Re: [Swan-dev] testing and unstable dns

2021-05-03 Thread Andrew Cagney
On Sun, 2 May 2021 at 16:17, Paul Wouters wrote: > On Sun, 2 May 2021, Antony Antony wrote: > > >> I think the swan-prep should to copy fresh config files every time. > >> > >> Moving the nsd/unbound stuff out of transmogrify makes sense. > > >> the namespace directories and files, which

Re: [Swan-dev] testing and unstable dns

2021-05-02 Thread Paul Wouters
On Sun, 2 May 2021, Antony Antony wrote: I think the swan-prep should to copy fresh config files every time. Moving the nsd/unbound stuff out of transmogrify makes sense. the namespace directories and files, which are bind mount, should be setup in swan-prep.  especially because

Re: [Swan-dev] testing and unstable dns

2021-05-02 Thread Antony Antony
On Mon, Apr 19, 2021 at 02:02:39PM -0400, Andrew Cagney wrote: > > > On Mon, 19 Apr 2021 at 11:53, Antony Antony wrote: > > On Sat, Apr 17, 2021 at 08:33:18PM -0400, Andrew Cagney wrote: > > BTW, I took a look at swan-prep --dnssec.  As best I can the big > difference > > betwee

Re: [Swan-dev] testing and unstable dns

2021-04-27 Thread Andrew Cagney
On Mon, 19 Apr 2021 at 14:02, Andrew Cagney wrote: > On Mon, 19 Apr 2021 at 11:53, Antony Antony wrote: > >> transmogrifying once is not a best solution for unbound and nsd. >> some tests can modify the config files. So next test may start with a >> wrong >> file. >> >> I think the swan-prep sho

Re: [Swan-dev] testing and unstable dns

2021-04-20 Thread Andrew Cagney
On Tue, 20 Apr 2021 at 16:08, Paul Wouters wrote: > On Tue, 20 Apr 2021, Andrew Cagney wrote: > > > If anything there's less chance of this as all tests see the domain > exactly as it was when first created. > > So what happens if on east I make a change in /source and "make install" ? > Current

Re: [Swan-dev] testing and unstable dns

2021-04-20 Thread Paul Wouters
On Tue, 20 Apr 2021, Andrew Cagney wrote: If anything there's less chance of this as all tests see the domain exactly as it was when first created. So what happens if on east I make a change in /source and "make install" ? I do that a _lot_ when coding, and I surely do not want to have to reb

Re: [Swan-dev] testing and unstable dns

2021-04-20 Thread Andrew Cagney
I'm a bit nervous about snapshots. We originally went with reboot uml/kvm > between each test to ensure a clean slate. If we start re-using snapshots, > I fear there will be secret sauces in these snapshots. While a base > snapshot for the entire test run seems a good idea, having them per-test > s

Re: [Swan-dev] testing and unstable dns

2021-04-20 Thread Paul Wouters
On Mon, 19 Apr 2021, Andrew Cagney wrote: Moving the nsd/unbound stuff out of transmogrify makes sense. It would be nice if we could also start them manually and specifying the config file, so we don't need as many bind mounts and things. > - with namespaces, the nsd and unbound direct

Re: [Swan-dev] testing and unstable dns

2021-04-19 Thread Andrew Cagney
On Mon, 19 Apr 2021 at 11:53, Antony Antony wrote: > On Sat, Apr 17, 2021 at 08:33:18PM -0400, Andrew Cagney wrote: > > BTW, I took a look at swan-prep --dnssec. As best I can the big > difference > > between namespaces and KVM is when the config files are installed: > > > > - with KVMs the nsd

Re: [Swan-dev] testing and unstable dns

2021-04-19 Thread Antony Antony
On Sat, Apr 17, 2021 at 08:33:18PM -0400, Andrew Cagney wrote: > BTW, I took a look at swan-prep --dnssec.  As best I can the big difference > between namespaces and KVM is when the config files are installed: > > - with KVMs the nsd and unbound directories are set up before the test is run > (dur

Re: [Swan-dev] testing and unstable dns

2021-04-18 Thread Andrew Cagney
I might have figured this out. The code starting just nsd, wasn't stomping on /etc/nsd/server.d/nsd-server-libreswan.conf's port. start-dns.sh inherited this. If that pans out I'll see about always starting unbound, per: https://lists.libreswan.org/pipermail/swan-dev/2020-February/003660.html an

Re: [Swan-dev] testing and unstable dns

2021-04-17 Thread Andrew Cagney
BTW, I took a look at swan-prep --dnssec. As best I can the big difference between namespaces and KVM is when the config files are installed: - with KVMs the nsd and unbound directories are set up before the test is run (during transmogrify) - with namespaces, the nsd and unbound directories are

Re: [Swan-dev] testing and unstable dns

2021-04-17 Thread Andrew Cagney
On Sat, 17 Apr 2021 at 15:17, Antony Antony wrote: > On Sat, Apr 17, 2021 at 11:03:15AM -0400, Andrew Cagney wrote: > > Problem is still there :-( Anyone had some inspiration? For instance > with > > nsd-4.3.2-1.fc32.x86_64 > > > https://testing.libreswan.org/v4.3-474-g9267a3fd5d-main/ikev2-55-

Re: [Swan-dev] testing and unstable dns

2021-04-17 Thread Antony Antony
On Sat, Apr 17, 2021 at 11:03:15AM -0400, Andrew Cagney wrote: > Problem is still there :-(  Anyone had some inspiration?  For instance with  > nsd-4.3.2-1.fc32.x86_64 > https://testing.libreswan.org/v4.3-474-g9267a3fd5d-main/ikev2-55-ipseckey-06/ > OUTPUT/nic.console.diff > > On Mon, 29 Mar 2021

Re: [Swan-dev] testing and unstable dns

2021-04-17 Thread Andrew Cagney
Problem is still there :-( Anyone had some inspiration? For instance with nsd-4.3.2-1.fc32.x86_64 https://testing.libreswan.org/v4.3-474-g9267a3fd5d-main/ikev2-55-ipseckey-06/OUTPUT/nic.console.diff On Mon, 29 Mar 2021 at 10:09, Andrew Cagney wrote: > Picking up an IRC discussion, I'm wonderin

[Swan-dev] testing and unstable dns

2021-03-29 Thread Andrew Cagney
Picking up an IRC discussion, I'm wondering if anyone has ideas on why DNS isn't robust within the KVM test environment. Simplifying things, the NIC kvm is running the commands: systemctl start nsd "wait for 'nsd started' message dig @127.0.0.1 ... and the dig gets no response. But only s