freeipa

#9498 Test failure in tests calling dnf upgrade
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

Issue

Two tests are failing when executed on the new f39 runners. Both are calling dnf upgrade and fail because the repo is hosted on mirrors.fedoraproject.org which has a broken trust chain.

Example of failures: in pvoborni's PR #38 testing the execution on the new runners.

----------------------------- Captured stderr call -----------------------------
ipa: ERROR: stderr: Error: Error downloading packages:
  Curl error (6): Couldn't resolve host name for https://mirrors.fedoraproject.org/metalink?repo=fedora-39&arch=x86_64 [Could not resolve host: mirrors.fedoraproject.org]
Could not install OpenSC package
  • test_installation_TestInstallMaster: Details
ERROR    ipatests.pytest_ipa.integration.host.Host.master.cmd400:host.py:201 stderr: Error: Error downloading packages:
  Curl error (6): Couldn't resolve host name for https://mirrors.fedoraproject.org/metalink?repo=updates-released-f39&arch=x86_64 [Could not resolve host: mirrors.fedoraproject.org]

bind logs for query_errors.log:

11-Dec-2023 13:29:40.454 info: client @0x7f478bbf9b68 127.0.0.1#56440 (mirrors.fedoraproject.org): query failed (broken trust chain) for mirrors.fedoraproject.org/IN/A at ../../../lib/ns/query.c:7824
11-Dec-2023 13:29:40.455 info: client @0x7f478bbfa968 127.0.0.1#46765 (mirrors.fedoraproject.org): query failed (broken trust chain) for mirrors.fedoraproject.org/IN/AAAA at ../../../lib/ns/query.c:7824

The test can be modified to install IPA with the --no-dnssec-validation option.

I filed https://pagure.io/fedora-infrastructure/issue/11680 to track the actual issue.

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7119

master:

  • a177121af66516deed7c6794b92f15a74cc30bd3 ipatests: disable dnssec validation in tests using dnf

ipa-4-11:

  • dc1d9029901ad7b95c7b27e3842074ab7c3fcec9 ipatests: disable dnssec validation in tests using dnf

ipa-4-10:

  • 04804ed0b2385791617b7a2e22ddbf3ec0891e60 ipatests: disable dnssec validation in tests using dnf

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

ipa-4-9:

  • e860de2f15eb4399a217d439c14729b4a5d5bfa9 ipatests: disable dnssec validation in tests using dnf

ipa-4-8:

  • 40c5efa867ffaaee770f8f61f0b4f8455fe1be5d ipatests: remove azure tests
  • 09964365de730e66c05c71e2c773749572bd8070 ipatests: disable dnssec validation in tests using dnf
Metadata

test-failure tests

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.