Xen hotplug scripts should be initrc_exec_t #419

DemiMarie · 2023-04-30T03:34:59Z

This makes them unconfined while ensuring that programs they spawn have the correct (possibly confined) contexts.

Reported-by: Marek Marczykowski-Górecki [email protected]
Fixes: QubesOS/qubes-issues#8155

This makes them unconfined while ensuring that programs they spawn have the correct (possibly confined) contexts. Reported-by: Marek Marczykowski-Górecki <[email protected]> Fixes: QubesOS/qubes-issues#8155

qubesos-bot · 2023-05-01T04:58:24Z

OpenQA test summary

Complete test suite and dependencies: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.2&build=2023050602-4.2&flavor=pull-requests

New failures, excluding unstable

Compared to: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.2&build=2023021823-4.2&flavor=update

system_tests_gui_tools
- qui_widgets_update: unnamed test (unknown)
- qui_widgets_update: Failed (test died)
  # Test died: no candidate needle with tag(s) 'qubes-update-finish' ...
- qui_widgets_update: unnamed test (unknown)
system_tests_basic_vm_qrexec_gui
- TC_20_AudioVM_Pulse_debian-11: test_223_audio_play_hvm (failure)
  AssertionError: frequency 3517.628022516466 not in specified range,...
- TC_20_NonAudio_whonix-ws-16: test_105_qrexec_filemove (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
- TC_20_NonAudio_whonix-ws-16: test_130_qrexec_filemove_disk_full (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_network
- VmNetworking_fedora-37: test_040_inter_vm (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_splitgpg
- TC_00_Direct_fedora-37: test_070_log_file_to_logger_fd (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_gui_interactive
- clipboard_and_web: unnamed test (unknown)
- clipboard_and_web: Failed (test died)
  # Test died: no candidate needle with tag(s) 'personal-firefox' mat...
system_tests_guivm_gui_interactive
- guivm_manager: unnamed test (unknown)
- guivm_manager: Failed (test died)
  # Test died: no candidate needle with tag(s) 'vm-settings-ok' match...
system_tests_network_ipv6
- VmIPv6Networking_fedora-37: test_111_dynamic_detach_attach (error + cleanup)
  raise exceptions.TimeoutError() from exc... TimeoutError
- VmIPv6Networking_fedora-37: test_540_ipv6_inter_vm (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_dispvm
- TC_20_DispVM_whonix-gw-16: test_010_simple_dvm_run (skipped + cleanup)
- TC_20_DispVM_whonix-gw-16: test_020_gui_app (skipped + cleanup)
- TC_20_DispVM_whonix-gw-16: test_030_edit_file (skipped + cleanup)
- TC_20_DispVM_whonix-gw-16: test_100_open_in_dispvm (skipped + cleanup)
- TC_20_DispVM_whonix-ws-16: test_010_simple_dvm_run (failure)
  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError
system_tests_vm_qrexec_gui_pipewire
- TC_20_AudioVM_Pulse_fedora-37: test_222_audio_rec_unmuted_pulseaudio (failure)
  AssertionError: only silence detected, no useful audio data
- TC_20_NonAudio_fedora-37: test_100_qrexec_filecopy (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_qwt_win7@hw1
- windows_install: Failed (test died)
  # Test died: command './install.sh' failed at /usr/lib/os-autoinst/...
system_tests_gui_tools@hw1
- qui_widgets_update: unnamed test (unknown)
- qui_widgets_update: Failed (test died)
  # Test died: no candidate needle with tag(s) 'qubes-update-finish' ...
- qui_widgets_update: unnamed test (unknown)

Failed tests

31 failures

system_tests_gui_tools
- qui_widgets_update: unnamed test (unknown)
- qui_widgets_update: Failed (test died)
  # Test died: no candidate needle with tag(s) 'qubes-update-finish' ...
- qui_widgets_update: unnamed test (unknown)
system_tests_basic_vm_qrexec_gui
- TC_20_AudioVM_Pulse_debian-11: test_223_audio_play_hvm (failure)
  AssertionError: frequency 3517.628022516466 not in specified range,...
- TC_20_NonAudio_whonix-ws-16: test_105_qrexec_filemove (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
- TC_20_NonAudio_whonix-ws-16: test_130_qrexec_filemove_disk_full (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_network
- VmNetworking_fedora-37: test_040_inter_vm (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_pvgrub_salt_storage
- [unstable] TC_41_HVMGrub_debian-11: test_010_template_based_vm (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
- [unstable] TC_42_PVHGrub_debian-11: test_010_template_based_vm (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_splitgpg
- TC_00_Direct_fedora-37: test_070_log_file_to_logger_fd (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
- TC_10_Thunderbird_whonix-ws-16: test_020_send_receive_inline_with_attachment (failure)
  dogtail.tree.SearchError: descendent of [application | Thunderbird]...
system_tests_gui_interactive
- clipboard_and_web: unnamed test (unknown)
- clipboard_and_web: Failed (test died)
  # Test died: no candidate needle with tag(s) 'personal-firefox' mat...
system_tests_guivm_gui_interactive
- guivm_manager: unnamed test (unknown)
- guivm_manager: Failed (test died)
  # Test died: no candidate needle with tag(s) 'vm-settings-ok' match...
system_tests_network_ipv6
- VmIPv6Networking_fedora-37: test_111_dynamic_detach_attach (error + cleanup)
  raise exceptions.TimeoutError() from exc... TimeoutError
- VmIPv6Networking_fedora-37: test_540_ipv6_inter_vm (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_dispvm
- [unstable] TC_20_DispVM_debian-11: test_030_edit_file (failure + cleanup)
  AssertionError: Timeout while waiting for disp[0-9]* window to show
- [unstable] TC_20_DispVM_fedora-37: test_100_open_in_dispvm (failure + cleanup)
  AssertionError: Timeout while waiting for disp[0-9]* window to show
- TC_20_DispVM_whonix-gw-16: test_010_simple_dvm_run (skipped + cleanup)
- TC_20_DispVM_whonix-gw-16: test_020_gui_app (skipped + cleanup)
- TC_20_DispVM_whonix-gw-16: test_030_edit_file (skipped + cleanup)
- TC_20_DispVM_whonix-gw-16: test_100_open_in_dispvm (skipped + cleanup)
- TC_20_DispVM_whonix-ws-16: test_010_simple_dvm_run (failure)
  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError
system_tests_vm_qrexec_gui_pipewire
- TC_20_AudioVM_Pulse_fedora-37: test_222_audio_rec_unmuted_pulseaudio (failure)
  AssertionError: only silence detected, no useful audio data
- TC_20_NonAudio_fedora-37: test_100_qrexec_filecopy (error)
  qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_qwt_win10@hw1
- windows_install: Failed (test died)
  # Test died: command './install.sh' failed at /usr/lib/os-autoinst/...
system_tests_qwt_win7@hw1
- windows_install: Failed (test died)
  # Test died: command './install.sh' failed at /usr/lib/os-autoinst/...
system_tests_gui_tools@hw1
- qui_widgets_update: unnamed test (unknown)
- qui_widgets_update: Failed (test died)
  # Test died: no candidate needle with tag(s) 'qubes-update-finish' ...
- qui_widgets_update: unnamed test (unknown)

Fixed failures

Compared to: https://openqa.qubes-os.org/tests/60652#dependencies

8 fixed

system_tests_network
- VmNetworking_debian-11: test_112_reattach_after_provider_shutdown (error + timed out)
  qubes.exc.QubesVMShutdownTimeoutError: Domain shutdown timed out: '...
system_tests_pvgrub_salt_storage
- StorageFile: test_001_non_volatile (error)
  subprocess.CalledProcessError: Command '/usr/lib/qubes/destroy-snap...
system_tests_network_ipv6
- VmIPv6Networking_debian-11: test_020_simple_proxyvm_nm (failure)
  AssertionError: 1 != 0 : nm-applet window not found
system_tests_network_updates
- TC_11_QvmTemplateMgmtVM_whonix-gw-16: test_000_template_list (failure)
  qvm-template: error: No matching templates to list
system_tests_dispvm
- TC_20_DispVM_whonix-ws-16: test_100_open_in_dispvm (failure)
  AssertionError: libvirt event impl drain timeout
system_tests_qwt_win10@hw1
- windows_install: wait_serial (wait serial expected)
  # wait_serial expected: qr/Rt7qO-\d+-/...
system_tests_basic_vm_qrexec_gui@hw1
- TC_00_Basic: test_203_udev_block_exclude_varlibqubes (error)
  subprocess.CalledProcessError: Command '/usr/lib/qubes/destroy-snap...
- TC_00_Basic: test_204_udev_block_exclude_custom_file (error)
  subprocess.CalledProcessError: Command '/usr/lib/qubes/destroy-snap...

Unstable tests

system_tests_whonix
whonix_torbrowser/ (1/5 times with errors)
- job 70358 None
whonix_torbrowser/ (1/5 times with errors)
- job 69775 None
whonix_torbrowser/ (2/5 times with errors)
- job 69402 None
- job 70358 None
whonix_torbrowser/ (1/5 times with errors)
- job 69775 None
whonix_torbrowser/ (1/5 times with errors)
- job 69402 None
whonix_torbrowser/Failed (1/5 times with errors)
- job 70358 # Test died: no candidate needle with tag(s) 'tor-browser-ipcheck-o...
whonix_torbrowser/Failed (1/5 times with errors)
- job 69775 # Test died: no candidate needle with tag(s) 'anon-whonix-tor-brows...
whonix_torbrowser/Failed (1/5 times with errors)
- job 69402 # Test died: no candidate needle with tag(s) 'anon-whonix-tor-brows...
system_tests_gui_tools
qubesmanager_vmsettings/ (1/5 times with errors)
- job 71327 None
qubesmanager_vmsettings/Failed (1/5 times with errors)
- job 71327 # Test died: no candidate needle with tag(s) 'vm-settings-warn-mem'...
system_tests_basic_vm_qrexec_gui
TC_00_AppVM_debian-11/test_105_qrexec_filemove (1/5 times with errors)
- job 69778 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11/test_110_qrexec_filecopy_deny (1/5 times with errors)
- job 69778 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11/test_220_audio_play (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_fedora-37/test_220_audio_play (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_whonix-ws-16/test_220_audio_play (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_debian-11/test_223_audio_play_hvm (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_fedora-37/test_223_audio_play_hvm (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_whonix-ws-16/test_223_audio_play_hvm (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
system_tests_network
VmNetworking_debian-11/test_020_simple_proxyvm_nm (1/5 times with errors)
- job 69420 AssertionError: 1 != 0 : nm-applet window not found
VmNetworking_fedora-37/test_111_dynamic_detach_attach (1/5 times with errors)
- job 69420 self.assertEqual(self.run_cmd(self.testvm1, ... AssertionError: 2 != 0
system_tests_pvgrub_salt_storage
TC_41_HVMGrub_debian-11/test_000_standalone_vm (2/5 times with errors)
- job 69762 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
- job 70379 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_42_PVHGrub_debian-11/test_000_standalone_vm (1/5 times with errors)
- job 70379 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_41_HVMGrub_debian-11/test_010_template_based_vm (3/5 times with errors)
- job 69762 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
- job 70379 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
- job 71319 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_42_PVHGrub_debian-11/test_010_template_based_vm (3/5 times with errors)
- job 69423 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
- job 69762 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
- job 70379 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_splitgpg
TC_10_Thunderbird_fedora-37/test_020_send_receive_inline_with_attachment (2/5 times with errors)
- job 69764 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError
- job 71330 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError
system_tests_usbproxy
TC_20_USBProxy_core3_whonix-gw-16/test_030_detach (1/5 times with errors)
- job 71748 AssertionError: <AppVM at 0x7832c9e2ec10 name='test-inst-frontend' ...
TC_20_USBProxy_core3_whonix-gw-16/test_061_auto_attach_on_reconnect (1/5 times with errors)
- job 69740 AssertionError: 1 != 0 : Device reconnection failed
system_tests_network_ipv6
VmIPv6Networking_debian-11/test_000_simple_networking (1/5 times with errors)
- job 71732 qubes.exc.QubesMemoryError: Not enough memory to start domain 'test...
VmIPv6Networking_debian-11/test_030_firewallvm_firewall (1/5 times with errors)
- job 71329 raise exceptions.TimeoutError() from exc... TimeoutError
VmIPv6Networking_debian-11/test_040_inter_vm (1/5 times with errors)
- job 69421 raise exceptions.TimeoutError() from exc... TimeoutError
VmIPv6Networking_debian-11/test_203_fake_ip_inter_vm_allow (1/5 times with errors)
- job 70377 raise exceptions.TimeoutError() from exc... TimeoutError
VmIPv6Networking_debian-11/test_520_ipv6_simple_proxyvm_nm (1/5 times with errors)
- job 71329 AssertionError: 1 != 0 : nm-applet window not found
VmIPv6Networking_debian-11/test_712_ipv6_custom_ip_firewall (1/5 times with errors)
- job 69760 raise exceptions.TimeoutError() from exc... TimeoutError
system_tests_network_updates
TC_10_QvmTemplate_debian-11/test_000_template_list (1/5 times with errors)
- job 71318 AssertionError: libvirt event impl drain timeout
TC_11_QvmTemplateMgmtVM_debian-11/test_010_template_install (1/5 times with errors)
- job 71750 AssertionError: libvirt event impl drain timeout
system_tests_dispvm
TC_20_DispVM_debian-11/test_030_edit_file (1/5 times with errors)
- job 69461 AssertionError: Timeout while waiting for disp[0-9]* window to show
TC_20_DispVM_fedora-37/test_030_edit_file (1/5 times with errors)
- job 69755 AssertionError: b'test1\n' != b'Test test 2\ntest1\n'
TC_20_DispVM_fedora-37/test_100_open_in_dispvm (3/5 times with errors)
- job 69461 self.assertEqual(test_txt_content.s... AssertionError: b'' != b'test1'
- job 69755 AssertionError: './open-file test.txt' failed with ./open-file test...
- job 70372 self.assertEqual(test_txt_content.s... AssertionError: b'' != b'test1'
system_tests_devices
TC_10_Attach_debian-11/test_000_attach_reattach (1/5 times with errors)
- job 71726 assert not leaked... AssertionError
TC_10_Attach_fedora-37/test_000_attach_reattach (1/5 times with errors)
- job 71726 assert not leaked... AssertionError
TC_10_Attach_whonix-gw-16/test_000_attach_reattach (1/5 times with errors)
- job 71726 assert not leaked... AssertionError
TC_10_Attach_whonix-ws-16/test_000_attach_reattach (1/5 times with errors)
- job 71726 assert not leaked... AssertionError
TC_10_Attach_debian-11/test_000_attach_reattach [attach] (1/5 times with errors)
- job 71726 subprocess.CalledProcessError: Command 'ls /dev/xvdi' returned non-...
system_tests_basic_vm_qrexec_gui_xfs
TC_30_Gui_daemon/test_000_clipboard (1/5 times with errors)
- job 69753 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_whonix-ws-16-pool/test_000_start_shutdown (2/5 times with errors)
- job 70370 qubes.exc.QubesVMShutdownTimeoutError: Domain shutdown timed out: '...
- job 71310 qubes.exc.QubesVMShutdownTimeoutError: Domain shutdown timed out: '...
TC_00_AppVM_debian-11-pool/test_100_qrexec_filecopy (1/5 times with errors)
- job 69753 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_whonix-ws-16-pool/test_105_qrexec_filemove (1/5 times with errors)
- job 69753 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11-pool/test_110_qrexec_filecopy_deny (1/5 times with errors)
- job 69753 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11-pool/test_210_time_sync (1/5 times with errors)
- job 69753 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11-pool/test_220_audio_play (1/5 times with errors)
- job 69460 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_fedora-37-pool/test_220_audio_play (1/5 times with errors)
- job 69460 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_whonix-ws-16-pool/test_220_audio_play (1/5 times with errors)
- job 69460 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_debian-11-pool/test_223_audio_play_hvm (1/5 times with errors)
- job 69460 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_fedora-37-pool/test_223_audio_play_hvm (1/5 times with errors)
- job 69460 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_whonix-ws-16-pool/test_223_audio_play_hvm (1/5 times with errors)
- job 69460 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
system_tests_whonix@hw1
whonix_torbrowser/ (1/5 times with errors)
- job 70358 None
whonix_torbrowser/ (1/5 times with errors)
- job 69775 None
whonix_torbrowser/ (2/5 times with errors)
- job 69402 None
- job 70358 None
whonix_torbrowser/ (1/5 times with errors)
- job 69775 None
whonix_torbrowser/ (1/5 times with errors)
- job 69402 None
whonix_torbrowser/Failed (1/5 times with errors)
- job 70358 # Test died: no candidate needle with tag(s) 'tor-browser-ipcheck-o...
whonix_torbrowser/Failed (1/5 times with errors)
- job 69775 # Test died: no candidate needle with tag(s) 'anon-whonix-tor-brows...
whonix_torbrowser/Failed (1/5 times with errors)
- job 69402 # Test died: no candidate needle with tag(s) 'anon-whonix-tor-brows...
system_tests_basic_vm_qrexec_gui@hw1
TC_00_AppVM_debian-11/test_105_qrexec_filemove (1/5 times with errors)
- job 69778 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11/test_110_qrexec_filecopy_deny (1/5 times with errors)
- job 69778 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11/test_220_audio_play (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_fedora-37/test_220_audio_play (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_whonix-ws-16/test_220_audio_play (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_debian-11/test_223_audio_play_hvm (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_fedora-37/test_223_audio_play_hvm (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_whonix-ws-16/test_223_audio_play_hvm (1/5 times with errors)
- job 69411 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
system_tests_gui_tools@hw1
qubesmanager_vmsettings/ (1/5 times with errors)
- job 71327 None
qubesmanager_vmsettings/Failed (1/5 times with errors)
- job 71327 # Test died: no candidate needle with tag(s) 'vm-settings-warn-mem'...
system_tests_basic_vm_qrexec_gui_ext4
TC_00_AppVM_debian-11-pool/test_220_audio_play (1/5 times with errors)
- job 69413 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_fedora-37-pool/test_220_audio_play (1/5 times with errors)
- job 69413 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_whonix-ws-16-pool/test_220_audio_play (1/5 times with errors)
- job 69413 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_debian-11-pool/test_223_audio_play_hvm (1/5 times with errors)
- job 69413 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_fedora-37-pool/test_223_audio_play_hvm (1/5 times with errors)
- job 69413 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_whonix-ws-16-pool/test_223_audio_play_hvm (1/5 times with errors)
- job 69413 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
system_tests_basic_vm_qrexec_gui_zfs
TC_00_AppVM_whonix-ws-16-pool/test_105_qrexec_filemove (1/2 times with errors)
- job 71716 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
system_tests_basic_vm_qrexec_gui_btrfs
TC_00_AppVM_debian-11-pool/test_100_qrexec_filecopy (2/5 times with errors)
- job 70394 subprocess.CalledProcessError: Command 'cp /etc/passwd /tmp/passwd'...
- job 71308 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_fedora-37-pool/test_100_qrexec_filecopy (1/5 times with errors)
- job 71308 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_fedora-37-pool/test_105_qrexec_filemove (1/5 times with errors)
- job 70394 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11-pool/test_110_qrexec_filecopy_deny (1/5 times with errors)
- job 71308 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_fedora-37-pool/test_110_qrexec_filecopy_deny (1/5 times with errors)
- job 70394 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11-pool/test_115_qrexec_filecopy_no_agent (1/5 times with errors)
- job 71308 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11-pool/test_130_qrexec_filemove_disk_full (1/5 times with errors)
- job 70394 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11-pool/test_210_time_sync (1/5 times with errors)
- job 70394 qubes.exc.QubesVMError: Cannot connect to qrexec agent for 90 secon...
TC_00_AppVM_debian-11-pool/test_220_audio_play (1/5 times with errors)
- job 69412 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_fedora-37-pool/test_220_audio_play (1/5 times with errors)
- job 69412 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_whonix-ws-16-pool/test_220_audio_play (1/5 times with errors)
- job 69412 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_debian-11-pool/test_223_audio_play_hvm (1/5 times with errors)
- job 69412 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_fedora-37-pool/test_223_audio_play_hvm (1/5 times with errors)
- job 69412 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...
TC_00_AppVM_whonix-ws-16-pool/test_223_audio_play_hvm (1/5 times with errors)
- job 69412 subprocess.CalledProcessError: Command '['pkill', 'parecord']' retu...

Xen hotplug scripts should be initrc_exec_t

252e5cd

This makes them unconfined while ensuring that programs they spawn have the correct (possibly confined) contexts. Reported-by: Marek Marczykowski-Górecki <[email protected]> Fixes: QubesOS/qubes-issues#8155

marmarek added the openqa-pending label Apr 30, 2023

marmarek mentioned this pull request May 6, 2023

[Build 2023050602-4.2] sys-net and sys-usb sometimes very slowly shut down QubesOS/qubes-issues#8179

Open

marmarek approved these changes May 7, 2023

View reviewed changes

marmarek merged commit 49275be into QubesOS:main May 7, 2023

DemiMarie deleted the fix-xen-script-context branch May 7, 2023 16:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Xen hotplug scripts should be initrc_exec_t #419

Xen hotplug scripts should be initrc_exec_t #419

DemiMarie commented Apr 30, 2023

qubesos-bot commented May 1, 2023 •

edited

Loading

Xen hotplug scripts should be initrc_exec_t #419

Xen hotplug scripts should be initrc_exec_t #419

Conversation

DemiMarie commented Apr 30, 2023

qubesos-bot commented May 1, 2023 • edited Loading

OpenQA test summary

New failures, excluding unstable

Failed tests

Fixed failures

Unstable tests

qubesos-bot commented May 1, 2023 •

edited

Loading