erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-11-03 09:37:34 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Skip pasta forwarder tests pending passt SELinux fix

Browse source 
The pasta_t SELinux domain is denied { create } for pasta.sock
on ifconfig_var_run_t directories. Disable all pasta forwarder
tests (BATS + e2e) until a new passt release ships the fix.

Signed-off-by: Jan Rodák <hony.com@seznam.cz>
This commit is contained in:
Jan Rodák 2026-05-25 12:31:26 +02:00
parent bd7e8bbab3
commit 3f427f4535
No known key found for this signature in database
GPG key ID: D458A9B20435C2BF
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
test/e2e/run_networking_test.go
View file

@ -1060,6 +1060,8 @@ EXPOSE 2004-2005/tcp`, ALPINE)
configurePortForwarder := func(forwarder string) {
GinkgoHelper()
if forwarder == "pasta" {
// TODO: enable after new passt release with SELinux fix for pasta.sock (pasta_t + ifconfig_var_run_t)
Skip("disabled: pasta SELinux policy denies pasta.sock creation (needs passt release with fix)")
if !isRootless() {
Skip("pasta port forwarding requires rootless")
}

6
test/system/500-networking.bats
View file

@ -433,7 +433,9 @@ EOCONF
}
# bats test_tags=ci:parallel
# TODO: enable after new passt release with SELinux fix for pasta.sock (pasta_t + ifconfig_var_run_t)
@test "podman network reload - pasta forwarder" {
skip "disabled: pasta SELinux policy denies pasta.sock creation (needs passt release with fix)"
skip_if_remote "podman network reload does not have remote support"
is_rootless || skip "pasta port forwarder requires rootless"
type -P pesto >/dev/null || skip "pesto not available"
@ -644,7 +646,9 @@ EOCONF
}
# bats test_tags=ci:parallel
# TODO: enable after new passt release with SELinux fix for pasta.sock (pasta_t + ifconfig_var_run_t)
@test "podman network connect/disconnect with port forwarding - pasta forwarder" {
skip "disabled: pasta SELinux policy denies pasta.sock creation (needs passt release with fix)"
is_rootless || skip "pasta port forwarder requires rootless"
type -P pesto >/dev/null || skip "pesto not available"
_test_network_connect_disconnect pasta
@ -756,7 +760,9 @@ EOCONF
}
# bats test_tags=ci:parallel
# TODO: enable after new passt release with SELinux fix for pasta.sock (pasta_t + ifconfig_var_run_t)
@test "podman network after restart - pasta forwarder" {
skip "disabled: pasta SELinux policy denies pasta.sock creation (needs passt release with fix)"
is_rootless || skip "pasta port forwarder requires rootless"
type -P pesto >/dev/null || skip "pesto not available"
_test_network_after_restart pasta