On Sun, 15 May 2016, Ondrej Moris wrote:
Off-topic - are you runnig test suite executed in FIPS mode? If not, are
you interested in that? There would probably be tons of both true and
false positives though. And I am very very doubtful about FIPS in
Fedora. OTOH it might be doable in RHEL...
Our problem was that we couldn't easilly add fips=1 on a per-test basis
to the VM. Similarly, we need a MLS on/off method so we can run the MLS
labeled ipsec tests. We might be able to virt-install a FIPS and
FIPS+MLS image, eg east-fips, west-fips, and then use those.
- Similarly, if we want to test against systems that are not amd64,
KVM would be need
You're right. But that can change in the future, lacking support for
32bit is more or less just a plumbing issue (you just need support in
registries basically). Is KVM testsuite running in 32-bit environment?
It should, we might not have tested that in a long time. The good thing
about KVM is we can fairly easilly using virt-install add a mips or
sparc or arm client. We haven't looked into that much at this moment.
Paul
_______________________________________________
Swan-dev mailing list
Swan-dev@lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-dev
