Debian: Auditd app applies after almost 1 hour (slower than centos), progress status remained 0% during apply test
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
StarlingX |
Fix Released
|
Medium
|
Karla Felix |
Bug Description
Brief Description
Debian: The following tc attempts to apply auditd. The auditd appears to apply (after almost 1 hr), but takes much more time than on centos. Also there is no progress status updates in that time ie. remains at 0%
functional/
Severity
standard
Steps to Reproduce
auditd had a value of eg. 1 in system service-
eg. || platform | kernel | audit | 1
Run the following tc from jenkins
test_audit.
[2022-09-06 18:23:24,305] 351 DEBUG MainThread ssh.send :: Send '/usr/bin/ssh -o PubkeyAuthentic
{"name"
]}'' [2022-09-06 18:23:26,550] 351 DEBUG MainThread ssh.send :: Send 'grep audit=1 /proc/cmdline' [2022-09-06 18:23:26,654] 351 DEBUG MainThread ssh.send :: Send 'find /usr/local/
Expected Behavior
Expect apply performance to improve (ie. takes 57 minutes on debian vs ~ 35 min on centos)
Also, expect progress status to be updated during this time instead of remaining at 0% throughout
Actual Behavior
Progress apply status of auditd remained at 0% for almost an hour
$ fm alarm-list
-------
Alarm ID Reason Text Entity ID Severity Time Stamp
-------
750.004 Application Apply In Progress k8s_application= warning 2022-09-06T1
sysinv 2022-09-06 18:24:41.485 370457 INFO sysinv.
sysinv 2022-09-06 19:06:22.702 370457 INFO sysinv.
sysinv 2022-09-06 19:06:25.307 370457 INFO sysinv.
sysinv 2022-09-06 19:06:25.309 370457 INFO sysinv.
sysinv 2022-09-06 19:06:25.309 370457 INFO sysinv.
Reproducibility
yes
System Configuration
hpe-360-g9-015-016 (duplex debian)
Load info (eg: 2022-03-
"2022-09-
Last Pass
Did this test scenario pass previously? If so, please indicate the load/pull time info of the last pass.
Use this section to also indicate if this is a new test scenario.
Alarms
Please indicate if there are any alarms observed.
If there are any alarms please list them here
Test Activity
Feature Testing, Regression Testing
Workaround
Describe workaround if available
Changed in charm-mongodb: | |
assignee: | nobody → Karla Felix (kkarolin) |
assignee: | Karla Felix (kkarolin) → nobody |
affects: | charm-mongodb → starlingx |
Changed in starlingx: | |
assignee: | nobody → Karla Felix (kkarolin) |
Changed in starlingx: | |
status: | New → In Progress |
Changed in starlingx: | |
importance: | Undecided → Medium |
tags: | added: stx.8.0 stx.apps |
summary: |
Debian: Auditd app applies after almost 1 hour (slower than centos), - progress status remained 0% during apply tc - test_audit.py::test_audit_install + progress status remained 0% during apply test |
Reviewed: https:/ /review. opendev. org/c/starlingx /audit- armada- app/+/862504 /opendev. org/starlingx/ audit-armada- app/commit/ 586ace04d4ad310 5194ea104bd5655 db5fee3c4c
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit 586ace04d4ad310 5194ea104bd5655 db5fee3c4c
Author: Karla Felix <email address hidden>
Date: Mon Oct 24 13:16:43 2022 -0300
Decreasing repository update interval
There is a FluxCD helmrepository for each kubernetes namespace.
With the previous interval, 60 minutes, of the already existing
kube-system repository does not update until this 60 minutes
interval is over.
This commit changes the update interval from 60 minutes to 5 minutes,
which seems to be reasonable amount and decrease the time necessary to
apply auditd from almost one hour to 6-7 minutes.
Test Plan:
PASS: Generating new audit package and upload/apply that
package( it took 6 minutes to fully apply).
Closes-Bug: 1994151 07b5ffe65ca5306 dea1e457dd6
Signed-off-by: Karla Felix <email address hidden>
Change-Id: I4d47ea8bce61f4