search

RHSecurityCompliance / contest

Content Testing for ComplianceAsCode/content
Other
4 stars 7 forks source link

Test on UEFI/non-UEFI #19

Open comps opened 1 year ago

comps commented 1 year ago

Currently, the virtual machines used by lib/virt.py are using the traditional "BIOS" scheme. This unfortunately doesn't exercise all of the content rules - there are several variants on uefi/non-uefi bootloader ones, for example.

Libvirt/QEMU can create UEFI (and even Secure Boot capable) virtual machines, but not on RHEL-7. So investigate this after we drop RHEL-7 support, and add UEFI testing to our testing matrix. Either as default + BIOS testing as a special case, or vice versa.

I imagine it like with-gui tests, but consider reducing the scope by adding it to oscap only (not anaconda, ansible, etc.) to save execution time. Or not, do whatever, I'm not your father.

comps commented 1 month ago

This is now even more important for RHEL-10.