----- Original Message -----
From: "Shawn Wells" <shawn(a)redhat.com>
To: scap-security-guide(a)lists.fedorahosted.org
Sent: Thursday, September 4, 2014 5:51:12 AM
Subject: Re: Test run of Jenkins (CI tool)
On 9/3/14, 11:19 AM, Trevor Vaughan wrote:
> Seems like this might be a good case for a public OpenShift instance.
>
> Shawn?
yeah, we can likely snag a copy of openshift. sometimes having a
@redhat.com affiliation is pretty cool :)
openshift.open-scap.org or
some such thing.
OpenShift does run on RHEL 6, I believe a formal rebase on RHEL7 is
coming, and there's always OpenShift Origin for Fedora. We could create
a custom cartridge with the various openscap-utils, python-lxml, and
other build packages. This would get us to a "make validate" point, but
as Martin pointed out, it wouldn't scale much beyond that -- functional
unit tests (e.g. OVAL and remediation) wouldn't be configured easily.
Having a Jenkins script spin up/down the appropriate Docker instances
does seem ideal.... but I've no idea how to set that up currently. There
is a specific Jenkins Docker plugin:
https://wiki.jenkins-ci.org/display/JENKINS/Docker+Plugin
Any Docker-ites interested in playing with this?
Yes, that was actually my plan after performing the 0.19 release
(to start building the scripts infrastructure for automated checks testing &
set them up with Jenkins Docker plug-in).
Got a repository set up for it (
https://git.fedorahosted.org/git/ssgtestsuite.git
- currently empty) on Fedora infrastructure yet.
The plan is to create scripts handling management of Docker images (for RHEL-6, RHEL-7
&
Fedora content => the host handling these would probably need to be RHEL-7 or Fedora
based) to perform automated testing scenario as detailed by Martin in:
https://lists.fedorahosted.org/pipermail/scap-security-guide/2014-Septemb...
Wrt to possibilities for Jenkins instances, the following capability:
https://fedoraproject.org/wiki/Jenkins@infra
has been suggested to me by Petr Lautrbach (didn't get it more time just
quick read through since Martin already has Jenkins instance able to handle
all free types (RHEL6, RHEL7 & Fedora) of slaves (we might be interested in testing
scripts at).
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team