Re: [ima-evm-utils][PATCH 2/3] CI/CD: Disable pkcs11 providers for Debian and AltLinux

[Jonathan McDowell <noodles@earth.li>]

On Thu, Jun 20, 2024 at 08:59:11PM -0400, Stefan Berger wrote:
> From: Stefan Berger <stefanb@linux.ibm.com>
> 
> Disable testing provider support on Debian:latest and AltLinux:sisyphus
> since both now get stuck while running OpenSSL provider-related tests.
> This is most likely due to an update in a dependency (OpenSSL, libp11,
> softhsm,  or others).

This seems to disable it for both Debian stable + testing.  Is it
actually broken for both?

> On AltLinux the issues is related to a pthread_mutex_lock() down the
> C_Login -> C_OpenSession callpath that blocks forever.
> 
> Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
> ---
>  ci/alt.sh    | 2 +-
>  ci/debian.sh | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/ci/alt.sh b/ci/alt.sh
> index f86dcec..f1eefbf 100755
> --- a/ci/alt.sh
> +++ b/ci/alt.sh
> @@ -28,4 +28,4 @@ apt-get install -y \
>  		xxd \
>  	&& control openssl-gost enabled
>  
> -apt-get install -y pkcs11-provider || true
> +# apt-get install -y pkcs11-provider || true
> diff --git a/ci/debian.sh b/ci/debian.sh
> index e1bae43..34125d4 100755
> --- a/ci/debian.sh
> +++ b/ci/debian.sh
> @@ -59,4 +59,4 @@ $apt \
>  $apt xxd || $apt vim-common
>  $apt libengine-gost-openssl || true
>  $apt softhsm2 gnutls-bin libengine-pkcs11-openssl || true
> -$apt softhsm2 gnutls-bin pkcs11-provider || true
> +# $apt softhsm2 gnutls-bin pkcs11-provider || true
> -- 
> 2.43.0

J.

-- 
I have found the monster - the monster is us.