Need dedicated Jenkins slave for Security tests

[Egor Kotko]

For preparing the security test necessary do several steps:
1. Preparation the qcow2 image with activated Nessus license.
Should be done only on host machine that will be used for executing this image.
Limitation due to Nessus license. (Will be done from QA side after getting access on the server)
2. Each time for new test environment Nessus VM should use "fresh" qcow2 image - can be done via:
 - #virsh vol-clone ...
- #qemu-img -b .... (need to test)
3. Job with the security test should run only on this server.

[Pawel Brzozowski (pbrzozowski)]

Egor, do you have any special hardware requirements?

[Egor Kotko (ykotko)]

Nothing special just as usual server for executing system tests: SSD, usual volume of RAM would be preferred.

[Aleksandra Fedorova (bookwar)]

I've set srv16 for this task: http://jenkins-product.srt.mirantis.net:8080/computer/srv16-msk.msk.mirantis.net/
Please use label 'security' for securoty-related jenkins jobs.

We don't have SSD on generic Jenkins slaves, there will be just usual HDD

[Mateusz Matuszkowiak (mmatuszkowiak)]

As i see Egor will need that srv16 to be connected to the new product-ci or use for that purpose already connected slave on new jenkins prod. Egor - please confirm/verify.

[Egor Kotko (ykotko)]

Yes, we need to use this dedicated server on new Jenkins because the job is already there:
https://product-ci.infra.mirantis.net/job/7.0.nessus_security_scan/

[Mateusz Matuszkowiak (mmatuszkowiak)]

Ci-team please choose a slave on product-ci for this task or disconnect srv16 from old jenkins product and connect it to new instance. Note, that srv16 has the both necessary ssh keys: the one from old jenkins product and a new one from product-ci.

[Egor Kotko (ykotko)]

We need only srv16 because there is special prepared image with Nessus license.

[Mateusz Matuszkowiak (mmatuszkowiak)]

Egor, ACK. Assigning to ci-team.

[Aleksandra Fedorova (bookwar)]

This ticket is a tracking ticket for hardware request. PLease leave in in Fix Commited state assigned to Devops team

[Egor Kotko (ykotko)]

The job was executed on appropriate server:
https://product-ci.infra.mirantis.net/view/7.0_swarm/job/7.0.nessus_security_scan/1/consoleFull