Table of Contents
Table of Contents | ||
---|---|---|
|
Release Notes for SIMP 6.4.0
Related Decision Logs
SIMP 6.4+: The ISO installation/Puppetfile workflow — implementation changes for ISO / simp config
SIMP 6.4.0: What r10k-friendly RPM features should it include? — implementation changes for RPM + simp-adapter
How to restructure the RPM installation sequence to be more r10k/Code Manager friendly — initial architecture discussion, some portions have been updated/obsoleted by the discussions above
Related Design Pages
SIMP Environments ― terminology of Environments
How to use this page
Go to the row of your module
If the "proposed version" is green, then it has been released and tagged
If the "proposed version" is blue, verify that the tests have all passed, bold the text
If the "proposed version" is bold, tag and release the component, and color the column green
Component Selection
BLUE | New version since last SIMP release |
YELLOW | New component since last SIMP release |
GRAY | Omitted component |
WHITE | Same version as last SIMP release |
RED | TBD: Outstanding problem |
BOLD | Ready to release |
BOLD ITALICS | Tag published but not verified as released |
GREEN | New version tagged, Forge released, or RPM released |
Update in progress of component section:
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Alpha Notes:
The ISO was built without the docs.
...
Puppet version for simp-core (integration) and SIMP ISO testing
Release | Puppet | Ruby | Notes |
---|---|---|---|
SIMP 6.4.0 | 5.5.14 | 2.4.5 | Version to be included in SIMP 6.4.0 ISOs |
Release | Puppet | Ruby | Notes |
---|---|---|---|
PE 2018.1.8 | 5.5.14 | 2.4.5 | |
OS Versions For Testing
SIMP acceptance tests will be executed with the following OS versions:
CentOS 7.6
CentOS 6.10
RedHat 7.6
RedHat 6.10
OracleLinux 7.6
OracleLinux 6.10
SIMP 6.4.0 ISOs for CentOS 7.6 and CentOS 6.10 will be built and tested.
If licenses are available, SIMP 6.4.0 ISOs for RedHat 7.6 and RedHat 6.10 will be built and tested.
Tests - New/Changed Features
...
blank - This test is not OS specific
green | these test are automated |
---|
Component | Required Tasks | Test | EL7 | EL6 | OL7 | OL6 | RH7 | RH6 | Status | Notes | |
---|---|---|---|---|---|---|---|---|---|---|---|
1 | Verify Puppet File matches release versions |
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
https://simp-project.atlassian.net/browse/SIMP-6717 | |||||||||||
2 | installation | Verify installation from RPM | This should be a simp-core task. | ||||||||
3 | installation | Documentation |
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
The installation changed significantly this release, make sure the docs have been updated and make sense.
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Verify Site module and local modules are not removed when upgrading.
https://simp-project.atlassian.net/browse/SIMP-6719 https://simp-project.atlassian.net/browse/SIMP-6210 | The installation changed significantly this release, make sure the docs have been updated and make sense. | ||||||||||
4 | Create and verify Changelog.rst | clone simp-core and run bundle exec rake deps:changelog2 and review documentation. | |||||||||
5 | 'Upgrading SIMP' has an entry for the latest version and is correct | Verify Site module and local modules are not removed when upgrading. | |||||||||
6 | SIMP server upgrade from RPM using the upgrade instructions. Document any steps that are needed outside the ordinary upgrade. Then, if there are additional steps, have someone else use the docs to do the upgrade to verify. |
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
See simp-integration_test for automated upgrade test.
this should be done for servers in both FIPS and NOFIPS mode.
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Or "drink your own home brew", which ever you prefer.
- CentOS 7: SIMP server and SIMP client
- CentOS 6: SIMP client only
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
in simp-core run
SIMP_BEAKER_See simp-integration_test for automated upgrade test. this should be done for servers in both FIPS and NOFIPS mode. | |||||||||||
7 | RPMs and Released Modules | Or "drink your own home brew", which ever you prefer.
| |||||||||
8 | Final RPM testing | RPMs have been uploaded to packagecloud | Run the simp-core install_from_rpm test and versify that it passes. This will pull the packages from packagecloud.io and do an install. | in simp-core run
and then do it all again with BEAKER_fips=yes | |||||||
9 | Puppet Forge Testing | After modules have been tag with an annotated tag | run the simp-core test install_from_core_module test to test the modules pushed to Puppet Forge | in simp-core run
|
|
|
Verify non-standard BIOS boot options from the ISO:
- choose own partitions
- minimum installation
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Info |
---|
Note that most of these test should eventually be automated by simp-packer, simp-integration_test, or simp-core tests so check there and remove them from these list as they are automated elsewhere. |
Verify all boot Options in UEFI mode from ISO:
- FIPS
- no-FIPS
- FIPS+Encrypted
- FIPS+choose own partitions
- minimum
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
and then do it all again with BEAKER_fips=yes |
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
in simp-core run
- beaker:suites[install_from_core_module]
- SIMP_BEAKER_OS=oel beaker:suites[install_from_core_module]
- beaker:suites[install_from_core_module,el6_server]
- SIMP_BEAKER_OS=oel beaker:suites[install_from_core_module,el6_server]
and then do it all again with BEAKER_fips=yes
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Each OS versions should have a fips, nofips and encrypted and unencrypted in order to test all options.
Review new features and make sure documentation is up to date for SIMP modules and they work. Purpose of this is to have someone other then the person who wrote the modules set up and use it.
Make sure 3rd party modules install.
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
NOTe: The person who wrote these modules should not be the person
who verifies them.
simp_bolt
simp_grub
hirs_provisioner
ruby_task helper?
freeradius
rkhunter
oath
3rd Party modules:
posix_acl?
mount_providers
locales
kdump
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
If autofs was fixed in 7.6 and 6.10 and works with stunnel, update the documentation. (See read the docs for information.)
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Verify Password changes
dont mess with upgrade
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
Tests - Regression/Integration Testing
The tests in this section are regression tests to ensure unmodified capabilities still function. These tests should use the packer boxes created in the New/Changed Feature tests, were applicable.
10 | simp_packer | Need ISO built | run simp_packer and create vagrant boxes for testing | Each OS versions should have a fips, nofips and encrypted and unencrypted in order to test all options. | |||||||
11 | New Modules/Features | Review new features and make sure documentation is up to date for SIMP modules and they work. Purpose of this is to have someone other then the person who wrote the modules set up and use it. Make sure 3rd party modules install. | NOTe: The person who wrote these modules should not be the person who verifies them. simp_bolt simp_grub hirs_provisioner ruby_task helper? freeradius rkhunter oath 3rd Party modules: posix_acl? mount_providers locales kdump | ||||||||
12 | auto_fs | check if autofs was fixed in 7.6 | If autofs was fixed in 7.6 and 6.10 and works with stunnel, update the documentation. (See read the docs for information.) | ||||||||
13 | compliance markup | Turn on compliance markup and validation and make sure it runs without errors. | |||||||||
14 | Verify Password changes dont mess with upgrade | https://simp-project.atlassian.net/browse/SIMP-6747 | According to change log, the password requirements have changed. Make sure old passwords still work after upgrading. |
Tests - Regression/Integration Testing
The tests in this section are regression tests to ensure unmodified capabilities still function. These tests should use the packer boxes created in the New/Changed Feature tests, were applicable.
Test | EL6 | EL7 | Status | Notes | |||
---|---|---|---|---|---|---|---|
1 | Verify non-standard BIOS boot options from the ISO:
| https://simp-project.atlassian.net/browse/SIMP-6731
| (SIMP, FIPS and Encryption are all tested by Packer.) | ||||
2 | Verify all boot Options in UEFI mode from ISO:
| ||||||
3 | PXE Boot Testing BIOS | ||||||
4 | PXE Boot Testing UEFI | ||||||
5 | Bootstrap simp-lite scenario | ||||||
6 | Verify simp-lite operations:
|
| ||||
7 | Bootstrap poss scenario |
8 | Bootstrap run-once scenario |
Jira Legacy | ||||||||
---|---|---|---|---|---|---|---|---|
|
9 | Verify ability to switch FIPS from on to off | Switching from off to on is known to have problems because of ciphers. | |||
10 | Verify ability to turn on and off auditing and selinux |
11 | General Review of documentation:
|
12 | simp-utils: executables that are not tested otherwise work as advertised |
unpack_dvd
- ?simp_env
| The following have acceptance tests that simply need to be executed:
| |||
13 | Modules with significant updates (number of lines changed, don't know impact.) |
The modules should be tested in their own but if we have time, take a look at the changes and how they work. (Doubt we will have time) auditd, compliance markup (covered else where.) pam, iptables pki |
Open Issues Assigned to Release
Jira Legacy | ||||||
---|---|---|---|---|---|---|
|
...
|