NO-JIRA: ci: Gate secure boot tests on centos-stream-release

[travier]

centos-stream-release now replaces centos-release. Update the package name until CentOS Stream 9 gets the new shim release and finally passes Secure Boot tests.

[dustymabe]

/lgtm

[jbtrystram]

/lgtm

[dustymabe]

kola-basic/firmware-uefi-secure is failing in this PR too.. are the settings update in this PR not applied when CI runs for it?

[travier]

OK, I'll take another look at this tomorrow

[mike-nguyen]

We use centos-release to skip some of the secureboot tests. We will need to change them to centos-stream-release here and here Whoops I thought this PR was the one to switch over to centos-stream-release

[mike-nguyen]

In the raw build-log.txt I found

parse error: Invalid numeric literal at line 1, column 5
failed to execute cmd-kola: signal: broken pipe

Caused by cosa kola list --json which will return the command itself cosa kola list --json followed by the json output inside a coreos-assembler container.

[coreos-assembler]$ cosa kola list --json | head
kola -p qemu list --json --output-dir tmp/kola
[
	{
		"Name": "basic",
		"Platforms": [
			"aws",
			"azure",
			"do",
			"esx",
			"gcp",

versus just kola list --json which just returns the JSON.

[coreos-assembler]$ kola list --json | head
[
	{
		"Name": "basic",
		"Platforms": [
			"aws",
			"azure",
			"do",
			"esx",
			"gcp",
			"openstack",

It doesn't look like it wasn't possible to get into the conditional that adds --denylist-test *.uefi-secure

[jlebon]

Should be fixed by coreos/coreos-assembler#3775.

[jlebon]

Should be fixed by coreos/coreos-assembler#3775.

Actually no. That's one issue, but there were two other issues here. I've pushed up some commits inline to fix those.

[openshift-ci]

@travier: all tests passed!

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[travier]

Thanks Jonathan.
/lgtm

[openshift-ci]

@travier: you cannot LGTM your own PR.

In response to this:

Thanks Jonathan.
/lgtm

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[travier]

Fixes: #1458
We really need to land coreos/coreos-assembler#3652

[jbtrystram]

/retitle NO-JIRA: ci: Gate secure boot tests on centos-stream-release

[openshift-ci-robot]

@travier: This pull request explicitly references no jira issue.

In response to this:

centos-stream-release now replaces centos-release. Update the package name until CentOS Stream 9 gets the new shim release and finally passes Secure Boot tests.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[jbtrystram]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dustymabe, jbtrystram, jlebon, travier

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [dustymabe,jbtrystram,jlebon,travier]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[travier]

Next is coreos/coreos-assembler#3775