Two tests are failing when executed on the new f39 runners. Both are calling dnf upgrade and fail because the repo is hosted on mirrors.fedoraproject.org which has a broken trust chain.
Example of failures: in pvoborni's PR #38 testing the execution on the new runners.
test_advise
----------------------------- Captured stderr call ----------------------------- ipa: ERROR: stderr: Error: Error downloading packages: Curl error (6): Couldn't resolve host name for https://mirrors.fedoraproject.org/metalink?repo=fedora-39&arch=x86_64 [Could not resolve host: mirrors.fedoraproject.org] Could not install OpenSC package
test_installation_TestInstallMaster
ERROR ipatests.pytest_ipa.integration.host.Host.master.cmd400:host.py:201 stderr: Error: Error downloading packages: Curl error (6): Couldn't resolve host name for https://mirrors.fedoraproject.org/metalink?repo=updates-released-f39&arch=x86_64 [Could not resolve host: mirrors.fedoraproject.org]
bind logs for query_errors.log:
11-Dec-2023 13:29:40.454 info: client @0x7f478bbf9b68 127.0.0.1#56440 (mirrors.fedoraproject.org): query failed (broken trust chain) for mirrors.fedoraproject.org/IN/A at ../../../lib/ns/query.c:7824 11-Dec-2023 13:29:40.455 info: client @0x7f478bbfa968 127.0.0.1#46765 (mirrors.fedoraproject.org): query failed (broken trust chain) for mirrors.fedoraproject.org/IN/AAAA at ../../../lib/ns/query.c:7824
The test can be modified to install IPA with the --no-dnssec-validation option.
--no-dnssec-validation
I filed https://pagure.io/fedora-infrastructure/issue/11680 to track the actual issue.
Metadata Update from @frenaud: - Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7119
master:
ipa-4-11:
ipa-4-10:
Metadata Update from @frenaud: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
ipa-4-9:
Log in to comment on this ticket.