Skip to content

Conversation

@mvo5
Copy link
Contributor

@mvo5 mvo5 commented Dec 11, 2025

This PR adds an regression/integration test for the bootc anaconda-iso image type for #404. As a by-product it also tweaks the "manifest-is-container" test for rhel that was not quite working before (see the git commit message for details).

Please review extra carefully as this is a pull_request_target PR


@pytest.mark.skipif(os.getuid() != 0, reason="needs root")
@pytest.mark.skipif(not os.getenv("RHEL_REGISTRY_USER"), reason="needs registry secrets")
def test_rhel_bootc_anaconda_iso(tmp_path):
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Once that is in we could do a smoke test for another bootc rhel container (qcow2) but because there is nothing special there (once its pulled from the repo) it does not add much value except some peace-of-mind maybe?

@mvo5 mvo5 force-pushed the fix-anaconda-iso-from-rhel-2 branch 2 times, most recently from eb50e9e to 37d844e Compare December 12, 2025 09:16
@mvo5 mvo5 changed the title bib: fix anaconda-iso mTLS key extraction and add rhel specific tests test: add rhel specific tests Dec 12, 2025
@mvo5 mvo5 marked this pull request as ready for review December 12, 2025 09:17
@mvo5 mvo5 requested a review from a team as a code owner December 12, 2025 09:17
@mvo5 mvo5 requested review from bcl, lzap and thozza and removed request for a team December 12, 2025 09:17
lzap
lzap previously approved these changes Dec 12, 2025
The rhel_test.py was not working before because I (wrongly)
assumed that during a merge queue merge the branch would
have access to the repository secrets (which IMNSHO would
make sense given that the branch was approved and is going
into main). But that is not the case so this commit moves
to the same pattern we use in bib, i.e. we only allow this
to run for people with write permissions to the repo.

This means that the inital workflow for external contributors
will always fail but when a contributor clicks on retry it
will work.
@mvo5 mvo5 force-pushed the fix-anaconda-iso-from-rhel-2 branch from 37d844e to 0d7a2fd Compare December 15, 2025 08:10
This commit adds an integration test for the fix that bootc anaconda
ISO secrets must be read while the container is mounted.
@mvo5 mvo5 force-pushed the fix-anaconda-iso-from-rhel-2 branch from 0d7a2fd to a985688 Compare December 15, 2025 08:14
@thozza thozza added this pull request to the merge queue Dec 17, 2025
Merged via the queue into osbuild:main with commit dc16ea1 Dec 17, 2025
38 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants