[Freeipa-devel] CI failures - I need your help

[Martin Babinsky]

On 12/13/2016 12:20 PM, Fraser Tweedale wrote:
> Hi all,
>
> The CI failures caused by one of my recent commits have me baffled.
> It is exactly this commit[1] at which the problems begin.  I cannot
> see anything in the commit to point a finger at.  In-tree tests run
> fine.
>
> [1] https://github.com/freeipa/freeipa/commit/32b1743e5fb318b226a602ec8d9a4b6ef2a25c9d
>
> In terms of symptoms: a Travis run has two jobs, one dealing with
> `test_xmlrpc/test_[a-k]*.py' and the other dealing with
> `test_xmlrpc/test_[l-z]*.py' as well as `test_install/',
> `test_ipalib/', `test_ipapython/', `test_ipaserver/' and
> `test_pkcs10'.  See [2] for an example of a failing build: the first
> job (which includes tests for the ca plugin, which is what the patch
> relates to) does succeed, but the second fails catastrophically with
> myriad occurences of:
>
>     E           NetworkError: cannot connect to
>     'https://master1.ipa.test/ipa/session/json':
>     (SSL_ERROR_NO_CIPHERS_SUPPORTED) No cipher suites are present
>     and enabled in this program.
>
> Leading to the unfortunate outcome:
>
>     ======= 254 failed, 576 passed, 98 skipped, 1756 error in 254.59 seconds =======
>
> [2] https://travis-ci.org/freeipa/freeipa/builds/183544973
>
>
> I have been unsuccessful in running `ipa-docker-test-runner' on my
> own machine due to Java thread creation problems, so I need the help
> of others to analyse and fix this issue.  If someone was able to
> analyse a running container that had the test failures, send logs,
> or even make an image of the container and upload it somewhere for
> me, it might lead to some answers.
>
> Thanks for your help.
> Fraser
>
> (P.S. I hope it is not a trivial thing I have overlook ^_^)
>

Hi Fraser,

I am also playing around with this issue and have observed that when I 
run XMLRPC tests alone all is green, so the error must first occur in 
some other suite and then propagate to tests ran later. This also agrees 
with the observation that the half which does not run non-XMLRPC tests 
always passes.

I have observed that the first failure comes in 
test_ipaserver/test_serverroles suite at teardown with 
SEC_ERROR_LEGACY_DATABASE thrown from nss:
https://paste.fedoraproject.org/505681/14816316/

I will investigate further and keep you posted.\

-- 
Martin^3 Babinsky