#8496 [Tracker] Multiple nightly test failures in test_dnssec, test_backup_and_restore and test_dns_locations
Closed: fixed 3 years ago by frenaud. Opened 3 years ago by frenaud.

The nightly tests [testing_master_389ds] and [testingipa-4.8] have new failures in test_dnssec and test_backup_and_restore. See PR #403: test report and PR#623, report

  • test_integration/test_dnssec.py::TestInstallDNSSECLast::test_if_zone_is_signed_master
  • test_integration/test_dnssec.py::TestInstallDNSSECLast::test_disable_reenable_signing_master
  • test_integration/test_dnssec.py::TestInstallDNSSECFirst::test_sign_root_zone
  • test_integration/test_dnssec.py::TestMigrateDNSSECMaster::test_migrate_dnssec_master
  • test_integration/test_dnssec.py::TestInstallDNSSECFirst::test_chain_of_trust
  • test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC::test_full_backup_reinstall_restore_with_DNSSEC_zone

The failures need to be investigated as they were seen only with 389ds/nightly copr repo. This repo contains a fix related to syncrepl: 51190 that could be related to the new failures


Metadata Update from @frenaud:
- Issue tagged with: test-failure, tests

3 years ago

Additional failures seen in testing_master_testing_selinux Nightly PR #459
logs

And indeed, there is a new version of DS in testing: https://bodhi.fedoraproject.org/updates/FEDORA-2020-f7a1de9dec

A complete investigation must be done.

Early fix of https://github.com/389ds/389-ds-base/issues/4329 does not fix the DNSSEC regression.
I suspect that DNSSEC failures are related to https://github.com/389ds/389-ds-base/issues/4363

The issue also happens in [testing_master_testing] since 389-ds-base-1.4.3.13-1.fc32 has been pushed to updates-testing 2020-10-05, see PR #468

And now in [testing_master] since 389-ds-base-1.4.3.13-1.fc32 has been pushed to updates

Metadata Update from @frenaud:
- Issue tagged with: tracker

3 years ago

Similar error observed in [testing_master_testing_selinux] PR 526 : Logs
for tests:
- test_sign_root_zone
- test_chain_of_trust
- test_migrate_dnssec_master

Similar error observed in [testing_master_testing_selinux] PR 526 : Logs
for test:
- test_replica_promotion_TestHiddenReplicaKRA
- test_replica_promotion_TestHiddenReplicaPromotion : Logs
- test_replica_promotion_TestProhibitReplicaUninstallation : Logs
- test_replication_layouts_TestLineTopologyWithCA : Logs
- http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/593e001c-2445-11eb-8c57-fa163eeafbeb/report.html : Logs

master:

  • a33530f ipatests: temporarily remove test_dnssec.py::TestInstallDNSSECFirst from gating

ipa-4-8:

  • c694c0f ipatests: temporarily remove test_dnssec.py::TestInstallDNSSECFirst from gating

The issue also affects
- TestDNSLocations::test_without_locations
- TestDNSLocations::test_nsupdate_without_locations
- TestDNSLocations::test_one_replica_in_location
- TestDNSLocations::test_adtrust_system_records

test failures observed:
test_ipa_ca_records
test_adtrust_system_records
PR
report

test failures observed:

test_if_zone_is_signed_replica
test_disable_reenable_signing_replica

PR
report

test failures obersved due to dns

test_hidden_replica_automatic_crl
test_replica_from_hidden

PR report

Metadata Update from @frenaud:
- Issue assigned to frenaud

3 years ago

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/5571

3 years ago

master:

  • f3cd85e freeipa.spec: bump the required version of 389ds

ipa-4-9:

  • 1c1c469 freeipa.spec: bump the required version of 389ds

Remaining work:
- The 389ds version still needs to be bumped on fedora32, we are waiting for a build with the fix.
For full ref, the 389ds ticket is https://github.com/389ds/389-ds-base/issues/4526
- When the fix is available on all supported version we can re-add test_dnssec.py::TestInstallDNSSECFirst to gating

Test failures observed in testing_master_previous :

test_integration/test_backup_and_restore.py::TestBackupReinstallRestoreWithDNSSEC::test_full_backup_reinstall_restore_with_DNSSEC_zone : PR Logs

test_replica_promotion_TestHiddenReplicaKRA : PR Logs

test_replica_promotion_TestProhibitReplicaUninstallation : PR Logs

test_replication_layouts_TestLineTopologyWithCA PR
Logs

test_replication_layouts_TestLineTopologyWithCAKRA : PR Logs

Faliures observed in : testing_master_previous

dns_locations : PR 753
Logs

test_client_uninstallation PR 753
Logs

test_replica_promotion_TestHiddenReplicaPromotion PR 753
Logs

test_replica_promotion_TestProhibitReplicaUninstallation : PR Logs

test_line_topology_with_ca : PR753 Logs

test_line_topology_with_ca_kra : PR753 Logs

master:

  • a9b4ed4 ipatests: re-add test_dnssec.py::TestInstallDNSSECFirst in gating
  • fb107b9 ipatests: fix TestInstalDNSSECFirst::test_resolvconf logic

ipa-4-9:

  • ab23ecd ipatests: re-add test_dnssec.py::TestInstallDNSSECFirst in gating
  • 5af5743 ipatests: fix TestInstalDNSSECFirst::test_resolvconf logic

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

3 years ago

ipa-4-8:

  • c02544c azure: bump F32->F34
  • 7802e14 freeipa.spec: do not use jsl for linting on Fedora 34+
  • 7433be9 azure: Collect systemd boot log
  • 523a9f8 azure: Enforce multi-user.target as default systemd's target
  • 677df14 azure: Wait for systemd booted
  • 04c90fb azure: Remove no longer needed repo
  • 8fea2f6 azure: Mask systemd-resolved
  • 976a3bf ipatests: Update expectations for test_detect_container
  • e573163 azure: Add workaround for PhantomJS against OpenSSL 1.1.1
  • 0123795 azure: Warn about memory issues
  • 835df31 BIND: Setup logging
  • 2a9dea8 ipatests: Setup and collect BIND logs
  • e23f976 azure: Run Base and XMLRPC tests is isolated network
  • 34e1f6a ipatests: Handle network-isolated mode
  • c8e5867 dnsutil: Improvements for IPA DNS Resolver
  • fe0b5ff dns: get_reverse_zone: Ignore resolver's timeout
  • d40306b pytest: Show extra summary information for all except passed tests
  • ff70aac ipatests: Ignore warnings on failed to read files on tarring
  • cb3b396 ipatests: Suppress list trust or certificates
  • 21a5201 azure: Collect installed packages
  • c65c7eb ipatests: dnssec: Add alternative approach for checking chain of trust
  • 6710ff4 azure: Warn about extra and missing gating tests compared to PR-CI
  • a5730f5 azure: Re-balance tests envs
  • e66eb48 azure: coredump: Wait for systemd fully booted
  • 6561fc6 ipatests: re-add test_dnssec.py::TestInstallDNSSECFirst in gating
  • 8bf9538 azure: Make it possible to adjust Docker resources per test env
  • 2a7f21a ipa-kdb: fix gcc complaints in kdb tests
  • e94261f Set client keytab location for 389ds
  • ba6eb85 dnssec: fix the key type with OpenDNSSEC 2.1
  • 7daf47c ipatests: add a test for ZSK/KSK keytype in DNSKEY record
  • b8242e6 handle Y2038 in timestamp to datetime conversions
  • 5bfe16a OpenDNSSEC: fix timezone in key creation date
  • 56746ec freeipa.spec: bump the required version of 389ds
  • 2b8ccc8 freeipa.spec: synchronize with Fedora for 389-ds and PKI versions
  • a868604 ipatests: collect config files for NetworkManager and systemd-resolved
  • bc9ca47 ipatests: add utility for managing domain name resolvers
  • cdc78af ipatests: setup resolvers during replica and client installations
  • 549ef48 ipatests: do not manually modify /etc/resolv.conf in tests
  • 324ba20 ipatests: disable systemd-resolved cache
  • 9a28022 ipatests: mock resolver factory
  • 63a3cff ipatests: always try to create A records for hosts in IPA domain
  • d9744e7 ipatests: do not configure nameserver when installing client and replica
  • 47e9df1 ipatests: fix TestInstalDNSSECFirst::test_resolvconf logic
  • bca86ce pr-ci: Run tests on F34
  • 0b8517d Revert "ipatests: configure client to use IPA server as DNS resolver"
  • d43d9ca ipatests: Fetch sudo rules without time offset

Login to comment on this ticket.

Metadata