Bug 1214159

Summary:	fips_install_encrypt_lvm_separate_boot test fails since the new cryptsetup release on s390x
Product:	[openSUSE] PUBLIC SUSE Linux Enterprise Server 15 SP4	Reporter:	Timo Jyrinki <tjyrinki>
Component:	Security	Assignee:	Security Team bot <security-team>
Status:	RESOLVED FIXED	QA Contact:
Severity:	Normal
Priority:	P5 - None	CC:	fvogt
Version:	SLES15SP4-MaintUpd
Target Milestone:	---
Hardware:	S/390
OS:	Other
URL:	https://openqa.suse.de/tests/11763908/modules/validate_lvm/steps/2
Whiteboard:
Found By:	openQA	Services Priority:
Business Priority:		Blocker:	Yes
Marketing QA Status:	---	IT Deployment:	---

Description Timo Jyrinki 2023-08-10 12:41:48 UTC

This problem appeared on 20230807, which seems to match with a new released cryptsetup version. It is however unknown why the problem did not show up before.

See openQA test in scenario https://openqa.suse.de/tests/11763908/modules/validate_lvm/steps/2, or always latest result in this scenario:https://openqa.suse.de/tests/latest?arch=s390x&distri=sle&flavor=Server-DVD-Updates&machine=s390x-kvm-sle12&test=fips_install_encrypt_lvm_separate_boot&version=15-SP4

The problem does not happen on aarch64 or x86_64 in the same test suite.

Comment 3 Fabian Vogt 2023-08-15 09:05:29 UTC

This is actually unrelated to cryptsetup. YaST changed the logic for opening the SSH port in the firewall: bug 1211764.

Previously it was open if the installation was done over SSH, but with the new logic this is not the case if password auth for root is allowed.

Comment 4 Timo Jyrinki 2023-08-18 06:43:42 UTC

We've now enabled the SSH in the test and can confirm the problem is now gone https://openqa.suse.de/tests/11866913#