Our CI uses default Docker, which has SELinux labeling but is rather evil in returning `EOPNOTSUPP` to any attempts to set `security.selinux`, even if to the same value. The previous fire 🔥 for this was: https://github.com/ostreedev/ostree/pull/759 The `bare` repo mode really only makes sense as uid 0, so our installed test framework is a good match for this. However, the unit tests *do* work in a privileged container even as non-root, and *also* should work on SELinux-disabled systems. So let's teach the test framework how to skip in those situations. I tested this both in a priv container (my default builder) and an unpriv container (like our CI). At the same time, start executing the `test-basic.sh` from an installed test, so we get better coverage than before. This is just the start - all of the sysroot tests really need the same treatment. Closes: #1217 Approved by: jlebon |
||
|---|---|---|
| .. | ||
| README.md | ||
| fah-prep.sh | ||
| itest-bare-root.sh | ||
| itest-bare-unit.sh | ||
| itest-bareuser-nouserxattrs.sh | ||
| itest-deploy-selinux.sh | ||
| itest-label-selinux.sh | ||
| itest-pull-space.sh | ||
| itest-pull.sh | ||
| itest-remotes.sh | ||
| libinsttest.sh | ||
| libtest-core.sh | ||
| run.sh | ||
README.md
This suite of tests is currently run from redhat-ci; they're intended to run as root.