[apparmor] KUnit and experimental e2e tests

[Eric Chiang]

Just realized that https://gitlab.com/apparmor/apparmor-kernel already
exists. I'll work with Mike to get the KUnit patches submitted there
and open issues for setting up CI.

On Thu, Mar 28, 2019 at 5:26 PM Seth Arnold <seth.arnold at canonical.com> wrote:
>
> On Thu, Mar 28, 2019 at 01:13:54PM -0700, Eric Chiang wrote:
> > Would anyone be opposed to setting up a gitlab.com/apparmor/linux
> > mirror, creating a kunit branch and configuring GitLab CI? Short term,
>
> I really like this idea.
>
> > Separately, I've been working on an experimental tool for writing e2e
> > tests for arbitrary apparmor_parser / kernel combinations leveraging
> > QEMU. I'd like to start some discussion if it'd be a good addition to
> > the existing tests/regression/apparmor suite. Would it be okay to open
> > source that under gitlab.com/apparmor/apparmor_e2e?
>
> I also really like this idea. (This is something I've wanted to do for
> years but I'm too easily distracted by shiny things.)
>
> I've thought that there's several axes that would be worthwhile testing:
>
> Starting from a distro that has *no* apparmor:
> - testing "arbitrary" apparmor versions (master, maybe tips of a few
>   branches)
> - testing "arbitrary" kernel versions (linux-next, linus, maybe a stable
>   or two)
>
> A full N*M layout would be awesome.

Yeah, the tool builds an initrd with the apparmor_parser then runs it
against a kernel so this is totally doable. Let me see if someone can
create the repo for me.
>
> Starting from the distros that have strong apparmor support:
> - testing their kernels with "arbitrary" apparmor versions
> - testing their apparmor versions with "arbitrary" kernels
>
> D*N*1 and D*1*M layouts ought to be good.
>
> The arbitrary kernels version would address the most likely way for most
> apparmor users to experience problems.
>
> Maybe these don't all fit into the same tool, but I thought I'd mention it
> just in case they do.
>
> Thanks