FreeIPA replica test: decommission the replica

A new FreeIPA update adds a check which causes a failure when
we try to decommission the original server with the replica
still alive. Let's see if decommissioning the replica helps.

Signed-off-by: Adam Williamson <awilliam@redhat.com>

tests/realmd_join_sssd.pm

@@ -37,11 +37,6 @@ sub run {
         # here we're enrolling not just as a client, but as a replica
         # install server packages
         assert_script_run "dnf -y group install freeipa-server", 600;
-        my $advortask = get_var("ADVISORY_OR_TASK");
-        if ($advortask eq "FEDORA-2023-d21ee6d2e9" || $advortask eq "FEDORA-2023-b2095d4ea1") {
-            assert_script_run "dnf -y --best update samba*", 600;
-        }
-
 
         # we need a lot of entropy for this, and we don't care how good
         # it is, so let's use haveged
@@ -63,19 +58,35 @@ sub run {
         assert_script_run "systemctl enable ipa.service";
         assert_script_run "systemctl start ipa.service", 300;
 
+        # set sssd debugging level higher (useful for debugging failures)
+        # optional as it's not really part of the test
+        script_run "dnf -y install sssd-tools", 220;
+        script_run "sss_debuglevel 9";
+
         # report that we're ready to go
         mutex_create('domain_replica_ready');
 
         # wait for the client test
         wait_for_children;
+
+        # uninstall ourselves (copied from domain controller test)
+        assert_script_run 'systemctl stop ipa.service', 120;
+        # check server is stopped
+        assert_script_run '! systemctl is-active ipa.service';
+        # decommission the server
+        assert_script_run 'ipa-server-install -U --uninstall', 300;
+        # try and un-garble the screen that the above sometimes garbles
+        # ...we may be on tty1 or tty3 now, so flip between them
+        send_key "ctrl-alt-f1";
+        send_key "ctrl-alt-f3";
     }
     else {
         assert_script_run "echo '${admin_pw}' | realm join --user=${admin_user} ${server}", 300;
-    }
         # set sssd debugging level higher (useful for debugging failures)
         # optional as it's not really part of the test
         script_run "dnf -y install sssd-tools", 220;
         script_run "sss_debuglevel 9";
+    }
     # if upgrade test, report that we're enrolled
     mutex_create('client_enrolled') if get_var("UPGRADE");
     # if this is an upgrade test, wait for server to be upgraded before

tests/role_deploy_domain_controller.pm

@@ -27,10 +27,6 @@ sub run {
     assert_script_run 'printf "[Service]\nEnvironment=OPTIONS=-d5\n" > /etc/systemd/system/named-pkcs11.service.d/debug.conf';
     # First install the necessary packages
     assert_script_run "dnf -y group install freeipa-server", 600;
-    my $advortask = get_var("ADVISORY_OR_TASK");
-    if ($advortask eq "FEDORA-2023-d21ee6d2e9" || $advortask eq "FEDORA-2023-b2095d4ea1") {
-        assert_script_run "dnf -y --best update samba*", 600;
-    }
     # configure the firewall
     for my $service (qw(freeipa-ldap freeipa-ldaps dns)) {
         assert_script_run "firewall-cmd --permanent --add-service $service";

tests/samba_domain_controller.pm

@@ -26,13 +26,7 @@ sub run {
     assert_script_run 'systemctl start haveged.service';
     assert_script_run "rm -f /etc/samba/smb.conf";
     # First install the necessary packages
-    my $advortask = get_var("ADVISORY_OR_TASK");
-    if ($advortask eq "FEDORA-2023-d21ee6d2e9" || $advortask eq "FEDORA-2023-b2095d4ea1") {
-        assert_script_run "dnf -y --best install samba-dc samba-tools krb5-workstation adcli", 600;
-    }
-    else {
     assert_script_run "dnf -y install samba-dc samba-tools krb5-workstation adcli", 600;
-    }
     # configure the firewall
     assert_script_run "firewall-cmd --permanent --add-service samba-dc";
     assert_script_run "systemctl restart firewalld.service";