The only significant change that this pulls in is 7fd02b152f9f
("tests/prlimit: avoid invalid limit combinations"), which fixes false
test failures in some environments.
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
This helps when debugging unexpected AVCs. This was formerly done by the
selinux-policy/common library, which the test doesn't use any more, so
let's add this useful feature back with just four simple commands.
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
CKI RHEL-8 builds are cross-compiled badly, so disable module_load also
when the kernel-devel built helper programs are unusable.
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
The RPM is not important, what is important is the running kernel (and
that can't be missing, obviously) and its version is already shown
elsewhere.
Moe importantly, in Fedora CI the 'kernel' RPM may not even be there, so
the test would warn about it, causing failures.
Reported-by: Lukas Vrabec <lvrabec@redhat.com>
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
...because tier 1 tests are ran for all SELinux components, which is
alittle too often for this not-so-lightweight test.
Suggested-by: Petr Lautrbach <plautrba@redhat.com>
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
CKI mainline kernel packages don't currently provide the files necessary
to build kernel modules. Work around it by disabling the module_load
subtest when the files are missing.
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
There are several places in the testuite that set timeouts for network
operations. They use different values in different places and
particularly for the SCTP test the value is too small on some machines
and often leads to false-positive test failures.
Since the right value depends on the environment, rather than proposing
to change the value to some guessed number upstream, let's just tweak
the number from the wrapper and suggest updating the numbers upstream
once we find a "proven" good value.
I'm setting the default to 4 secs - 1 second higher than the old value
in the inet_socket test, where we also (very) sporadically get failures.
The most problematic SCTP subtest had 2 seconds timeout before.
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
It is usually already installed so this hasn't been spotted before,
however on Fedora CI the missing requirement causes a failure.
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
