4c5ce5a1a9
* module compat for py3.8+ controller * replaced internal usages of selinux bindings with internal ctypes binding (allows basic selinux operations from any Python interpreter), plus tests * added new respawn_module API to allow modules to import Python packages that are only available under a well-known interpreter, plus tests * added respawn logic to modules that need Python libs from a specific system interpreter (apt, apt_repository, dnf, yum) minimize internal HAVE_SELINUX usage spurious junk pep8 * pylint fixes * add RHEL8 Python 3.8 testing * more pylint * import sanity * unit tests * changelog update * fix a bunch of stuff * tweak changelog * fix setup_rpm_repo on EL8 * misc sanity/test fixes * misc feedback tweaks * fix import fallback in test module * fix selinux MU test * fix dnf tests to avoid python-dependent test packages * add trailing LFs to aliases * fix yum tests to avoid test package with Python deps * hack create_repo for EL6 to create noarch package
77 lines
1.7 KiB
YAML
77 lines
1.7 KiB
YAML
# Set up a repo of unsigned rpms
|
|
- block:
|
|
- set_fact:
|
|
pkg_name: langtable
|
|
pkg_repo_dir: "{{ remote_tmp_dir }}/unsigned"
|
|
|
|
- name: Ensure our test package isn't already installed
|
|
dnf:
|
|
name:
|
|
- '{{ pkg_name }}'
|
|
state: absent
|
|
|
|
- name: Install rpm-sign
|
|
dnf:
|
|
name:
|
|
- rpm-sign
|
|
state: present
|
|
|
|
- name: Create directory to use as local repo
|
|
file:
|
|
path: "{{ pkg_repo_dir }}"
|
|
state: directory
|
|
|
|
- name: Download the test package
|
|
dnf:
|
|
name: '{{ pkg_name }}'
|
|
state: latest
|
|
download_only: true
|
|
download_dir: "{{ pkg_repo_dir }}"
|
|
|
|
- name: Unsign the RPM
|
|
shell: rpmsign --delsign {{ remote_tmp_dir }}/unsigned/{{ pkg_name }}*
|
|
|
|
- name: createrepo
|
|
command: createrepo .
|
|
args:
|
|
chdir: "{{ pkg_repo_dir }}"
|
|
|
|
- name: Add the repo
|
|
yum_repository:
|
|
name: unsigned
|
|
description: unsigned rpms
|
|
baseurl: "file://{{ pkg_repo_dir }}"
|
|
# we want to ensure that signing is verified
|
|
gpgcheck: true
|
|
|
|
- name: Install test package
|
|
dnf:
|
|
name:
|
|
- "{{ pkg_name }}"
|
|
disablerepo: '*'
|
|
enablerepo: unsigned
|
|
register: res
|
|
ignore_errors: yes
|
|
|
|
- assert:
|
|
that:
|
|
- res is failed
|
|
- "'Failed to validate GPG signature' in res.msg"
|
|
|
|
always:
|
|
- name: Remove rpm-sign (and test package if it got installed)
|
|
dnf:
|
|
name:
|
|
- rpm-sign
|
|
- "{{ pkg_name }}"
|
|
state: absent
|
|
|
|
- name: Remove test repo
|
|
yum_repository:
|
|
name: unsigned
|
|
state: absent
|
|
|
|
- name: Remove repo dir
|
|
file:
|
|
path: "{{ pkg_repo_dir }}"
|
|
state: absent
|