Process completed with exit code 1.

Process completed with exit code 1.

Process completed with exit code 1.

Process completed with exit code 1.

Process completed with exit code 1.

Process completed with exit code 1.

Process completed with exit code 1.

Process completed with exit code 1.

Process completed with exit code 1.

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "" to match /^SELINUX=disabled$/ Diff: @@ -1 +1 @@ -/^SELINUX=disabled$/ +""

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +""

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: hosts.each(&:reboot) Beaker::Host::RebootWarning: Could not find system boot time using 'last -F reboot || who -b': ''

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout Failure/Error: hosts.each(&:reboot) Beaker::Host::RebootWarning: Could not find system boot time using 'last -F reboot || who -b': ''

selinux class - mode switching while disabled File "/var/test" selinux_label Failure/Error: on(hosts, "touch #{test_file_path}") Beaker::Host::CommandFailure: Host 'debian11-64-puppet7.example.com' exited with 1 running: touch /var/test Last 10 lines of output were: /bin/bash: Permission denied

selinux class - mode switching when switching from disabled to permissive before reboot behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'debian11-64-puppet7.example.com' exited with 1 running: mktemp -t apply_manifest_135028040.pp.XXXXXX Last 10 lines of output were: /bin/bash: Permission denied Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:105

selinux class - mode switching when switching from disabled to permissive before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'debian11-64-puppet7.example.com' exited with 1 running: mktemp -t apply_manifest_135028133.pp.XXXXXX Last 10 lines of output were: /bin/bash: Permission denied Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:105

selinux class - mode switching when switching from disabled to permissive before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=permissive$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=permissive$}) } expected "" to match /^SELINUX=permissive$/ Diff: @@ -1 +1 @@ -/^SELINUX=permissive$/ +""

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "" to match /^SELINUX=disabled$/ Diff: @@ -1 +1 @@ -/^SELINUX=disabled$/ +""

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +""

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: hosts.each(&:reboot) Beaker::Host::RebootWarning: Could not find system boot time using 'last -F reboot || who -b': ''

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout Failure/Error: hosts.each(&:reboot) Beaker::Host::RebootWarning: Could not find system boot time using 'last -F reboot || who -b': ''

selinux class - mode switching while disabled File "/var/test" selinux_label Failure/Error: on(hosts, "touch #{test_file_path}") Beaker::Host::CommandFailure: Host 'debian11-64-puppet8.example.com' exited with 1 running: touch /var/test Last 10 lines of output were: /bin/bash: Permission denied

selinux class - mode switching when switching from disabled to permissive before reboot behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'debian11-64-puppet8.example.com' exited with 1 running: mktemp -t apply_manifest_135054221.pp.XXXXXX Last 10 lines of output were: /bin/bash: Permission denied Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:105

selinux class - mode switching when switching from disabled to permissive before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'debian11-64-puppet8.example.com' exited with 1 running: mktemp -t apply_manifest_135054323.pp.XXXXXX Last 10 lines of output were: /bin/bash: Permission denied Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:105

selinux class - mode switching when switching from disabled to permissive before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=permissive$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=permissive$}) } expected "" to match /^SELINUX=permissive$/ Diff: @@ -1 +1 @@ -/^SELINUX=permissive$/ +""

Canceling since a higher priority waiting request for '383/merge' exists

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "# This file controls the state of SELinux on the system.\n# SELINUX=enforcing\n# enforcing - SELinux...rom source\nSELINUXTYPE=default\n\n# SETLOCALDEFS= Check local definition changes\nSETLOCALDEFS=0\n" to match /^SELINUX=disabled$/ Diff: @@ -1,14 +1,27 @@ -/^SELINUX=disabled$/ +# This file controls the state of SELinux on the system. +# SELINUX=enforcing +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=enforcing +# SELINUXTYPE= can take one of these two values: +# default - equivalent to the old strict and targeted policies +# mls - Multi-Level Security (for military and educational use) +# src - Custom policy built from source +SELINUXTYPE=default + +# SETLOCALDEFS= Check local definition changes +SETLOCALDEFS=0

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Enforcing\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Enforcing

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'debian10-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135021995.pp.3KtACp Last 10 lines of output were: Info: Loading facts Info: Loading facts Error: Facter: Error: Facter: � �[mNotice: Compiled catalog for debian10-64-puppet7.example.com in environment production in 0.07 seconds Info: Using environment 'production' Info: Applying configuration version '1706363423' �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: /Stage[main]/Selinux::Config/Exec[change-selinux-status-to-disabled]/returns: executed successfully �[mNotice: Applied catalog in 0.18 seconds

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class - mode switching while disabled File "/var/test" selinux_label is expected to eq "?" Failure/Error: its(:selinux_label) { is_expected.to eq('?') } expected: "?" got: "unconfined_u:object_r:var_t:s0" (compared using ==)

selinux class - mode switching when switching from disabled to permissive before reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "\n# This file controls the state of SELinux on the system.\n# SELINUX=enforcing\n# enforcing - S...processes are protected. \n# mls - Multi Level Security protection.\nSELINUXTYPE=targeted\n\n\n" to match /^SELINUX=disabled$/ Diff: @@ -1,12 +1,23 @@ -/^SELINUX=disabled$/ + +# This file controls the state of SELinux on the system. +# SELINUX=enforcing +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=enforcing +# SELINUXTYPE= can take one of three values: +# targeted - Targeted processes are protected, +# minimum - Modification of targeted policy. Only selected processes are protected. +# mls - Multi Level Security protection. +SELINUXTYPE=targeted

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Enforcing\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Enforcing

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'centos7-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_134918388.pp.qJalXw Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for centos7-64-puppet7.example.com in environment production in 0.07 seconds Info: Using environment 'production' Info: Applying configuration version '1706363359' �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: /Stage[main]/Selinux::Config/Exec[change-selinux-status-to-disabled]/returns: executed successfully �[mNotice: Applied catalog in 0.11 seconds

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class - mode switching while disabled File "/var/test" selinux_label is expected to eq "?" Failure/Error: its(:selinux_label) { is_expected.to eq('?') } expected: "?" got: "unconfined_u:object_r:var_t:s0" (compared using ==)

selinux class - mode switching when switching from disabled to permissive before reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'centos7-64-puppet7.example.com' exited with 1 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135042542.pp.osQIBG Last 10 lines of output were: Info: Loading facts Info: Loading facts Warning: This function is deprecated, please use stdlib::ensure_packages instead. at ["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/refpolicy_package.pp", 14]:["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/module.pp", 72] (location: /etc/puppetlabs/code/environments/production/modules/stdlib/lib/puppet/functions/deprecation.rb:35:in `deprecation') �[mNotice: Compiled catalog for centos7-64-puppet7.example.com in environment production in 0.16 seconds Info: Using environment 'production' Error: Failed to apply catalog: Cannot alias Selinux_fcontext[absent] to ["/tmp/fcontexts_source(/.*)?_a"]; resource ["Selinux_fcontext", "/tmp/fcontexts_source(/.*)?_a"] already declared (file: /etc/puppetlabs/code/environments/production/modules/selinux/manifests/fcontext.pp, line: 59) Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_spec.rb:108

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "\n# This file controls the state of SELinux on the system.\n# SELINUX=enforcing\n# enforcing - S...processes are protected. \n# mls - Multi Level Security protection.\nSELINUXTYPE=targeted\n\n\n" to match /^SELINUX=disabled$/ Diff: @@ -1,12 +1,23 @@ -/^SELINUX=disabled$/ + +# This file controls the state of SELinux on the system. +# SELINUX=enforcing +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=enforcing +# SELINUXTYPE= can take one of these three values: +# targeted - Targeted processes are protected, +# minimum - Modification of targeted policy. Only selected processes are protected. +# mls - Multi Level Security protection. +SELINUXTYPE=targeted

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Enforcing\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Enforcing

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'rocky8-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_134959976.pp.Lk3VRs Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for rocky8-64-puppet7.example.com in environment production in 0.07 seconds Info: Using environment 'production' Info: Applying configuration version '1706363401' �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: /Stage[main]/Selinux::Config/Exec[change-selinux-status-to-disabled]/returns: executed successfully �[mNotice: Applied catalog in 0.32 seconds

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class - mode switching while disabled File "/var/test" selinux_label is expected to eq "?" Failure/Error: its(:selinux_label) { is_expected.to eq('?') } expected: "?" got: "unconfined_u:object_r:var_t:s0" (compared using ==)

selinux class - mode switching when switching from disabled to permissive before reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'rocky8-64-puppet7.example.com' exited with 1 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135204785.pp.8GWzya Last 10 lines of output were: Info: Loading facts Info: Loading facts Warning: This function is deprecated, please use stdlib::ensure_packages instead. at ["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/refpolicy_package.pp", 14]:["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/module.pp", 72] (location: /etc/puppetlabs/code/environments/production/modules/stdlib/lib/puppet/functions/deprecation.rb:35:in `deprecation') �[mNotice: Compiled catalog for rocky8-64-puppet7.example.com in environment production in 0.18 seconds Info: Using environment 'production' Error: Failed to apply catalog: Cannot alias Selinux_fcontext[absent] to ["/tmp/fcontexts_source(/.*)?_a"]; resource ["Selinux_fcontext", "/tmp/fcontexts_source(/.*)?_a"] already declared (file: /etc/puppetlabs/code/environments/production/modules/selinux/manifests/fcontext.pp, line: 59) Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_spec.rb:108

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "\n# This file controls the state of SELinux on the system.\n# SELINUX=enforcing\n# enforcing - S...processes are protected. \n# mls - Multi Level Security protection.\nSELINUXTYPE=targeted\n\n\n" to match /^SELINUX=disabled$/ Diff: @@ -1,12 +1,23 @@ -/^SELINUX=disabled$/ + +# This file controls the state of SELinux on the system. +# SELINUX=enforcing +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=enforcing +# SELINUXTYPE= can take one of these three values: +# targeted - Targeted processes are protected, +# minimum - Modification of targeted policy. Only selected processes are protected. +# mls - Multi Level Security protection. +SELINUXTYPE=targeted

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Enforcing\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Enforcing

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'oracle8-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135028232.pp.pbe1Ro Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for oracle8-64-puppet8.example.com in environment production in 0.12 seconds Info: Using environment 'production' Info: Applying configuration version '1706363431' �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: /Stage[main]/Selinux::Config/Exec[change-selinux-status-to-disabled]/returns: executed successfully �[mNotice: Applied catalog in 0.29 seconds

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class - mode switching while disabled File "/var/test" selinux_label is expected to eq "?" Failure/Error: its(:selinux_label) { is_expected.to eq('?') } expected: "?" got: "unconfined_u:object_r:var_t:s0" (compared using ==)

selinux class - mode switching when switching from disabled to permissive before reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "\n# This file controls the state of SELinux on the system.\n# SELINUX=enforcing\n# enforcing - S...processes are protected. \n# mls - Multi Level Security protection.\nSELINUXTYPE=targeted\n\n\n" to match /^SELINUX=disabled$/ Diff: @@ -1,12 +1,23 @@ -/^SELINUX=disabled$/ + +# This file controls the state of SELinux on the system. +# SELINUX=enforcing +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=enforcing +# SELINUXTYPE= can take one of these three values: +# targeted - Targeted processes are protected, +# minimum - Modification of targeted policy. Only selected processes are protected. +# mls - Multi Level Security protection. +SELINUXTYPE=targeted

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Enforcing\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Enforcing

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'rocky8-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135003545.pp.KhhP85 Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for rocky8-64-puppet8.example.com in environment production in 0.12 seconds Info: Using environment 'production' Info: Applying configuration version '1706363406' �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: /Stage[main]/Selinux::Config/Exec[change-selinux-status-to-disabled]/returns: executed successfully �[mNotice: Applied catalog in 0.29 seconds

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class - mode switching while disabled File "/var/test" selinux_label is expected to eq "?" Failure/Error: its(:selinux_label) { is_expected.to eq('?') } expected: "?" got: "unconfined_u:object_r:var_t:s0" (compared using ==)

selinux class - mode switching when switching from disabled to permissive before reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'rocky8-64-puppet8.example.com' exited with 1 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135228716.pp.0DtJ4l Last 10 lines of output were: Info: Loading facts Info: Loading facts Warning: This function is deprecated, please use stdlib::ensure_packages instead. at ["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/refpolicy_package.pp", 14]:["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/module.pp", 72] (location: /etc/puppetlabs/code/environments/production/modules/stdlib/lib/puppet/functions/deprecation.rb:35:in `deprecation') �[mNotice: Compiled catalog for rocky8-64-puppet8.example.com in environment production in 0.34 seconds Info: Using environment 'production' Error: Failed to apply catalog: Cannot alias Selinux_fcontext[absent] to ["/tmp/fcontexts_source(/.*)?_a"]; resource ["Selinux_fcontext", "/tmp/fcontexts_source(/.*)?_a"] already declared (file: /etc/puppetlabs/code/environments/production/modules/selinux/manifests/fcontext.pp, line: 59) Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_spec.rb:108

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "\n# This file controls the state of SELinux on the system.\n# SELINUX=enforcing\n# enforcing - S...processes are protected. \n# mls - Multi Level Security protection.\nSELINUXTYPE=targeted\n\n\n" to match /^SELINUX=disabled$/ Diff: @@ -1,12 +1,23 @@ -/^SELINUX=disabled$/ + +# This file controls the state of SELinux on the system. +# SELINUX=enforcing +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=enforcing +# SELINUXTYPE= can take one of these three values: +# targeted - Targeted processes are protected, +# minimum - Modification of targeted policy. Only selected processes are protected. +# mls - Multi Level Security protection. +SELINUXTYPE=targeted

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Enforcing\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Enforcing

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'centos8-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135019456.pp.4psaNg Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for centos8-64-puppet8.example.com in environment production in 0.12 seconds Info: Using environment 'production' Info: Applying configuration version '1706363423' �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: /Stage[main]/Selinux::Config/Exec[change-selinux-status-to-disabled]/returns: executed successfully �[mNotice: Applied catalog in 0.15 seconds

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class - mode switching while disabled File "/var/test" selinux_label is expected to eq "?" Failure/Error: its(:selinux_label) { is_expected.to eq('?') } expected: "?" got: "unconfined_u:object_r:var_t:s0" (compared using ==)

selinux class - mode switching when switching from disabled to permissive before reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "# This file controls the state of SELinux on the system.\n# SELINUX=enforcing\n# enforcing - SELinux...rom source\nSELINUXTYPE=default\n\n# SETLOCALDEFS= Check local definition changes\nSETLOCALDEFS=0\n" to match /^SELINUX=disabled$/ Diff: @@ -1,14 +1,27 @@ -/^SELINUX=disabled$/ +# This file controls the state of SELinux on the system. +# SELINUX=enforcing +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=enforcing +# SELINUXTYPE= can take one of these two values: +# default - equivalent to the old strict and targeted policies +# mls - Multi-Level Security (for military and educational use) +# src - Custom policy built from source +SELINUXTYPE=default + +# SETLOCALDEFS= Check local definition changes +SETLOCALDEFS=0

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Enforcing\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Enforcing

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'debian10-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135029336.pp.9JOX6q Last 10 lines of output were: Info: Loading facts Info: Loading facts Error: Facter: U|(&� Error: Facter: ` �[mNotice: Compiled catalog for debian10-64-puppet8.example.com in environment production in 0.12 seconds Info: Using environment 'production' Info: Applying configuration version '1706363431' �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: /Stage[main]/Selinux::Config/Exec[change-selinux-status-to-disabled]/returns: executed successfully �[mNotice: Applied catalog in 0.21 seconds

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class - mode switching while disabled File "/var/test" selinux_label is expected to eq "?" Failure/Error: its(:selinux_label) { is_expected.to eq('?') } expected: "?" got: "unconfined_u:object_r:var_t:s0" (compared using ==)

selinux class - mode switching when switching from disabled to permissive before reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "\n# This file controls the state of SELinux on the system.\n# SELINUX=enforcing\n# enforcing - S...processes are protected. \n# mls - Multi Level Security protection.\nSELINUXTYPE=targeted\n\n\n" to match /^SELINUX=disabled$/ Diff: @@ -1,12 +1,23 @@ -/^SELINUX=disabled$/ + +# This file controls the state of SELinux on the system. +# SELINUX=enforcing +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=enforcing +# SELINUXTYPE= can take one of three values: +# targeted - Targeted processes are protected, +# minimum - Modification of targeted policy. Only selected processes are protected. +# mls - Multi Level Security protection. +SELINUXTYPE=targeted

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Enforcing\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Enforcing

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'centos7-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_134941619.pp.JgIZPv Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for centos7-64-puppet8.example.com in environment production in 0.12 seconds Info: Using environment 'production' Info: Applying configuration version '1706363383' �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: /Stage[main]/Selinux::Config/Exec[change-selinux-status-to-disabled]/returns: executed successfully �[mNotice: Applied catalog in 0.11 seconds

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class - mode switching while disabled File "/var/test" selinux_label is expected to eq "?" Failure/Error: its(:selinux_label) { is_expected.to eq('?') } expected: "?" got: "unconfined_u:object_r:var_t:s0" (compared using ==)

selinux class - mode switching when switching from disabled to permissive before reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'centos7-64-puppet8.example.com' exited with 1 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135115612.pp.OmVlO8 Last 10 lines of output were: Info: Loading facts Info: Loading facts Warning: This function is deprecated, please use stdlib::ensure_packages instead. at ["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/refpolicy_package.pp", 14]:["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/module.pp", 72] (location: /etc/puppetlabs/code/environments/production/modules/stdlib/lib/puppet/functions/deprecation.rb:35:in `deprecation') �[mNotice: Compiled catalog for centos7-64-puppet8.example.com in environment production in 0.31 seconds Info: Using environment 'production' Error: Failed to apply catalog: Cannot alias Selinux_fcontext[absent] to ["/tmp/fcontexts_source(/.*)?_a"]; resource ["Selinux_fcontext", "/tmp/fcontexts_source(/.*)?_a"] already declared (file: /etc/puppetlabs/code/environments/production/modules/selinux/manifests/fcontext.pp, line: 59) Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_spec.rb:108

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

The operation was canceled.

Canceling since a higher priority waiting request for '383/merge' exists

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "\n# This file controls the state of SELinux on the system.\n# SELINUX=enforcing\n# enforcing - S...processes are protected. \n# mls - Multi Level Security protection.\nSELINUXTYPE=targeted\n\n\n" to match /^SELINUX=disabled$/ Diff: @@ -1,12 +1,23 @@ -/^SELINUX=disabled$/ + +# This file controls the state of SELinux on the system. +# SELINUX=enforcing +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=enforcing +# SELINUXTYPE= can take one of these three values: +# targeted - Targeted processes are protected, +# minimum - Modification of targeted policy. Only selected processes are protected. +# mls - Multi Level Security protection. +SELINUXTYPE=targeted

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Enforcing\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Enforcing

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'centos8-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135008859.pp.Kl2heO Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for centos8-64-puppet7.example.com in environment production in 0.07 seconds Info: Using environment 'production' Info: Applying configuration version '1706363411' �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: /Stage[main]/Selinux::Config/Exec[change-selinux-status-to-disabled]/returns: executed successfully �[mNotice: Applied catalog in 0.15 seconds

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class - mode switching while disabled File "/var/test" selinux_label is expected to eq "?" Failure/Error: its(:selinux_label) { is_expected.to eq('?') } expected: "?" got: "unconfined_u:object_r:var_t:s0" (compared using ==)

selinux class - mode switching when switching from disabled to permissive before reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'centos8-64-puppet7.example.com' exited with 1 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135201997.pp.ttixad Last 10 lines of output were: Info: Loading facts Info: Loading facts Warning: This function is deprecated, please use stdlib::ensure_packages instead. at ["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/refpolicy_package.pp", 14]:["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/module.pp", 72] (location: /etc/puppetlabs/code/environments/production/modules/stdlib/lib/puppet/functions/deprecation.rb:35:in `deprecation') �[mNotice: Compiled catalog for centos8-64-puppet7.example.com in environment production in 0.18 seconds Info: Using environment 'production' Error: Failed to apply catalog: Cannot alias Selinux_fcontext[absent] to ["/tmp/fcontexts_source(/.*)?_a"]; resource ["Selinux_fcontext", "/tmp/fcontexts_source(/.*)?_a"] already declared (file: /etc/puppetlabs/code/environments/production/modules/selinux/manifests/fcontext.pp, line: 59) Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_spec.rb:108