openQA
instance to test this.
Reviewers: jskladan, garretraziel
Reviewed By: garretraziel
Subscribers: tflink
Differential Revision: https://phab.qadevel.cloud.fedoraproject.org/D880
2016-06-07 20:00:39 +00:00
|
|
|
use base "installedtest";
|
|
|
|
|
use strict;
|
|
|
|
|
use testapi;
|
|
|
|
|
use lockapi;
|
|
|
|
|
|
|
|
|
|
sub run {
|
|
|
|
|
my $self=shift;
|
|
|
|
|
# clone host's /etc/hosts (for phx2 internal routing to work)
|
|
|
|
|
# must come *before* setup_tap_static or else it would overwrite
|
|
|
|
|
# its changes
|
|
|
|
|
$self->clone_host_file("/etc/hosts");
|
|
|
|
|
# set up networking
|
|
|
|
|
$self->setup_tap_static("10.0.2.102", "client002.domain.local");
|
|
|
|
|
# use FreeIPA server as DNS server
|
|
|
|
|
assert_script_run "printf 'search domain.local\nnameserver 10.0.2.100' > /etc/resolv.conf";
|
|
|
|
|
# wait for the server to be ready (do it now just to make sure name
|
|
|
|
|
# resolution is working before we proceed)
|
|
|
|
|
mutex_lock "freeipa_ready";
|
|
|
|
|
mutex_unlock "freeipa_ready";
|
|
|
|
|
# run firefox and login to cockpit
|
|
|
|
|
$self->start_cockpit(1);
|
|
|
|
|
assert_and_click "cockpit_join_domain_button";
|
|
|
|
|
assert_screen "cockpit_join_domain";
|
|
|
|
|
send_key "tab";
|
|
|
|
|
wait_still_screen 1;
|
|
|
|
|
type_string "ipa001.domain.local";
|
|
|
|
|
wait_still_screen 1;
|
|
|
|
|
send_key "tab";
|
|
|
|
|
send_key "tab";
|
|
|
|
|
wait_still_screen 1;
|
|
|
|
|
type_string "admin";
|
|
|
|
|
wait_still_screen 1;
|
|
|
|
|
send_key "tab";
|
|
|
|
|
type_string "monkeys123";
|
|
|
|
|
wait_still_screen 1;
|
|
|
|
|
assert_and_click "cockpit_join_button";
|
|
|
|
|
# check we hit the progress screen, so we fail faster if it's
|
|
|
|
|
# broken
|
|
|
|
|
assert_screen "cockpit_join_progress";
|
|
|
|
|
# join involves package installs, so it may take some time
|
|
|
|
|
assert_screen "cockpit_join_complete", 300;
|
|
|
|
|
# quit browser to return to console
|
|
|
|
|
send_key "ctrl-q";
|
|
|
|
|
# we don't get back to a prompt instantly and keystrokes while X
|
|
|
|
|
# is still shutting down are swallowed, so wait_still_screen before
|
|
|
|
|
# finishing (and handing off to freeipa_client_postinstall)
|
|
|
|
|
wait_still_screen 5;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
sub test_flags {
|
|
|
|
|
# without anything - rollback to 'lastgood' snapshot if failed
|
|
|
|
|
# 'fatal' - whole test suite is in danger if this fails
|
|
|
|
|
# 'milestone' - after this test succeeds, update 'lastgood'
|
|
|
|
|
# 'important' - if this fails, set the overall state to 'fail'
|
2016-06-28 19:01:31 +00:00
|
|
|
return { fatal => 1, milestone => 1 };
|
add a cockpit realmd FreeIPA join test
Summary:
This requires a few other changes:
* turn clone_host_resolv into clone_host_file, letting you clone
any given host file (cloning /etc/hosts seems to make both
server deployment and client enrolment faster/more reliable)
* allow loading of multiple POSTINSTALL tests (so we can share
the freeipa_client_postinstall test). Note this is compatible,
existing uses will work fine
* move initial password change for the IPA test users into the
server deployment test (so the client tests don't conflict over
doing that)
* add GRUB_POSTINSTALL, for specifying boot parameters for boot of
the installed system, and make it work by tweaking _console_wait
_login (doesn't work for _graphical_wait_login yet, as I didn't
need that)
* make the static networking config for tap tests into a library
function so the tests can share it
* handle ABRT problem dirs showing up in /var/spool/abrt as well
as /var/tmp/abrt (because the enrol attempt hits #1330766 and
the crash report shows up in /var/spool/abrt, don't ask me why
the difference, I just work here)
* specify the DNS servers from the worker host's resolv.conf as
the forwarders for the FreeIPA server when deploying it; if we
don't do this, rolekit defaults to using the root servers as
forwarders(!) and thus we get the public, not phx2-appropriate,
results for e.g. mirrors.fedoraproject.org, some of which the
workers can't reach, so PackageKit package install always fails
(boy, was it fun figuring THAT mess out)
Even after all that, the test still doesn't actually pass, but
I'm reasonably confident this is because it's hitting actual bugs,
not because it's broken. It runs into #1330766 nearly every time
(I think I saw *one* time the enrolment actually succeeded), and
seems to run into a subsequent bug I hadn't seen before when
trying to work around that by trying the join again (see
https://bugzilla.redhat.com/show_bug.cgi?id=1330766#c37 ).
Test Plan:
Run the test, see what happens. If you're really lucky,
it'll actually pass. But you'll probably run into #1330766#c37,
I'm mostly posting for comment. You'll need a tap-capable openQA
instance to test this.
Reviewers: jskladan, garretraziel
Reviewed By: garretraziel
Subscribers: tflink
Differential Revision: https://phab.qadevel.cloud.fedoraproject.org/D880
2016-06-07 20:00:39 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
1;
|
|
|
|
|
|
|
|
|
|
# vim: set sw=4 et:
|