David Moreau Simard

tests: Add a playbook and job to run sanity tests

1

This is meant to install every collection in a release's galaxy-requirements.yaml and then iterate over them to run sanity tests on each. Note that errors are not fatal yet (ignore_errors:...

build-release: Validate collections MANIFEST.json and FILES.json against repository tag

7

Two files are added to a built collection tarball: FILES.json and MANIFEST.json. We should validate: - That FILES.json sha256sum matches what is in MANIFEST.json - That each file in FILES.json...

build-release/continuous integration: increase python version testing coverage

1

The github action that exercises build and installation tests currently runs on top of python 3.9: https://github.com/ansible-community/antsibull/blob/main/.github/workflows/antsibull-build.yml We should increase installation testing coverage to other python versions as well, it...

github: test record ansible results to an ara server

6

If this works, it would provide a better UX than trying to dig through the ansible console output in the github action.

ara 1.7.0 bumped the version of django to allow the latest LTS, 4.2. django 4.2 provides support for psycopg3 but there are differences to watch out for: - https://docs.djangoproject.com/en/5.0/releases/4.2/#psycopg-3-support -...

Debian 12 install broken: "No package matching 'python-pkg-resources' is available"

1

``` fatal: [demo.recordsansible.org]: FAILED! => {"changed": false, "msg": "No package matching 'python-pkg-resources' is available"} ``` python-pkg-resources is likely a python2 package that has since been removed: https://github.com/ansible-community/ara-collection/blob/b32446420239b8e55280f9d670f108ea6bf56660/roles/ara_api/vars/Ubuntu.yaml#L26 The ``python3-pkg-resources`` package...

``` fatal: [demo.recordsansible.org]: FAILED! => {"changed": false, "msg": "Unsupported parameters for (ansible.legacy.command) module: warn. Supported parameters include: _raw_params, _uses_shell, argv, chdir, creates, executable, removes, stdin, stdin_add_newline, strip_empty_ends."} ``` It looks...

selinux policies for gunicorn do not work as intended

1

We have the mechanism to deploy and install a custom selinux policy (with a [PR to improve it](https://github.com/ansible-community/ara-collection/pull/52)) to allow gunicorn to run from a virtualenv and write to the...

See:  The [releases notes](https://ara.readthedocs.io/en/latest/changelog-release-notes.html#id1) say: ``` - There have been fixes to logging which requires changes to the server's settings.yaml or LOGGING configuration. (#367) A warning...

Authentication for the API and reporting interface can be managed by [django](https://ara.readthedocs.io/en/latest/api-security.html#authentication-via-django) or a frontend server like [apache or nginx with a .htpasswd](https://ara.readthedocs.io/en/latest/api-security.html#htpasswd-with-nginx-or-apache2-httpd). The current implementation for nginx hardcodes it...