Skip to content

Commit 8879c81

Browse files
committed
.ci: ovn-fake-multinode-tests: Run containers with apparmor=unconfined.
Commit 407a942 ("ci: Bump the Ubuntu image to 24.04.") already did that for unit tests and system tests running in containers. We should also do it for the containers that run as part of the ovn-fake-multinode-tests to avoid AppArmor permission issues. Signed-off-by: Dumitru Ceara <[email protected]> Acked-by: Ales Musil <[email protected]>
1 parent 412aeeb commit 8879c81

File tree

2 files changed

+13
-0
lines changed

2 files changed

+13
-0
lines changed

.ci/linux-util.sh

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,3 +17,11 @@ function free_up_disk_space_ubuntu()
1717
/usr/local/share/boost/'
1818
sudo rm -rf $paths
1919
}
20+
21+
function set_containers_apparmor_profile()
22+
{
23+
local profile=$1
24+
25+
sed -i "s/^#apparmor_profile = \".*\"$/apparmor_profile = \"$profile\"/" \
26+
/usr/share/containers/containers.conf
27+
}

.github/workflows/ovn-fake-multinode-tests.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -114,6 +114,11 @@ jobs:
114114
. .ci/linux-util.sh
115115
free_up_disk_space_ubuntu
116116
117+
- name: Set podman apparmor=unconfined
118+
run: |
119+
. .ci/linux-util.sh
120+
set_containers_apparmor_profile unconfined
121+
117122
- uses: actions/download-artifact@v4
118123
with:
119124
name: test-${{ github.ref_name }}-image

0 commit comments

Comments
 (0)