content/.packit.yaml at master · rhmdnd/content · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
downstream_package_name: scap-security-guide
upstream_package_name: scap-security-guide
upstream_tag_template: '{version}'
specfile_path: scap-security-guide.spec

actions:
  get-current-version:
  - bash utils/version.sh

srpm_build_deps:
  - bash

jobs:
- &build
  job: copr_build
  trigger: pull_request
  identifier: main
  targets:
  - fedora-all-x86_64
  - centos-stream-8-x86_64
  - centos-stream-9-x86_64
  - centos-stream-10-x86_64

- <<: *build
  trigger: commit
  branch: "gh-readonly-queue/.*"

# Contest-based /hardening/host-os testing
# - this is a minimal set of tests that can run directly on the reserved OS
#   by remediating + scanning it
# - let Packit handle it natively by installing built scap-security-guide RPM
#   and calling Contest to test that OS-installed RPM content

- &contest-host-os-oscap
   job: copr_build
   trigger: pull_request
   identifier: mock
   targets:
   - fedora-all-x86_64
   actions:
     get-current-version:
      - bash utils/version.sh
     post-upstream-clone:
       - bash -c "cp tests/scap-security-guide_fedora.spec.in scap-security-guide.spec"
       # There can only be one spec file or copr gets mad. So we do a quick change out to
       # a production-like spec file for the mock build.

- &contest-oscap
  job: tests
  trigger: pull_request
  fmf_url: https://github.com/RHSecurityCompliance/contest.git
  fmf_ref: main
  tmt_plan: /plans/upstream-parallel/oscap
  identifier: contest-host-os-oscap
  targets:
    centos-stream-8: {}
    centos-stream-9: {}
    centos-stream-10: {}
  tf_extra_params:
    settings:
      pipeline:
        parallel-limit: 32

- <<: *contest-host-os-oscap
  tmt_plan: /plans/upstream-parallel/ansible
  identifier: contest-host-os-ansible

- <<: *contest-host-os-oscap
  tmt_plan: /plans/upstream-parallel/other
  identifier: contest-host-os-other

# Contest-based testing where the contest-atex-testingfarm is run via Packit
# on a huge VM host, setting up many containers/VMs to parallelize the testing,
# also allowing it to run tests that require VMs
# - this effectively allows full Contest suite execution (all tests that make
#   sense for PR testing here)
#
# See docs/manual/developer/08_content_tests.md (section about Packit) on how
# this is supposed to be used.

- job: tests
  trigger: pull_request
  fmf_url: https://github.com/RHSecurityCompliance/contest-atex-testingfarm.git
  fmf_ref: main
  identifier: contest-all
  targets: [fedora-latest-stable]
  manual_trigger: true
  skip_build: true
  tf_extra_params:
    # increase default, per README.md of the above repo
    # - this includes time spent waiting in queued
    settings:
      pipeline:
        timeout: 1200

# tests present locally in this repo, under tests/
# - when modifying these, modify also tests/tmt/

- job: tests
  trigger: pull_request
  fmf_path: tests/tmt
  tmt_plan: /fedora-cis/plan$
  identifier: fedora-cis
  targets:
    fedora-all: {}

- job: propose_downstream
  trigger: release
  dist_git_branches:
    - fedora-all