# TLDR Xenial VM supplementary staging tests. All succeed fips/livepatch testing

csmith@downtown:~/src/ubuntu-advantage-client (ci-add-custom-userdata)$ UACLIENT_BEHAVE_USERDATA_FILE=proposed.yaml UACLIENT_BEHAVE_CONTRACT_TOKEN=<REDACTED> UACLIENT_BEHAVE_CONTRACT_TOKEN_STAGING=<REDACTED> tox -e behave-vm-16.04 features/staging_commands.feature
GLOB sdist-make: /home/csmith/src/ubuntu-advantage-client/setup.py
behave-vm-16.04 inst-nodeps: /home/csmith/src/ubuntu-advantage-client/.tox/.tmp/package/1/ubuntu-advantage-tools-20.3.zip
behave-vm-16.04 installed: adal==1.2.7,appdirs==1.4.4,applicationinsights==0.11.10,argcomplete==1.12.3,attrs==20.3.0,azure-cli-core==2.22.1,azure-cli-telemetry==1.0.6,azure-common==1.1.27,azure-core==1.13.0,azure-mgmt-compute==14.0.0,azure-mgmt-core==1.2.2,azure-mgmt-network==13.0.0,azure-mgmt-resource==12.1.0,backcall==0.2.0,bcrypt==3.2.0,behave==1.2.6,boto3==1.17.61,botocore==1.20.61,cachetools==4.2.2,certifi==2020.12.5,cffi==1.14.5,chardet==4.0.0,cliff==3.7.0,cmd2==1.5.0,colorama==0.4.4,configparser==4.0.2,coverage==5.5,cryptography==3.3.2,debtcollector==2.2.0,decorator==5.0.7,dogpile.cache==1.1.2,flake8==3.9.1,google-api-core==1.26.3,google-api-python-client==2.3.0,google-auth==1.30.0,google-auth-httplib2==0.1.0,googleapis-common-protos==1.53.0,httplib2==0.19.1,humanfriendly==9.1,idna==2.10,iniconfig==1.1.1,ipdb==0.13.7,ipython==7.22.0,ipython-genutils==0.2.0,iso8601==0.1.14,isodate==0.6.0,jedi==0.18.0,jmespath==0.10.0,jsonpatch==1.32,jsonpointer==2.1,keystoneauth1==4.3.1,knack==0.8.1,mccabe==0.6.1,mock==4.0.3,msal==1.11.0,msgpack==1.0.2,msrest==0.6.21,msrestazure==0.6.4,munch==2.5.0,netaddr==0.8.0,netifaces==0.10.9,oauthlib==3.1.0,oci==2.38.0,openstacksdk==0.56.0,os-service-types==1.7.0,osc-lib==2.3.1,oslo.config==8.6.0,oslo.i18n==5.0.1,oslo.serialization==4.1.0,oslo.utils==4.8.0,packaging==20.9,paramiko==2.7.2,parse==1.19.0,parse-type==0.5.2,parso==0.8.2,pbr==5.6.0,pexpect==4.8.0,pickleshare==0.7.5,pkginfo==1.7.0,pluggy==0.13.1,portalocker==1.7.1,prettytable==2.1.0,prompt-toolkit==3.0.18,protobuf==3.15.8,psutil==5.8.0,ptyprocess==0.7.0,py==1.10.0,pyasn1==0.4.8,pyasn1-modules==0.2.8,pycloudlib @ git+https://github.com/canonical/pycloudlib.git@cab5db70bdd5588aabcf7217e655ff90d2dee487,pycodestyle==2.7.0,pycparser==2.20,pyflakes==2.3.1,Pygments==2.8.1,PyHamcrest==2.0.2,PyJWT==1.7.1,PyNaCl==1.4.0,pyOpenSSL==19.1.0,pyparsing==2.4.7,pyperclip==1.8.2,pytest==6.2.3,pytest-cov==2.11.1,python-cinderclient==7.4.0,python-dateutil==2.8.1,python-keystoneclient==4.2.0,python-novaclient==17.4.0,python-openstackclient==5.5.0,python-simplestreams @ git+https://git.launchpad.net/simplestreams@21c5bba2a5413c51e6b9131fc450e96f6b46090d,pytz==2021.1,PyYAML==5.4.1,requests==2.25.1,requests-oauthlib==1.3.0,requestsexceptions==1.4.0,rfc3986==1.4.0,rsa==4.7.2,s3transfer==0.4.2,simplejson==3.17.2,six==1.15.0,stevedore==3.3.0,tabulate==0.8.9,toml==0.10.2,traitlets==5.0.5,ubuntu-advantage-tools @ file:///home/csmith/src/ubuntu-advantage-client/.tox/.tmp/package/1/ubuntu-advantage-tools-20.3.zip,uritemplate==3.0.1,urllib3==1.26.4,wcwidth==0.2.5,wrapt==1.12.1
behave-vm-16.04 run-test-pre: PYTHONHASHSEED='2114083106'
behave-vm-16.04 run-test: commands[0] | behave -v features/staging_commands.feature --tags=uses.config.machine_type.lxd.vm --tags=series.xenial,series.all
Loading config defaults from "./tox.ini"
Using defaults:
          color True
  show_snippets True
   show_skipped False
        dry_run False
    show_source True
   show_timings True
 stdout_capture False
 stderr_capture False
    log_capture False
 logging_format %(levelname)s:%(name)s:%(message)s
  logging_level info
  steps_catalog False
        summary True
          junit True
          stage None
       userdata {}
 default_format pretty
   default_tags 
scenario_outline_annotation_schema {name} -- @{row.id} {examples.name}
more_formatters {}
Supplied path: "features/staging_commands.feature"
Primary path is to a file so using its directory
Trying base directory: /home/csmith/src/ubuntu-advantage-client/features
--- job suffix: None
Config options:
  build_pr = False
  image_clean = True
  destroy_instances = True
  aws_access_key_id = None
  aws_secret_access_key = None
  az_client_id = None
  az_client_secret = None
  az_tenant_id = None
  az_subscription_id = None
  gcp_credentials_path = None
  gcp_project = None
  contract_token = <REDACTED>
  contract_token_staging = <REDACTED>
  machine_type = lxd.vm
  private_key_file = None
  private_key_name = uaclient-integration
  reuse_image = None
  debs_path = None
  artifact_dir = None
  ppa = http://ppa.launchpad.net/ua-client/daily/ubuntu
  ppa_keyid = 6E34E7116C0BC933
  userdata_file = proposed.yaml
@uses.config.contract_token_staging
Feature: Enable command behaviour when attached to an UA staging subscription # features/staging_commands.feature:2

  @series.xenial @series.bionic @uses.config.machine_type.lxd.vm
  Scenario Outline: Attached enable of vm-based services in an ubuntu lxd vm -- @1.1 ubuntu release                               # features/staging_commands.feature:196
    Given a `xenial` machine with ubuntu-advantage-tools installed                                                                # features/steps/steps.py:27 330.724s
    When I attach `contract_token_staging` with sudo                                                                              # features/steps/steps.py:216 46.761s
    And I run `ua disable livepatch` with sudo                                                                                    # features/steps/steps.py:130 3.108s
    And I run `apt-get install openssh-client openssh-server strongswan -y` with sudo, retrying exit [100]                        # features/steps/steps.py:109 8.687s
    And I run `apt-mark hold openssh-client openssh-server strongswan` with sudo                                                  # features/steps/steps.py:130 0.127s
    And I run `ua enable fips --assume-yes` with sudo                                                                             # features/steps/steps.py:130 202.921s
    Then stdout matches regexp                                                                                                    # features/steps/steps.py:300 0.001s"""
      """ating package lists
      Updating package listses
      Installing FIPS packages
      FIPS enabledrequired to complete install
      A reboot is required to complete install
      """
    When I run `ua status --all` with sudo                                                                                        # features/steps/steps.py:130 1.263s
    Then stdout matches regexp                                                                                                    # features/steps/steps.py:300 0.001s"""
      """s +yes                enabled
      fips +yes                enabled
      """
    And stdout matches regexp                                                                                                     # features/steps/steps.py:300 0.001s"""
      """S support requires system reboot to complete configuration
      FIPS support requires system reboot to complete configuration
      """
    And I verify that running `apt update` `with sudo` exits `0`                                                                  # features/steps/steps.py:355 2.920s
    And I verify that `openssh-server` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu xenial/main`      # features/steps/steps.py:412 0.081s
    And I verify that `openssh-client` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu xenial/main`      # features/steps/steps.py:412 0.082s
    And I verify that `strongswan` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu xenial/main`          # features/steps/steps.py:412 0.080s
    And I verify that `openssh-server-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu xenial/main` # features/steps/steps.py:412 0.078s
    And I verify that `openssh-client-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu xenial/main` # features/steps/steps.py:412 0.078s
    And I verify that `strongswan-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu xenial/main`     # features/steps/steps.py:412 0.084s
    When I reboot the `xenial` machine                                                                                            # features/steps/steps.py:265 35.710s
    And I run `uname -r` as non-root                                                                                              # features/steps/steps.py:130 0.025s
    Then stdout matches regexp                                                                                                    # features/steps/steps.py:300 0.000s"""
      """s
      fips
      """
    When I run `cat /proc/sys/crypto/fips_enabled` with sudo                                                                      # features/steps/steps.py:130 0.049s
    Then I will see the following on stdout                                                                                       # features/steps/steps.py:281 0.000s"""
      """
      1""
      """
    When I run `ua status --all` with sudo                                                                                        # features/steps/steps.py:130 1.421s
    Then stdout does not match regexp                                                                                             # features/steps/steps.py:305 0.000s"""
      """S support requires system reboot to complete configuration
      FIPS support requires system reboot to complete configuration
      """
    When I run `ua disable fips --assume-yes` with sudo                                                                           # features/steps/steps.py:130 22.320s
    Then stdout matches regexp                                                                                                    # features/steps/steps.py:300 0.001s"""
      """ating package lists
      Updating package listso complete disable operation
      A reboot is required to complete disable operation
      """
    When I run `ua status --all` with sudo                                                                                        # features/steps/steps.py:130 1.217s
    Then stdout matches regexp                                                                                                    # features/steps/steps.py:300 0.001s"""
      """abling FIPS requires system reboot to complete operation
      Disabling FIPS requires system reboot to complete operation
      """
    When I run `apt-cache policy ubuntu-fips` as non-root                                                                         # features/steps/steps.py:130 0.055s
    Then stdout matches regexp                                                                                                    # features/steps/steps.py:300 0.001s"""
      """nstalled: \(none\)
      .*Installed: \(none\)
      """
    When I reboot the `xenial` machine                                                                                            # features/steps/steps.py:265 35.691s
    Then I verify that `openssh-server` installed version matches regexp `fips`                                                   # features/steps/steps.py:402 0.036s
    And I verify that `openssh-client` installed version matches regexp `fips`                                                    # features/steps/steps.py:402 0.054s
    And I verify that `strongswan` installed version matches regexp `fips`                                                        # features/steps/steps.py:402 0.055s
    And I verify that `openssh-server-hmac` installed version matches regexp `fips`                                               # features/steps/steps.py:402 0.066s
    And I verify that `openssh-client-hmac` installed version matches regexp `fips`                                               # features/steps/steps.py:402 0.055s
    And I verify that `strongswan-hmac` installed version matches regexp `fips`                                                   # features/steps/steps.py:402 0.069s
    When I run `apt-mark unhold openssh-client openssh-server strongswan` with sudo                                               # features/steps/steps.py:130 0.124s
    Then I will see the following on stdout                                                                                       # features/steps/steps.py:281 0.000s"""
      """nssh-client was already not hold.
      openssh-client was already not hold.
      openssh-server was already not hold.
      strongswan was already not hold.
      """
    When I run `ua status --all` with sudo                                                                                        # features/steps/steps.py:130 1.272s
    Then stdout matches regexp                                                                                                    # features/steps/steps.py:300 0.001s"""
      """s +yes                disabled
      fips +yes                disabled
      """
    Then stdout does not match regexp                                                                                             # features/steps/steps.py:305 0.000s"""
      """abling FIPS requires system reboot to complete operation
      Disabling FIPS requires system reboot to complete operation
      """

  @series.xenial @series.bionic @uses.config.machine_type.lxd.vm
  Scenario Outline: Attached enable of vm-based services in an ubuntu lxd vm -- @1.2 ubuntu release                               # features/staging_commands.feature:197
    Given a `bionic` machine with ubuntu-advantage-tools installed                                                                # features/steps/steps.py:27
    When I attach `contract_token_staging` with sudo                                                                              # None
    And I run `ua disable livepatch` with sudo                                                                                    # None
    And I run `apt-get install openssh-client openssh-server strongswan -y` with sudo, retrying exit [100]                        # None
    And I run `apt-mark hold openssh-client openssh-server strongswan` with sudo                                                  # None
    And I run `ua enable fips --assume-yes` with sudo                                                                             # None
    Then stdout matches regexp                                                                                                    # None
      """
      Updating package lists
      Installing FIPS packages
      FIPS enabled
      A reboot is required to complete install
      """
    When I run `ua status --all` with sudo                                                                                        # None
    Then stdout matches regexp                                                                                                    # None
      """
      fips +yes                enabled
      """
    And stdout matches regexp                                                                                                     # None
      """
      FIPS support requires system reboot to complete configuration
      """
    And I verify that running `apt update` `with sudo` exits `0`                                                                  # None
    And I verify that `openssh-server` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu bionic/main`      # None
    And I verify that `openssh-client` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu bionic/main`      # None
    And I verify that `strongswan` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu bionic/main`          # None
    And I verify that `openssh-server-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu bionic/main` # None
    And I verify that `openssh-client-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu bionic/main` # None
    And I verify that `strongswan-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips/ubuntu bionic/main`     # None
    When I reboot the `bionic` machine                                                                                            # None
    And I run `uname -r` as non-root                                                                                              # None
    Then stdout matches regexp                                                                                                    # None
      """
      fips
      """
    When I run `cat /proc/sys/crypto/fips_enabled` with sudo                                                                      # None
    Then I will see the following on stdout                                                                                       # None
      """
      1
      """
    When I run `ua status --all` with sudo                                                                                        # None
    Then stdout does not match regexp                                                                                             # None
      """
      FIPS support requires system reboot to complete configuration
      """
    When I run `ua disable fips --assume-yes` with sudo                                                                           # None
    Then stdout matches regexp                                                                                                    # None
      """
      Updating package lists
      A reboot is required to complete disable operation
      """
    When I run `ua status --all` with sudo                                                                                        # None
    Then stdout matches regexp                                                                                                    # None
      """
      Disabling FIPS requires system reboot to complete operation
      """
    When I run `apt-cache policy ubuntu-fips` as non-root                                                                         # None
    Then stdout matches regexp                                                                                                    # None
      """
      .*Installed: \(none\)
      """
    When I reboot the `bionic` machine                                                                                            # None
    Then I verify that `openssh-server` installed version matches regexp `fips`                                                   # None
    And I verify that `openssh-client` installed version matches regexp `fips`                                                    # None
    And I verify that `strongswan` installed version matches regexp `fips`                                                        # None
    And I verify that `openssh-server-hmac` installed version matches regexp `fips`                                               # None
    And I verify that `openssh-client-hmac` installed version matches regexp `fips`                                               # None
    And I verify that `strongswan-hmac` installed version matches regexp `fips`                                                   # None
    When I run `apt-mark unhold openssh-client openssh-server strongswan` with sudo                                               # None
    Then I will see the following on stdout                                                                                       # None
      """
      openssh-client was already not hold.
      openssh-server was already not hold.
      strongswan was already not hold.
      """
    When I run `ua status --all` with sudo                                                                                        # None
    Then stdout matches regexp                                                                                                    # None
      """
      fips +yes                disabled
      """
    Then stdout does not match regexp                                                                                             # None
      """
      Disabling FIPS requires system reboot to complete operation
      """

  @series.xenial @series.bionic @uses.config.machine_type.lxd.vm
  Scenario Outline: Attached enable of vm-based services in an ubuntu lxd vm -- @1.1 ubuntu release                                               # features/staging_commands.feature:266
    Given a `xenial` machine with ubuntu-advantage-tools installed                                                                                # features/steps/steps.py:27 62.509s
    When I attach `contract_token_staging` with sudo                                                                                              # features/steps/steps.py:216 46.794s
    And I run `ua disable livepatch` with sudo                                                                                                    # features/steps/steps.py:130 3.061s
    And I run `apt-get install openssh-client openssh-server strongswan -y` with sudo, retrying exit [100]                                        # features/steps/steps.py:109 8.271s
    When I run `ua enable fips-updates --assume-yes` with sudo                                                                                    # features/steps/steps.py:130 198.561s
    Then stdout matches regexp                                                                                                                    # features/steps/steps.py:300 0.000s
      """
      Updating package lists
      Installing FIPS Updates packages
      FIPS Updates enabled
      A reboot is required to complete install
      """
    When I run `ua status --all` with sudo                                                                                                        # features/steps/steps.py:130 1.207s
    Then stdout matches regexp                                                                                                                    # features/steps/steps.py:300 0.001s
      """
      fips-updates +yes                enabled
      """
    And I verify that running `apt update` `with sudo` exits `0`                                                                                  # features/steps/steps.py:355 2.912s
    And I verify that `openssh-server` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu xenial-updates/main`      # features/steps/steps.py:412 0.081s
    And I verify that `openssh-client` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu xenial-updates/main`      # features/steps/steps.py:412 0.081s
    And I verify that `strongswan` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu xenial-updates/main`          # features/steps/steps.py:412 0.081s
    And I verify that `openssh-server-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu xenial-updates/main` # features/steps/steps.py:412 0.080s
    And I verify that `openssh-client-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu xenial-updates/main` # features/steps/steps.py:412 0.080s
    And I verify that `strongswan-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu xenial-updates/main`     # features/steps/steps.py:412 0.084s
    When I reboot the `xenial` machine                                                                                                            # features/steps/steps.py:265 35.651s
    And I run `uname -r` as non-root                                                                                                              # features/steps/steps.py:130 0.021s
    Then stdout matches regexp                                                                                                                    # features/steps/steps.py:300 0.000s
      """
      fips
      """
    When I run `cat /proc/sys/crypto/fips_enabled` with sudo                                                                                      # features/steps/steps.py:130 0.059s
    Then I will see the following on stdout                                                                                                       # features/steps/steps.py:281 0.000s
      """
      1
      """
    When I run `ua disable fips-updates --assume-yes` with sudo                                                                                   # features/steps/steps.py:130 22.236s
    Then stdout matches regexp                                                                                                                    # features/steps/steps.py:300 0.000s
      """
      Updating package lists
      A reboot is required to complete disable operation
      """
    When I reboot the `xenial` machine                                                                                                            # features/steps/steps.py:265 35.557s
    Then I verify that `openssh-server` installed version matches regexp `fips`                                                                   # features/steps/steps.py:402 0.036s
    And I verify that `openssh-client` installed version matches regexp `fips`                                                                    # features/steps/steps.py:402 0.056s
    And I verify that `strongswan` installed version matches regexp `fips`                                                                        # features/steps/steps.py:402 0.052s
    And I verify that `openssh-server-hmac` installed version matches regexp `fips`                                                               # features/steps/steps.py:402 0.056s
    And I verify that `openssh-client-hmac` installed version matches regexp `fips`                                                               # features/steps/steps.py:402 0.057s
    And I verify that `strongswan-hmac` installed version matches regexp `fips`                                                                   # features/steps/steps.py:402 0.052s
    When I run `apt-mark unhold openssh-client openssh-server strongswan` with sudo                                                               # features/steps/steps.py:130 0.133s
    Then I will see the following on stdout                                                                                                       # features/steps/steps.py:281 0.000s
      """
      openssh-client was already not hold.
      openssh-server was already not hold.
      strongswan was already not hold.
      """
    When I run `ua status --all` with sudo                                                                                                        # features/steps/steps.py:130 1.369s
    Then stdout matches regexp                                                                                                                    # features/steps/steps.py:300 0.001s
      """
      fips-updates +yes                disabled
      """

  @series.xenial @series.bionic @uses.config.machine_type.lxd.vm
  Scenario Outline: Attached enable of vm-based services in an ubuntu lxd vm -- @1.2 ubuntu release                                               # features/staging_commands.feature:267
    Given a `bionic` machine with ubuntu-advantage-tools installed                                                                                # features/steps/steps.py:27
    When I attach `contract_token_staging` with sudo                                                                                              # None
    And I run `ua disable livepatch` with sudo                                                                                                    # None
    And I run `apt-get install openssh-client openssh-server strongswan -y` with sudo, retrying exit [100]                                        # None
    When I run `ua enable fips-updates --assume-yes` with sudo                                                                                    # None
    Then stdout matches regexp                                                                                                                    # None
      """
      Updating package lists
      Installing FIPS Updates packages
      FIPS Updates enabled
      A reboot is required to complete install
      """
    When I run `ua status --all` with sudo                                                                                                        # None
    Then stdout matches regexp                                                                                                                    # None
      """
      fips-updates +yes                enabled
      """
    And I verify that running `apt update` `with sudo` exits `0`                                                                                  # None
    And I verify that `openssh-server` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu bionic-updates/main`      # None
    And I verify that `openssh-client` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu bionic-updates/main`      # None
    And I verify that `strongswan` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu bionic-updates/main`          # None
    And I verify that `openssh-server-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu bionic-updates/main` # None
    And I verify that `openssh-client-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu bionic-updates/main` # None
    And I verify that `strongswan-hmac` is installed from apt source `https://esm.staging.ubuntu.com/fips-updates/ubuntu bionic-updates/main`     # None
    When I reboot the `bionic` machine                                                                                                            # None
    And I run `uname -r` as non-root                                                                                                              # None
    Then stdout matches regexp                                                                                                                    # None
      """
      fips
      """
    When I run `cat /proc/sys/crypto/fips_enabled` with sudo                                                                                      # None
    Then I will see the following on stdout                                                                                                       # None
      """
      1
      """
    When I run `ua disable fips-updates --assume-yes` with sudo                                                                                   # None
    Then stdout matches regexp                                                                                                                    # None
      """
      Updating package lists
      A reboot is required to complete disable operation
      """
    When I reboot the `bionic` machine                                                                                                            # None
    Then I verify that `openssh-server` installed version matches regexp `fips`                                                                   # None
    And I verify that `openssh-client` installed version matches regexp `fips`                                                                    # None
    And I verify that `strongswan` installed version matches regexp `fips`                                                                        # None
    And I verify that `openssh-server-hmac` installed version matches regexp `fips`                                                               # None
    And I verify that `openssh-client-hmac` installed version matches regexp `fips`                                                               # None
    And I verify that `strongswan-hmac` installed version matches regexp `fips`                                                                   # None
    When I run `apt-mark unhold openssh-client openssh-server strongswan` with sudo                                                               # None
    Then I will see the following on stdout                                                                                                       # None
      """
      openssh-client was already not hold.
      openssh-server was already not hold.
      strongswan was already not hold.
      """
    When I run `ua status --all` with sudo                                                                                                        # None
    Then stdout matches regexp                                                                                                                    # None
      """
      fips-updates +yes                disabled
      """

  @series.xenial @uses.config.machine_type.lxd.vm
  Scenario Outline: Attached FIPS upgrade across LTS releases -- @1.1 ubuntu release                               # features/staging_commands.feature:338
    Given a `xenial` machine with ubuntu-advantage-tools installed                                                 # features/steps/steps.py:27 62.381s
    When I attach `contract_token_staging` with sudo                                                               # features/steps/steps.py:216 48.126s
    And I run `apt-get install lsof` with sudo, retrying exit [100]                                                # features/steps/steps.py:109 0.347s
    And I run `ua disable livepatch` with sudo                                                                     # features/steps/steps.py:130 3.170s
    And I run `ua enable fips --assume-yes` with sudo                                                              # features/steps/steps.py:130 184.433s
    Then stdout matches regexp                                                                                     # features/steps/steps.py:300 0.000s
      """
      Updating package lists
      Installing FIPS packages
      FIPS enabled
      A reboot is required to complete install
      """
    When I run `ua status --all` with sudo                                                                         # features/steps/steps.py:130 1.256s
    Then stdout matches regexp                                                                                     # features/steps/steps.py:300 0.000s
      """
      fips +yes                enabled
      """
    And I verify that running `apt update` `with sudo` exits `0`                                                   # features/steps/steps.py:355 2.850s
    When I reboot the `xenial` machine                                                                             # features/steps/steps.py:265 35.552s
    And I run `uname -r` as non-root                                                                               # features/steps/steps.py:130 0.026s
    Then stdout matches regexp                                                                                     # features/steps/steps.py:300 0.000s
      """
      fips
      """
    When I run `cat /proc/sys/crypto/fips_enabled` with sudo                                                       # features/steps/steps.py:130 0.053s
    Then I will see the following on stdout                                                                        # features/steps/steps.py:281 0.000s
      """
      1
      """
    When I run `apt-get dist-upgrade -y --allow-downgrades` with sudo                                              # features/steps/steps.py:130 41.507s
    And I reboot the `xenial` machine                                                                              # features/steps/steps.py:265 36.249s
    And I create the file `/etc/update-manager/release-upgrades.d/ua-test.cfg` with the following                  # features/steps/steps.py:256 0.038s
      """
      [Sources]
      AllowThirdParty=yes
      """
    Then I verify that running `do-release-upgrade --frontend DistUpgradeViewNonInteractive` `with sudo` exits `0` # features/steps/steps.py:355 827.539s
    When I reboot the `xenial` machine                                                                             # features/steps/steps.py:265 40.109s
    And I run `lsb_release -cs` as non-root                                                                        # features/steps/steps.py:130 0.068s
    Then I will see the following on stdout                                                                        # features/steps/steps.py:281 0.001s
      """
      bionic
      """
    When I verify that running `egrep "disabled" /etc/apt/sources.list.d/ubuntu-fips.list` `as non-root` exits `1` # features/steps/steps.py:365 0.053s
    Then I will see the following on stdout                                                                        # features/steps/steps.py:281 0.000s
    When I run `ua status --all` with sudo                                                                         # features/steps/steps.py:130 2.043s
    Then stdout matches regexp                                                                                     # features/steps/steps.py:300 0.000s
      """
      fips +yes                enabled
      """
    When I run `uname -r` as non-root                                                                              # features/steps/steps.py:130 0.025s
    Then stdout matches regexp                                                                                     # features/steps/steps.py:300 0.000s
      """
      fips
      """
    When I run `cat /proc/sys/crypto/fips_enabled` with sudo                                                       # features/steps/steps.py:130 0.055s
    Then I will see the following on stdout                                                                        # features/steps/steps.py:281 0.000s
      """
      1
      """

  @series.xenial @uses.config.machine_type.lxd.vm
  Scenario Outline: Attached FIPS upgrade across LTS releases -- @1.2 ubuntu release                                       # features/staging_commands.feature:339
    Given a `xenial` machine with ubuntu-advantage-tools installed                                                         # features/steps/steps.py:27 62.622s
    When I attach `contract_token_staging` with sudo                                                                       # features/steps/steps.py:216 47.206s
    And I run `apt-get install lsof` with sudo, retrying exit [100]                                                        # features/steps/steps.py:109 0.336s
    And I run `ua disable livepatch` with sudo                                                                             # features/steps/steps.py:130 3.212s
    And I run `ua enable fips-updates --assume-yes` with sudo                                                              # features/steps/steps.py:130 184.022s
    Then stdout matches regexp                                                                                             # features/steps/steps.py:300 0.001s
      """
      Updating package lists
      Installing FIPS Updates packages
      FIPS Updates enabled
      A reboot is required to complete install
      """
    When I run `ua status --all` with sudo                                                                                 # features/steps/steps.py:130 1.221s
    Then stdout matches regexp                                                                                             # features/steps/steps.py:300 0.001s
      """
      fips-updates +yes                enabled
      """
    And I verify that running `apt update` `with sudo` exits `0`                                                           # features/steps/steps.py:355 2.830s
    When I reboot the `xenial` machine                                                                                     # features/steps/steps.py:265 35.634s
    And I run `uname -r` as non-root                                                                                       # features/steps/steps.py:130 0.025s
    Then stdout matches regexp                                                                                             # features/steps/steps.py:300 0.000s
      """
      fips
      """
    When I run `cat /proc/sys/crypto/fips_enabled` with sudo                                                               # features/steps/steps.py:130 0.053s
    Then I will see the following on stdout                                                                                # features/steps/steps.py:281 0.000s
      """
      1
      """
    When I run `apt-get dist-upgrade -y --allow-downgrades` with sudo                                                      # features/steps/steps.py:130 43.804s
    And I reboot the `xenial` machine                                                                                      # features/steps/steps.py:265 36.263s
    And I create the file `/etc/update-manager/release-upgrades.d/ua-test.cfg` with the following                          # features/steps/steps.py:256 0.033s
      """
      [Sources]
      AllowThirdParty=yes
      """
    Then I verify that running `do-release-upgrade --frontend DistUpgradeViewNonInteractive` `with sudo` exits `0`         # features/steps/steps.py:355

 @series.xenial @uses.config.machine_type.lxd.vm
  Scenario Outline: Attached FIPS upgrade across LTS releases -- @1.2 ubuntu release                                       # features/staging_commands.feature:339
    Given a `xenial` machine with ubuntu-advantage-tools installed                                                         # features/steps/steps.py:27 62.622s
    When I attach `contract_token_staging` with sudo                                                                       # features/steps/steps.py:216 47.206s
    And I run `apt-get install lsof` with sudo, retrying exit [100]                                                        # features/steps/steps.py:109 0.336s
    And I run `ua disable livepatch` with sudo                                                                             # features/steps/steps.py:130 3.212s
    And I run `ua enable fips-updates --assume-yes` with sudo                                                              # features/steps/steps.py:130 184.022s
    Then stdout matches regexp                                                                                             # features/steps/steps.py:300 0.001s
      """
      Updating package lists
      Installing FIPS Updates packages
      FIPS Updates enabled
      A reboot is required to complete install
      """
    When I run `ua status --all` with sudo                                                                                 # features/steps/steps.py:130 1.221s
    Then stdout matches regexp                                                                                             # features/steps/steps.py:300 0.001s
      """
      fips-updates +yes                enabled
      """
    And I verify that running `apt update` `with sudo` exits `0`                                                           # features/steps/steps.py:355 2.830s
    When I reboot the `xenial` machine                                                                                     # features/steps/steps.py:265 35.634s
    And I run `uname -r` as non-root                                                                                       # features/steps/steps.py:130 0.025s
    Then stdout matches regexp                                                                                             # features/steps/steps.py:300 0.000s
      """
      fips
      """
    When I run `cat /proc/sys/crypto/fips_enabled` with sudo                                                               # features/steps/steps.py:130 0.053s
    Then I will see the following on stdout                                                                                # features/steps/steps.py:281 0.000s
      """
      1
      """
    When I run `apt-get dist-upgrade -y --allow-downgrades` with sudo                                                      # features/steps/steps.py:130 43.804s
    And I reboot the `xenial` machine                                                                                      # features/steps/steps.py:265 36.263s
    And I create the file `/etc/update-manager/release-upgrades.d/ua-test.cfg` with the following                          # features/steps/steps.py:256 0.033s
      """
      [Sources]
      AllowThirdParty=yes
      """
    Then I verify that running `do-release-upgrade --frontend DistUpgradeViewNonInteractive` `with sudo` exits `0`         # features/steps/steps.py:355 822.983s
    When I reboot the `xenial` machine                                                                                     # features/steps/steps.py:265 38.785s
    And I run `lsb_release -cs` as non-root                                                                                # features/steps/steps.py:130 0.067s
    Then I will see the following on stdout                                                                                # features/steps/steps.py:281 0.000s
      """
      bionic
      """
    When I verify that running `egrep "disabled" /etc/apt/sources.list.d/ubuntu-fips-updates.list` `as non-root` exits `1` # features/steps/steps.py:365 0.052s
    Then I will see the following on stdout                                                                                # features/steps/steps.py:281 0.000s
    When I run `ua status --all` with sudo                                                                                 # features/steps/steps.py:130 7.206s
    Then stdout matches regexp                                                                                             # features/steps/steps.py:300 0.000s
      """
      fips-updates +yes                enabled
      """
    When I run `uname -r` as non-root                                                                                      # features/steps/steps.py:130 0.021s
    Then stdout matches regexp                                                                                             # features/steps/steps.py:300 0.000s
      """
      fips
      """
    When I run `cat /proc/sys/crypto/fips_enabled` with sudo                                                               # features/steps/steps.py:130 0.056s
    Then I will see the following on stdout                                                                                # features/steps/steps.py:281 0.000s
      """
      1