From: Tom Lane <tgl@sss.pgh.pa.us>
To: Mike Palmiotto <mike.palmiotto@crunchydata.com>
Cc: pgsql-hackers@lists.postgresql.org, Joe Conway <mail@joeconway.com>
Subject: Re: sepgsql seems rather thoroughly broken on Fedora 30
Date: Fri, 19 Jul 2019 16:29:25 -0400
Message-ID: <5847.1563568165@sss.pgh.pa.us> (raw)
In-Reply-To: <CAMN686H0bby=GXfmF2ykB_CntyvM5YVO6BjEg5-e1+Ee1uJXeA@mail.gmail.com>
References: <23856.1563381159@sss.pgh.pa.us>
<CAMN686Ew55FmGAZMsin_r2GKOpTwNwGS2PJ2v+KX8jO2yU3Sqw@mail.gmail.com>
<25538.1563549575@sss.pgh.pa.us>
<CAMN686H0bby=GXfmF2ykB_CntyvM5YVO6BjEg5-e1+Ee1uJXeA@mail.gmail.com>
Mike Palmiotto <mike.palmiotto@crunchydata.com> writes:
> We probably need to polish this a bit more, but what do you think
> about something similar to the attached patches? They should hopefully
> reduce some of the complexity of running these regression tests.
I can confirm that the 0001 patch fixes things on my Fedora 30 box.
So that's good, though I don't know enough to evaluate it for style
or anything like that.
I don't think I like the 0002 patch very much, because of its putting
all the sudo actions into the script. I'd rather not give a script
root permissions, thanks. Maybe I'm in the minority on that.
Also, since the documentation explicitly says that the
/usr/share/selinux/devel/Makefile path is not to be relied on,
why would we hard-wire it into the script?
A bigger-picture issue is that right now, configuring a cluster for
sepgsql is a very manual process (cf. section F.35.2). I think there's
some advantage in forcing the user to run through that before running
the regression test, namely that they'll get the bugs out of any
misunderstandings or needed local changes. If we had that a bit more
automated then maybe having the test script do-it-for-you would be
sensible. (IOW, the fact that the test process is more like "make
installcheck" than "make check" seems like a feature not a bug.)
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: tgl@sss.pgh.pa.us, mike.palmiotto@crunchydata.com, mail@joeconway.com
Subject: Re: sepgsql seems rather thoroughly broken on Fedora 30
In-Reply-To: <5847.1563568165@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox