diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index fb0cf2ccb..7ceb03150 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -101,15 +101,40 @@ jobs: sudo dpkg --install .pkg/apparmor.d_*_amd64.deb || true sudo systemctl restart apparmor.service - - name: Github Action specific requirements + - name: "Github Action: restart services to ensure they are confined" + run: | + sudo ps auxZ | grep -v '\[.*\]' + sudo aa-log -s --raw + services=( + containerd + cron + dockerd + ModemManager + multipathd + networkd-dispatcher + packagekit + polkit + snapd + systemd-hostnamed + systemd-logind + systemd-networkd + systemd-resolved + systemd-udevd + udisks2 + ) + for service in "${services[@]}"; do + sudo systemctl restart "$service" || true + sudo systemctl status "$service.service" || true + done + sudo ps auxZ | grep -v '\[.*\]' + sudo aa-log -s --raw + + - name: "Github Action: install integration dependencies" run: | - sudo ps auxZ - sudo systemctl restart polkit snapd - sudo systemctl restart systemd-hostnamed systemd-logind - sudo systemctl restart packagekit udisks2 bash tests/requirements.sh echo "AFTER RQRMT & RESTART" - sudo ps auxZ + sudo ps auxZ | grep -v '\[.*\]' + sudo aa-log -s --raw - name: Run the bats integration tests run: | @@ -118,4 +143,5 @@ jobs: - name: Show final AppArmor logs if: always() run: | + sudo ps auxZ | grep -v '\[.*\]' sudo aa-log -s --raw