containers / container-selinux

SELinux policy files for Container Runtimes
GNU General Public License v2.0
257 stars 91 forks source link

Packit: remove el8 and add centos stream 10 #304

Closed lsm5 closed 6 months ago

lsm5 commented 6 months ago

EL8 will go EOL soon and centos stream 10 is now available in copr.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed on RHEL. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

packit-as-a-service[bot] commented 6 months ago

Ephemeral COPR build failed. @containers/packit-build please check.

lsm5 commented 6 months ago

@rhatdan the latest tag pushed was 2.231.0 but we need v2.231.0. Could you please push this tag as well? Also need the github release created to get packit builds going.

packit-as-a-service[bot] commented 6 months ago

podman system tests failed. @containers/packit-build please check.

lsm5 commented 6 months ago

@edsantiago PTAL at centos-stream-10 failures

edsantiago commented 6 months ago

Looking at one of those I see red:

Errors during downloading metadata for repository 'baseos':
  - Curl error (28): Timeout was reached for https://odcs.stream.centos.org/stream-10/production/latest-CentOS-Stream/compose/BaseOS/x86_64/os/repodata/repomd.xml [Failed to connect to odcs.stream.centos.org port 443 after 30001 ms: Timeout was reached]
  - Curl error (28): Timeout was reached for https://odcs.stream.centos.org/stream-10/production/latest-CentOS-Stream/compose/BaseOS/x86_64/os/repodata/repomd.xml [Failed to connect to odcs.stream.centos.org port 443 after 30000 ms: Timeout was reached]
Error: Failed to download metadata for repo 'baseos': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried

...which doesn't look like anything related to anything on our end. Is there a re-run button for these?

packit-as-a-service[bot] commented 6 months ago

podman e2e tests failed. @containers/packit-build please check.

lsm5 commented 6 months ago

Is there a re-run button for these?

@edsantiago Yes, click Details to see the re-run button against the test. Anyway, I reran it and that flake has gone away, now there are some real failures.

edsantiago commented 6 months ago

Flakes galore:

  Error: initializing source docker://registry.fedoraproject.org/fedora-toolbox:36: \
     pinging container registry registry.fedoraproject.org: \
     Get "https://registry.fedoraproject.org/v2/": \
     dial tcp: lookup registry.fedoraproject.org: Temporary failure in name resolution
lsm5 commented 6 months ago

Flakes galore:

  Error: initializing source docker://registry.fedoraproject.org/fedora-toolbox:36: \
     pinging container registry registry.fedoraproject.org: \
     Get "https://registry.fedoraproject.org/v2/": \
     dial tcp: lookup registry.fedoraproject.org: Temporary failure in name resolution

ugh, rerunning

edsantiago commented 6 months ago

Oooh, the system test looks unpleasant:

# [14:48:00.647461654] Error: netavark: unable to append rule '! -d 224.0.0.0/4 -j MASQUERADE' to table 'nat': code: 4, msg: Warning: Extension MASQUERADE revision 0 not supported, missing kernel module?
# iptables v1.8.10 (nf_tables):  RULE_APPEND failed (No such file or directory): rule in chain NETAVARK-1D8721804F16F

@Luap99 does that look familiar?

Luap99 commented 6 months ago

Oooh, the system test looks unpleasant:

# [14:48:00.647461654] Error: netavark: unable to append rule '! -d 224.0.0.0/4 -j MASQUERADE' to table 'nat': code: 4, msg: Warning: Extension MASQUERADE revision 0 not supported, missing kernel module?
# iptables v1.8.10 (nf_tables):  RULE_APPEND failed (No such file or directory): rule in chain NETAVARK-1D8721804F16F

@Luap99 does that look familiar?

yes, I am on my other PC now but there is Jira issue. Basically RHEL 10 dropped support for iptables so we have to default to nftables there in netavark, work is still TODO.

lsm5 commented 6 months ago

yes, I am on my other PC now but there is Jira issue. Basically RHEL 10 dropped support for iptables so we have to default to nftables there in netavark, work is still TODO.

@Luap99 thanks, I'll leave the centos-stream-10 tests commented out for now in that case.

lsm5 commented 6 months ago

@rhatdan PTAL

rhatdan commented 6 months ago

LGTM thanks @lsm5