Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] absence of rngd is not reported as error #673

Closed
mbuechse opened this issue Jul 30, 2024 · 5 comments
Closed

[BUG] absence of rngd is not reported as error #673

mbuechse opened this issue Jul 30, 2024 · 5 comments
Assignees
Labels
bug Something isn't working SCS is standardized SCS is standardized SCS-VP10 Related to tender lot SCS-VP10
Milestone

Comments

@mbuechse
Copy link
Contributor

It's a mismatch between

a) the standard and the testing guide on the one hand and
b) the test script on the other.

The standard clearly states:

The daemon rngd must be installed (usually from rng-tools or rng-utils).

The testing guide concurs:

[report error if] the service rngd is not running,

However, the script only issues a warning:

logger.warning(f"VM '{image.name}' doesn't provide the recommended service rngd")

Options:

  • change the script -- but then multiple test subjects will no longer pass the tests for SCS-compatible IaaS v4;
  • change the standard.

Opinions?

@mbuechse mbuechse added bug Something isn't working SCS is standardized SCS is standardized SCS-VP10 Related to tender lot SCS-VP10 labels Jul 30, 2024
@mbuechse mbuechse self-assigned this Jul 30, 2024
@mbuechse mbuechse added this to the R7 (v8.0.0) milestone Jul 30, 2024
@berendt
Copy link
Contributor

berendt commented Jul 30, 2024

I think an error is okay at this point. The cluster to be certified must provide images that can pass the intended tests. It is the operator's responsibility to provide an image that fulfils the requirements.

@mbuechse
Copy link
Contributor Author

It is the operator's responsibility to provide an image that fulfils the requirements.

At the same time, we want providers to use the original images wherever possible. See https://raw.githubusercontent.com/SovereignCloudStack/standards/main/Tests/iaas/scs-0104-v1-images.yaml

@berendt
Copy link
Contributor

berendt commented Jul 31, 2024

It is the operator's responsibility to provide an image that fulfils the requirements.

At the same time, we want providers to use the original images wherever possible. See https://raw.githubusercontent.com/SovereignCloudStack/standards/main/Tests/iaas/scs-0104-v1-images.yaml

Yes. But I think at least in the Ubuntu 22.04 image the required packages are included:

rng-tools5 - Daemon to use a Hardware TRNG

@mbuechse
Copy link
Contributor Author

Today's meeting of Team IaaS decided: keep test as is and introduce v2 of the standard changing language from "installed" to "running"

@mbuechse
Copy link
Contributor Author

Close this in favor of #674

@github-project-automation github-project-automation bot moved this from Backlog to Done in Sovereign Cloud Stack Jul 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working SCS is standardized SCS is standardized SCS-VP10 Related to tender lot SCS-VP10
Projects
Status: Done
Development

No branches or pull requests

2 participants