Robottelo: make_capsule() doesn't work on RHEL7

Created on 13 May 2016  路  3Comments  路  Source: SatelliteQE/robottelo

looks like the the tunnel is being created, but there's an error on accessing the capsule on new port - Permission denied. Looks like it is caused by SELinux as setenforce 0 helps.

Bug Infrastructure Urgent Priority

All 3 comments

is this happening due to the pending PR https://github.com/SatelliteQE/automation-tools/pull/330. If so, we need to get this merged asap <- @elyezer

Yes the failures is because firewall. Let's manage to merge that PR. I have some ideas on how to work with firewalld, will work on that asap.

This issue is caused by selinux policy preventing passenger to connect to ports not labeled as websm_port_t (9090/tcp)

foreman.te:
allow passenger_t websm_port_t:tcp_socket name_connect;

We are going to fix it by labeling predefined range of ports (9091-9190) as websm_port_t ports.
Plus we dont need ssh for tunneling instead we will switch to use socat tool

  • /me will prepare automation-tools fab task setup_alternate_capsule_ports() superseding enable_gateway_ports_connections()
  • @rplevka will make changes to robottelo tests implementing get_alternate_capsule_port()
Was this page helpful?
0 / 5 - 0 ratings

Related issues

renzon picture renzon  路  5Comments

rochacbruno picture rochacbruno  路  7Comments

rochacbruno picture rochacbruno  路  4Comments

renzon picture renzon  路  8Comments

renzon picture renzon  路  4Comments