Commit graph

5984 commits

Author SHA1 Message Date
Sanne Raymaekers
a7794dc634 cloudapi/v2: add oci image type to cloudapi 2023-09-19 22:57:06 +02:00
Sanne Raymaekers
067366ed6a internal/target: add OCI object storage target
Uploads an OCI image to OCI object storage, and generates a
pre-authenticated request for the object, which can be used to import it
into custom images.
2023-09-19 22:57:06 +02:00
Xiaofeng Wang
7259deea3a test: add workaround for bug https://issues.redhat.com/browse/RHEL-4992 2023-09-19 11:34:48 +02:00
Xiaofeng Wang
44e6278c9d test: remove workaround for bug BZ#2234390 2023-09-18 18:14:58 -07:00
Gianluca Zuccarelli
0311ef449d test/cases: OpenSCAP cloudapi tests
Run a basic check to see that the tailoring file has been created when
adding tailoring rules to the OpenSCAP config. Since the OpenSCAP scan
requires more memory and breaks some of the API tests, a full scan is
not run in the cloudapi tests.
2023-09-18 20:46:49 +02:00
Gianluca Zuccarelli
9af8579eb5 test/cases: add tailoring to oscap test
Add relevant checks to test for OpenSCAP tailoring features. The test
removes (unselects) a single rule.
2023-09-18 20:46:49 +02:00
Gianluca Zuccarelli
0ce4ec7fc4 internal/cloudapi: add OpenSCAP tailoring
Add support to the cloudapi for generating the tailoring file used
to customize the OpenSCAP remediation. This allows users to select and
unselect rules for the remediation and the `autotailor` stage generates
the tailoring file.
2023-09-18 20:46:49 +02:00
Sanne Raymaekers
360df12548 test/cases/ubi-wsl: set --os-type when creating vm
Solves `invalid usage for storage profile: attach existing managed OS disk`.
2023-09-15 15:03:48 +02:00
Tomáš Hozza
eb8b63f3ca Actions: add workflow for marking and closing stale issues and PRs
Signed-off-by: Tomáš Hozza <thozza@redhat.com>
2023-09-07 13:10:48 +02:00
schutzbot
554c9681a5 Post release version bump
[skip ci]
2023-09-06 08:22:33 +00:00
Sanne Raymaekers
e698e104d9 test/cases/ubi-wsl: fix waiting for a valid ipv4
The counter never made it past 10.
2023-09-01 14:04:37 +02:00
Ondřej Budai
23718dc707 upload/oci: fix a crash when the uploader returns an empty response
resp.IsResumable crashes if resp.MultipartUploadResponse == nil. This happens
for instance when authentication fails. Fix this by also checking the
MultipartUploadResponse field.

Signed-off-by: Ondřej Budai <ondrej@budai.cz>
2023-09-01 13:23:25 +02:00
Ondřej Budai
d6eacad494 jobimpl-osbuild: report a failed job on panic
Previously, the worker would happily report success if osbuild succeeded,
there was no JobError, but the job actually panicked in the meantime.
Let's fix this by adding a recovery mechanism.

Signed-off-by: Ondřej Budai <ondrej@budai.cz>
2023-09-01 13:23:25 +02:00
Ondřej Budai
19e45b528f jobimpl-osbuild: split temp dir cleanup into its separate defer
It doesn't make sense to have them together.

Signed-off-by: Ondřej Budai <ondrej@budai.cz>
2023-09-01 13:23:25 +02:00
Alexander Todorov
f2f1c8d0f0 Remove deprecated --os-type cli argument
test logs print:

[2023-08-22T10:18:14-04:00] 💿 Install image via installer(ISO) on VM
WARNING  --os-type is deprecated and does nothing. Please stop using it.
2023-09-01 13:22:30 +02:00
Xiaofeng Wang
f0c1fe2d98 test: fix "Waiter SnapshotImported failed: Max attempts exceeded" 2023-08-31 11:54:18 +02:00
Xiaofeng Wang
f0eb8e9738 test: add workaround for bug BZ#2234390 2023-08-30 09:29:50 +02:00
Sanne Raymaekers
e5c4640923 cloudapi/v2: expose wsl image type 2023-08-28 14:51:01 +02:00
dependabot[bot]
f39792d927 build(deps): bump the go-deps group with 2 updates
Bumps the go-deps group with 2 updates: [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) and [github.com/openshift-online/ocm-sdk-go](https://github.com/openshift-online/ocm-sdk-go).


Updates `github.com/aws/aws-sdk-go` from 1.44.329 to 1.44.332
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.329...v1.44.332)

Updates `github.com/openshift-online/ocm-sdk-go` from 0.1.362 to 0.1.364
- [Release notes](https://github.com/openshift-online/ocm-sdk-go/releases)
- [Changelog](https://github.com/openshift-online/ocm-sdk-go/blob/main/CHANGES.md)
- [Commits](https://github.com/openshift-online/ocm-sdk-go/compare/v0.1.362...v0.1.364)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/openshift-online/ocm-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-28 11:52:45 +02:00
Sanne Raymaekers
b26458f1f1 oci/upload: create image capability schema
After creating the custom image, make sure the capabilities default to
paravirtualized.
2023-08-28 10:29:14 +02:00
Sanne Raymaekers
adf2d5b22a test/cases/oci: add oci integration test 2023-08-28 10:29:14 +02:00
Sanne Raymaekers
93fc55f98a test/cases/ubi-wsl: public ip fixes
Use the "Standard" public ip sku, as "Basic" produces warnings.

Spin until the vm gets assigned a valid ipv4 address.
2023-08-28 08:44:12 +02:00
Alexander Todorov
8aca402dff Add softlockup_all_cpu_backtrace=1 boot argument
should trigger a kernel trace instead of only warnings
2023-08-28 08:36:07 +03:00
schutzbot
6f7af9e2ef Post release version bump
[skip ci]
2023-08-24 19:47:57 +00:00
Ondřej Budai
567fb680d4 dependabot: group go package updates
Imho, this is much saner than having so many PRs for all individual
dependencies. Taken from osbuild/images.

Signed-off-by: Ondřej Budai <ondrej@budai.cz>
2023-08-24 21:40:26 +02:00
Achilleas Koutsou
d4332f85d3 deps: update osbuild/images to v0.3.0
Bump the required osbuild version to v93 (due to the systemd units
change).

Pin the new osbuild version in Schutzfile.

Update repo snapshots in Schutzfile due to osbuild v93 depending on
new selinux-policy build.
2023-08-24 20:30:24 +02:00
Sanne Raymaekers
715bdba1bf dashboards/worker: default to showing the past 6 hours
The worker dashboards contains slow queries, running these on 28 days of
data take a very long time (and they often time out).
2023-08-24 17:01:23 +02:00
Ondřej Budai
e40fe408d9 mockbuild: always install podman
Mock now uses podman for a bootstrap

Signed-off-by: Ondřej Budai <ondrej@budai.cz>
2023-08-22 10:12:13 +02:00
Ondřej Budai
4499356bfd go.mod: bump osbuild/images to c2aa82cc9a86
images 0.1.0 and 0.2.0 were already released, but they are incompatible with
osbuild-composer's test suite. However, we need to support F40 as soon as
possible. This commit as a workaround: it bumps the dependency to a new enough
version that has Fedora 40, but it's old enough that it doesn't have
the breaking changes.
2023-08-22 10:12:13 +02:00
Tomáš Hozza
8ba1976b02 internal/cloud/gcp/compute: keep legacy Guest OS Features for el9.0
The SEV-SNP support was added since RHEL-9.1, so we need to keep the
original Guest OS Feature set when importing RHEL-9.0 images to GCP.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
2023-08-21 16:57:33 +02:00
Timothée Ravier
4173e5d768 internal/cloud/gcp/compute: Add SEV_SNP_CAPABLE Guest OS Feature
See: https://github.com/coreos/coreos-assembler/pull/3547
See: https://cloud.google.com/blog/products/identity-security/rsa-snp-vm-more-confidential
See: https://issues.redhat.com/browse/COS-2343
2023-08-21 16:57:33 +02:00
Sanne Raymaekers
d282cb0cff schutzbot: unregister test hosts 2023-08-21 16:54:45 +02:00
Sanne Raymaekers
a0af3a7776 schutzbot/terraform: update CI runners
Latest rhel-9 GA runner includes aardvark-dns, a weak dependency of
podman needed for networking.
2023-08-17 15:07:20 +02:00
Sanne Raymaekers
e92ead5449 test/cases/koji: build nightlies 2023-08-17 15:07:20 +02:00
Sanne Raymaekers
a82e3c38c8 diff-manifests: CRB is enabled in the prepareScript 2023-08-17 15:07:20 +02:00
Sanne Raymaekers
757ca2f51a test/data/repositories: use the cdn for rhel-88 and rhel92 2023-08-17 15:07:20 +02:00
Sanne Raymaekers
0a366eabe6 schutzbot/ci_details: allow python3.6
It is the default on RHEL 8.
2023-08-17 15:07:20 +02:00
Sanne Raymaekers
66bc3ea9dd Schutzfile: drop rhel 8.8 and 9.2 nightly repos 2023-08-17 15:07:20 +02:00
Sanne Raymaekers
44e05a76c4 .gitlab-ci.yml: switch to rhel 9.2 and 8.8 ga 2023-08-17 15:07:20 +02:00
Sanne Raymaekers
e7e6a9095a test/cases/ubi-wsl: double ssh timeout
This times out on occasion, give azure and windows a bit more time.
2023-08-17 15:44:07 +03:00
dependabot[bot]
8f1dfe5e1b build(deps): bump github.com/openshift-online/ocm-sdk-go
Bumps [github.com/openshift-online/ocm-sdk-go](https://github.com/openshift-online/ocm-sdk-go) from 0.1.315 to 0.1.362.
- [Release notes](https://github.com/openshift-online/ocm-sdk-go/releases)
- [Changelog](https://github.com/openshift-online/ocm-sdk-go/blob/main/CHANGES.md)
- [Commits](https://github.com/openshift-online/ocm-sdk-go/compare/v0.1.315...v0.1.362)

---
updated-dependencies:
- dependency-name: github.com/openshift-online/ocm-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-16 10:08:30 +02:00
Xiaofeng Wang
dc5583b382 test: add aws ec2 wait commands for instance terminate, image
register, and instance running
2023-08-14 18:30:06 +02:00
Xiaofeng Wang
84728ea85d test: re-format some long shell commands shorter 2023-08-14 18:30:06 +02:00
dependabot[bot]
fc0c7b703f build(deps): bump github.com/aws/aws-sdk-go from 1.44.318 to 1.44.322
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.318 to 1.44.322.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.318...v1.44.322)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-14 12:52:30 +02:00
Xiaofeng Wang
37faf0d929 test: run greenboot rollback test on ostree.sh, ami and vsphere
Do not need to run greenboot rollback test on all tests to save
some time
2023-08-14 11:12:14 +02:00
Xiaofeng Wang
16e27dad1b test: update edge-ami test to support aarch64 2023-08-11 22:52:14 +02:00
Alexander Todorov
207e148303 Use newer RHEL 8.9 and 9.3 images for testing 2023-08-11 18:20:13 +03:00
Xiaofeng Wang
8678125f89 test: add workaround for bug 2230537 and 2229722 2023-08-11 20:55:35 +08:00
Ondřej Budai
1a6dac1cfa blueprint: make Convert respect nils
Previously, nil values in the conversion source were in some cases converted
to empty arrays or empty objects. This is undesirable, because it can be in
certain cases changing the semantics of the blueprint. See e.g.
f317064da5/pkg/distro/rhel7/imagetype.go (L239C7-L239C7)

This commit modifies the conversion process so nil values are converted
without any changes. Also, the `Convert` function was covered with a unit
test.
2023-08-10 20:02:45 +02:00
Xiaofeng Wang
336842d7bb test: update ostree.sh to test ostree commit as value of --parent 2023-08-10 12:49:44 +02:00