Bug 1214159 - fips_install_encrypt_lvm_separate_boot test fails since the new cryptsetup release on s390x
Summary: fips_install_encrypt_lvm_separate_boot test fails since the new cryptsetup re...
Status: RESOLVED FIXED
Alias: None
Product: PUBLIC SUSE Linux Enterprise Server 15 SP4
Classification: openSUSE
Component: Security (show other bugs)
Version: SLES15SP4-MaintUpd
Hardware: S/390 Other
: P5 - None : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact:
URL: https://openqa.suse.de/tests/11763908...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-08-10 12:41 UTC by Timo Jyrinki
Modified: 2023-08-18 06:43 UTC (History)
1 user (show)

See Also:
Found By: openQA
Services Priority:
Business Priority:
Blocker: Yes
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Timo Jyrinki 2023-08-10 12:41:48 UTC 
This problem appeared on 20230807, which seems to match with a new released cryptsetup version. It is however unknown why the problem did not show up before.

See openQA test in scenario https://openqa.suse.de/tests/11763908/modules/validate_lvm/steps/2, or always latest result in this scenario:https://openqa.suse.de/tests/latest?arch=s390x&distri=sle&flavor=Server-DVD-Updates&machine=s390x-kvm-sle12&test=fips_install_encrypt_lvm_separate_boot&version=15-SP4

The problem does not happen on aarch64 or x86_64 in the same test suite.
Comment 3 Fabian Vogt 2023-08-15 09:05:29 UTC 
This is actually unrelated to cryptsetup. YaST changed the logic for opening the SSH port in the firewall: bug 1211764.

Previously it was open if the installation was done over SSH, but with the new logic this is not the case if password auth for root is allowed.
Comment 4 Timo Jyrinki 2023-08-18 06:43:42 UTC 
We've now enabled the SSH in the test and can confirm the problem is now gone https://openqa.suse.de/tests/11866913#