selinux class - mode switching when switching from unknown mode to permissive before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'debian12-64-none.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_185050761.pp.61sAlh Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for debian12-64-none.example.com in environment production in 0.11 seconds Info: Using environment 'production' Info: Applying configuration version '1705344653' �[mNotice: /Stage[main]/Selinux::Config/Exec[activate-selinux]/returns: executed successfully �[mNotice: Applied catalog in 0.49 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:21

selinux class - mode switching when switching from unknown mode to permissive after reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Disabled\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Disabled

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: shell('setenforce Enforcing && test "$(getenforce)" = "Enforcing"') Beaker::Host::CommandFailure: Host 'debian12-64-none.example.com' exited with 1 running: setenforce Enforcing && test "$(getenforce)" = "Enforcing" Last 10 lines of output were: setenforce: SELinux is disabled Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: shell('setenforce Enforcing && test "$(getenforce)" = "Enforcing"') Beaker::Host::CommandFailure: Host 'debian12-64-none.example.com' exited with 1 running: setenforce Enforcing && test "$(getenforce)" = "Enforcing" Last 10 lines of output were: setenforce: SELinux is disabled Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content Failure/Error: shell('setenforce Enforcing && test "$(getenforce)" = "Enforcing"') Beaker::Host::CommandFailure: Host 'debian12-64-none.example.com' exited with 1 running: setenforce Enforcing && test "$(getenforce)" = "Enforcing" Last 10 lines of output were: setenforce: SELinux is disabled

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout Failure/Error: shell('setenforce Enforcing && test "$(getenforce)" = "Enforcing"') Beaker::Host::CommandFailure: Host 'debian12-64-none.example.com' exited with 1 running: setenforce Enforcing && test "$(getenforce)" = "Enforcing" Last 10 lines of output were: setenforce: SELinux is disabled

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'debian12-64-none.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_185057538.pp.nMuOLX Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for debian12-64-none.example.com in environment production in 0.11 seconds Info: Using environment 'production' Info: Applying configuration version '1705344659' �[mNotice: /Stage[main]/Selinux::Config/Exec[activate-selinux]/returns: executed successfully �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: Applied catalog in 0.50 seconds

selinux class - mode switching when switching from disabled to permissive before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'debian12-64-none.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_185103712.pp.zqnvMT Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for debian12-64-none.example.com in environment production in 0.11 seconds Info: Using environment 'production' Info: Applying configuration version '1705344666' �[mNotice: /Stage[main]/Selinux::Config/Exec[activate-selinux]/returns: executed successfully �[mNotice: Applied catalog in 0.50 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:105

selinux class - mode switching when switching from disabled to permissive after reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Disabled\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Disabled