#8703 DNS resolvers issues in IPA tests
Closed: fixed 3 years ago by sorlov. Opened 3 years ago by sorlov.

There a numerous failures in nightly test runs related to domain names resolution, mostly on Fedora 33. They are mostly caused by improper management of resolvers: a common pattern in tests is to write directly to /etc/resolv.conf. While this approach somehow works on Fedora 32 it fails on Fedora 33 where systemd-resolved is used by default.


master:

  • fe3c665 ipatests: collect config files for NetworkManager and systemd-resolved
  • 2e92d08 ipatests: add utility for managing domain name resolvers
  • cd066ba ipatests: setup resolvers during replica and client installations
  • 01f455f ipatests: do not manually modify /etc/resolv.conf in tests
  • 1853695 ipatests: disable systemd-resolved cache
  • dc42366 ipatests: mock resolver factory
  • 4ad5ce7 ipatests: always try to create A records for hosts in IPA domain
  • 881eea4 ipatests: do not configure nameserver when installing client and replica

ipa-4-9:

  • 2c5b706 ipatests: collect config files for NetworkManager and systemd-resolved
  • 1a394c6 ipatests: add utility for managing domain name resolvers
  • 64f2a40 ipatests: setup resolvers during replica and client installations
  • f5d7f85 ipatests: do not manually modify /etc/resolv.conf in tests
  • 28af454 ipatests: disable systemd-resolved cache
  • b3abb2c ipatests: mock resolver factory
  • b0ee8e0 ipatests: always try to create A records for hosts in IPA domain
  • 1ca7cb6 ipatests: do not configure nameserver when installing client and replica

Metadata Update from @sorlov:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

3 years ago

ipa-4-8:

  • c02544c azure: bump F32->F34
  • 7802e14 freeipa.spec: do not use jsl for linting on Fedora 34+
  • 7433be9 azure: Collect systemd boot log
  • 523a9f8 azure: Enforce multi-user.target as default systemd's target
  • 677df14 azure: Wait for systemd booted
  • 04c90fb azure: Remove no longer needed repo
  • 8fea2f6 azure: Mask systemd-resolved
  • 976a3bf ipatests: Update expectations for test_detect_container
  • e573163 azure: Add workaround for PhantomJS against OpenSSL 1.1.1
  • 0123795 azure: Warn about memory issues
  • 835df31 BIND: Setup logging
  • 2a9dea8 ipatests: Setup and collect BIND logs
  • e23f976 azure: Run Base and XMLRPC tests is isolated network
  • 34e1f6a ipatests: Handle network-isolated mode
  • c8e5867 dnsutil: Improvements for IPA DNS Resolver
  • fe0b5ff dns: get_reverse_zone: Ignore resolver's timeout
  • d40306b pytest: Show extra summary information for all except passed tests
  • ff70aac ipatests: Ignore warnings on failed to read files on tarring
  • cb3b396 ipatests: Suppress list trust or certificates
  • 21a5201 azure: Collect installed packages
  • c65c7eb ipatests: dnssec: Add alternative approach for checking chain of trust
  • 6710ff4 azure: Warn about extra and missing gating tests compared to PR-CI
  • a5730f5 azure: Re-balance tests envs
  • e66eb48 azure: coredump: Wait for systemd fully booted
  • 6561fc6 ipatests: re-add test_dnssec.py::TestInstallDNSSECFirst in gating
  • 8bf9538 azure: Make it possible to adjust Docker resources per test env
  • 2a7f21a ipa-kdb: fix gcc complaints in kdb tests
  • e94261f Set client keytab location for 389ds
  • ba6eb85 dnssec: fix the key type with OpenDNSSEC 2.1
  • 7daf47c ipatests: add a test for ZSK/KSK keytype in DNSKEY record
  • b8242e6 handle Y2038 in timestamp to datetime conversions
  • 5bfe16a OpenDNSSEC: fix timezone in key creation date
  • 56746ec freeipa.spec: bump the required version of 389ds
  • 2b8ccc8 freeipa.spec: synchronize with Fedora for 389-ds and PKI versions
  • a868604 ipatests: collect config files for NetworkManager and systemd-resolved
  • bc9ca47 ipatests: add utility for managing domain name resolvers
  • cdc78af ipatests: setup resolvers during replica and client installations
  • 549ef48 ipatests: do not manually modify /etc/resolv.conf in tests
  • 324ba20 ipatests: disable systemd-resolved cache
  • 9a28022 ipatests: mock resolver factory
  • 63a3cff ipatests: always try to create A records for hosts in IPA domain
  • d9744e7 ipatests: do not configure nameserver when installing client and replica
  • 47e9df1 ipatests: fix TestInstalDNSSECFirst::test_resolvconf logic
  • bca86ce pr-ci: Run tests on F34
  • 0b8517d Revert "ipatests: configure client to use IPA server as DNS resolver"
  • d43d9ca ipatests: Fetch sudo rules without time offset

Login to comment on this ticket.

Metadata