From 887a5ae8d165d02dbcd5afd2e4b515e58dbff586 Mon Sep 17 00:00:00 2001 From: Gregory Giguashvili Date: Tue, 14 Jul 2026 07:47:20 +0300 Subject: [PATCH 1/7] Reenable FIPS image and scenario for RHEL 10.2 --- ...ainerfile.disabled => rhel102-bootc-source-fips.containerfile} | 0 .../periodics/{el102-src@fips.sh.disabled => el102-src@fips.sh} | 0 2 files changed, 0 insertions(+), 0 deletions(-) rename test/image-blueprints-bootc/el10/layer2-presubmit/group2/{rhel102-bootc-source-fips.containerfile.disabled => rhel102-bootc-source-fips.containerfile} (100%) rename test/scenarios-bootc/el10/periodics/{el102-src@fips.sh.disabled => el102-src@fips.sh} (100%) diff --git a/test/image-blueprints-bootc/el10/layer2-presubmit/group2/rhel102-bootc-source-fips.containerfile.disabled b/test/image-blueprints-bootc/el10/layer2-presubmit/group2/rhel102-bootc-source-fips.containerfile similarity index 100% rename from test/image-blueprints-bootc/el10/layer2-presubmit/group2/rhel102-bootc-source-fips.containerfile.disabled rename to test/image-blueprints-bootc/el10/layer2-presubmit/group2/rhel102-bootc-source-fips.containerfile diff --git a/test/scenarios-bootc/el10/periodics/el102-src@fips.sh.disabled b/test/scenarios-bootc/el10/periodics/el102-src@fips.sh similarity index 100% rename from test/scenarios-bootc/el10/periodics/el102-src@fips.sh.disabled rename to test/scenarios-bootc/el10/periodics/el102-src@fips.sh From 959d77f4f211fc75f7d629b2ac70659543df865d Mon Sep 17 00:00:00 2001 From: Gregory Giguashvili Date: Tue, 14 Jul 2026 07:50:46 +0300 Subject: [PATCH 2/7] Reenable optional sigstore scenarios --- ...re.sh.disabled => el102-lrel@optional-sigstore.sh} | 11 ++++++++++- ...ore.sh.disabled => el98-lrel@optional-sigstore.sh} | 11 ++++++++++- 2 files changed, 20 insertions(+), 2 deletions(-) rename test/scenarios-bootc/el10/releases/{el102-lrel@optional-sigstore.sh.disabled => el102-lrel@optional-sigstore.sh} (68%) rename test/scenarios-bootc/el9/releases/{el98-lrel@optional-sigstore.sh.disabled => el98-lrel@optional-sigstore.sh} (68%) diff --git a/test/scenarios-bootc/el10/releases/el102-lrel@optional-sigstore.sh.disabled b/test/scenarios-bootc/el10/releases/el102-lrel@optional-sigstore.sh similarity index 68% rename from test/scenarios-bootc/el10/releases/el102-lrel@optional-sigstore.sh.disabled rename to test/scenarios-bootc/el10/releases/el102-lrel@optional-sigstore.sh index c8884d067b..526e143a53 100644 --- a/test/scenarios-bootc/el10/releases/el102-lrel@optional-sigstore.sh.disabled +++ b/test/scenarios-bootc/el10/releases/el102-lrel@optional-sigstore.sh @@ -2,6 +2,15 @@ # Sourced from scenario.sh and uses functions defined there. +# Each optional suite restarts MicroShift with its own kustomizePaths config, +# adding ~10 minutes of restart overhead to the total execution time. +# shellcheck disable=SC2034 # used elsewhere +TEST_EXECUTION_TIMEOUT=60m + +# shellcheck disable=SC2034 # used elsewhere +# Increase greenboot timeout for optional packages (more services to start) +GREENBOOT_TIMEOUT=1200 + # Enable container signature verification for current release images, # including the optional components. # These are ec / rc / z-stream, thus must all to be signed. @@ -14,7 +23,7 @@ scenario_create_vms() { exit_if_image_not_found "${start_image}" prepare_kickstart host1 kickstart-bootc.ks.template "${start_image}" - launch_vm --boot_blueprint rhel102-bootc + launch_vm --boot_blueprint rhel102-bootc --vm_disksize 25 --vm_vcpus 4 } scenario_remove_vms() { diff --git a/test/scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh.disabled b/test/scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh similarity index 68% rename from test/scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh.disabled rename to test/scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh index 1d9d95ef94..f412842ee8 100644 --- a/test/scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh.disabled +++ b/test/scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh @@ -2,6 +2,15 @@ # Sourced from scenario.sh and uses functions defined there. +# Each optional suite restarts MicroShift with its own kustomizePaths config, +# adding ~10 minutes of restart overhead to the total execution time. +# shellcheck disable=SC2034 # used elsewhere +TEST_EXECUTION_TIMEOUT=60m + +# shellcheck disable=SC2034 # used elsewhere +# Increase greenboot timeout for optional packages (more services to start) +GREENBOOT_TIMEOUT=1200 + # Enable container signature verification for current release images, # including the optional components. # These are ec / rc / z-stream, thus must all to be signed. @@ -14,7 +23,7 @@ scenario_create_vms() { exit_if_image_not_found "${start_image}" prepare_kickstart host1 kickstart-bootc.ks.template "${start_image}" - launch_vm --boot_blueprint rhel98-bootc + launch_vm --boot_blueprint rhel98-bootc --vm_disksize 25 --vm_vcpus 4 } scenario_remove_vms() { From f12af38588c71a1ce9a15f2be791c5ece711bce1 Mon Sep 17 00:00:00 2001 From: Gregory Giguashvili Date: Tue, 14 Jul 2026 07:54:21 +0300 Subject: [PATCH 3/7] Reenable upgrade-fails-then-recovers scenarios --- .../el102-src@upgrade-fails-then-recovers.sh | 19 +++++++++++++++++++ ...> el98-src@upgrade-fails-then-recovers.sh} | 0 ...> el98-src@upgrade-fails-then-recovers.sh} | 0 3 files changed, 19 insertions(+) create mode 100644 test/scenarios-bootc/el10/presubmits/el102-src@upgrade-fails-then-recovers.sh rename test/scenarios-bootc/el9/presubmits/{el98-src@upgrade-fails-then-recovers.sh.disabled => el98-src@upgrade-fails-then-recovers.sh} (100%) rename test/scenarios/presubmits/{el98-src@upgrade-fails-then-recovers.sh.disabled => el98-src@upgrade-fails-then-recovers.sh} (100%) diff --git a/test/scenarios-bootc/el10/presubmits/el102-src@upgrade-fails-then-recovers.sh b/test/scenarios-bootc/el10/presubmits/el102-src@upgrade-fails-then-recovers.sh new file mode 100644 index 0000000000..c8d80fb6ff --- /dev/null +++ b/test/scenarios-bootc/el10/presubmits/el102-src@upgrade-fails-then-recovers.sh @@ -0,0 +1,19 @@ +#!/bin/bash + +# Sourced from scenario.sh and uses functions defined there. + +scenario_create_vms() { + prepare_kickstart host1 kickstart-bootc.ks.template rhel102-bootc-source + launch_vm rhel102-bootc +} + +scenario_remove_vms() { + remove_vm host1 +} + +scenario_run_tests() { + run_tests host1 \ + --variable "TARGET_REF:rhel102-bootc-source-fake-next-minor" \ + --variable "BOOTC_REGISTRY:${MIRROR_REGISTRY_URL}" \ + suites/upgrade/upgrade-fails-then-recovers.robot +} diff --git a/test/scenarios-bootc/el9/presubmits/el98-src@upgrade-fails-then-recovers.sh.disabled b/test/scenarios-bootc/el9/presubmits/el98-src@upgrade-fails-then-recovers.sh similarity index 100% rename from test/scenarios-bootc/el9/presubmits/el98-src@upgrade-fails-then-recovers.sh.disabled rename to test/scenarios-bootc/el9/presubmits/el98-src@upgrade-fails-then-recovers.sh diff --git a/test/scenarios/presubmits/el98-src@upgrade-fails-then-recovers.sh.disabled b/test/scenarios/presubmits/el98-src@upgrade-fails-then-recovers.sh similarity index 100% rename from test/scenarios/presubmits/el98-src@upgrade-fails-then-recovers.sh.disabled rename to test/scenarios/presubmits/el98-src@upgrade-fails-then-recovers.sh From bd522935f6955caf045942b4f7b45c1115bf1575 Mon Sep 17 00:00:00 2001 From: Gregory Giguashvili Date: Tue, 14 Jul 2026 07:59:32 +0300 Subject: [PATCH 4/7] Reenable rpm-upgrade z-stream to release ostree scenario --- ...pm-upgrade.sh.disabled => el98-zprel@el98-lrel@rpm-upgrade.sh} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename test/scenarios/releases/{el98-zprel@el98-lrel@rpm-upgrade.sh.disabled => el98-zprel@el98-lrel@rpm-upgrade.sh} (100%) diff --git a/test/scenarios/releases/el98-zprel@el98-lrel@rpm-upgrade.sh.disabled b/test/scenarios/releases/el98-zprel@el98-lrel@rpm-upgrade.sh similarity index 100% rename from test/scenarios/releases/el98-zprel@el98-lrel@rpm-upgrade.sh.disabled rename to test/scenarios/releases/el98-zprel@el98-lrel@rpm-upgrade.sh From 02100ae87b724090f9a43d86bb9ac7c25b205d33 Mon Sep 17 00:00:00 2001 From: Gregory Giguashvili Date: Tue, 14 Jul 2026 08:05:03 +0300 Subject: [PATCH 5/7] Reenable low-latency ostree images and scenarios --- ...rhel98-source-tuned.toml.disabled => rhel98-source-tuned.toml} | 0 .../{el98-src@low-latency.sh.disabled => el98-src@low-latency.sh} | 0 ...el98-lrel@low-latency.sh.disabled => el98-lrel@low-latency.sh} | 0 3 files changed, 0 insertions(+), 0 deletions(-) rename test/image-blueprints/layer2-presubmit/group1/{rhel98-source-tuned.toml.disabled => rhel98-source-tuned.toml} (100%) rename test/scenarios/presubmits/{el98-src@low-latency.sh.disabled => el98-src@low-latency.sh} (100%) rename test/scenarios/releases/{el98-lrel@low-latency.sh.disabled => el98-lrel@low-latency.sh} (100%) diff --git a/test/image-blueprints/layer2-presubmit/group1/rhel98-source-tuned.toml.disabled b/test/image-blueprints/layer2-presubmit/group1/rhel98-source-tuned.toml similarity index 100% rename from test/image-blueprints/layer2-presubmit/group1/rhel98-source-tuned.toml.disabled rename to test/image-blueprints/layer2-presubmit/group1/rhel98-source-tuned.toml diff --git a/test/scenarios/presubmits/el98-src@low-latency.sh.disabled b/test/scenarios/presubmits/el98-src@low-latency.sh similarity index 100% rename from test/scenarios/presubmits/el98-src@low-latency.sh.disabled rename to test/scenarios/presubmits/el98-src@low-latency.sh diff --git a/test/scenarios/releases/el98-lrel@low-latency.sh.disabled b/test/scenarios/releases/el98-lrel@low-latency.sh similarity index 100% rename from test/scenarios/releases/el98-lrel@low-latency.sh.disabled rename to test/scenarios/releases/el98-lrel@low-latency.sh From 6cae7588795620349c133c974cb7485f78633227 Mon Sep 17 00:00:00 2001 From: Gregory Giguashvili Date: Tue, 14 Jul 2026 09:03:26 +0300 Subject: [PATCH 6/7] Remove CNI plugin installation from FIPS bootc image --- .../group2/rhel102-bootc-source-fips.containerfile | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/test/image-blueprints-bootc/el10/layer2-presubmit/group2/rhel102-bootc-source-fips.containerfile b/test/image-blueprints-bootc/el10/layer2-presubmit/group2/rhel102-bootc-source-fips.containerfile index 28a88aec10..ae6f69cc9e 100644 --- a/test/image-blueprints-bootc/el10/layer2-presubmit/group2/rhel102-bootc-source-fips.containerfile +++ b/test/image-blueprints-bootc/el10/layer2-presubmit/group2/rhel102-bootc-source-fips.containerfile @@ -8,9 +8,6 @@ match-architectures = ["x86_64"] EOF # Enable the FIPS crypto policy -# -# Note: CNI plugins are required for podman to operate normally on RHEL 9.x. -# This package is no longer installed as cri-o dependency. -RUN dnf install -y crypto-policies-scripts containernetworking-plugins && \ +RUN dnf install -y crypto-policies-scripts && \ update-crypto-policies --no-reload --set FIPS && \ dnf clean all From 06082ccda5f708c00cfcd8bfce659fc3cccca5d6 Mon Sep 17 00:00:00 2001 From: Gregory Giguashvili Date: Tue, 14 Jul 2026 11:22:02 +0300 Subject: [PATCH 7/7] Remove redundant --boot_blueprint option --- .../el10/releases/el102-lrel@optional-sigstore.sh | 2 +- .../scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh | 2 +- test/scenarios/releases/el98-zprel@el98-lrel@rpm-upgrade.sh | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/test/scenarios-bootc/el10/releases/el102-lrel@optional-sigstore.sh b/test/scenarios-bootc/el10/releases/el102-lrel@optional-sigstore.sh index 526e143a53..e657720bb7 100644 --- a/test/scenarios-bootc/el10/releases/el102-lrel@optional-sigstore.sh +++ b/test/scenarios-bootc/el10/releases/el102-lrel@optional-sigstore.sh @@ -23,7 +23,7 @@ scenario_create_vms() { exit_if_image_not_found "${start_image}" prepare_kickstart host1 kickstart-bootc.ks.template "${start_image}" - launch_vm --boot_blueprint rhel102-bootc --vm_disksize 25 --vm_vcpus 4 + launch_vm rhel102-bootc --vm_disksize 25 --vm_vcpus 4 } scenario_remove_vms() { diff --git a/test/scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh b/test/scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh index f412842ee8..fc078e23c9 100644 --- a/test/scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh +++ b/test/scenarios-bootc/el9/releases/el98-lrel@optional-sigstore.sh @@ -23,7 +23,7 @@ scenario_create_vms() { exit_if_image_not_found "${start_image}" prepare_kickstart host1 kickstart-bootc.ks.template "${start_image}" - launch_vm --boot_blueprint rhel98-bootc --vm_disksize 25 --vm_vcpus 4 + launch_vm rhel98-bootc --vm_disksize 25 --vm_vcpus 4 } scenario_remove_vms() { diff --git a/test/scenarios/releases/el98-zprel@el98-lrel@rpm-upgrade.sh b/test/scenarios/releases/el98-zprel@el98-lrel@rpm-upgrade.sh index 535d0c92a4..c052bd32ee 100644 --- a/test/scenarios/releases/el98-zprel@el98-lrel@rpm-upgrade.sh +++ b/test/scenarios/releases/el98-zprel@el98-lrel@rpm-upgrade.sh @@ -18,7 +18,7 @@ scenario_create_vms() { exit_if_brew_rpms_not_found prepare_kickstart host1 kickstart-liveimg.ks.template "" - launch_vm --boot_blueprint rhel-9.8 + launch_vm rhel-9.8 # Open the firewall ports. Other scenarios get this behavior by # embedding settings in the blueprint, but there is no blueprint # for this scenario. We need do this step before running the RF