ci: add module storage test

Add test to verify modular policies can be successfully installed from a module storage. Signed-off-by: Christian Göttsche <[email protected]>
cgzones · Nov 10, 2024 · e5f843d · e5f843d
1 parent 7718b32
commit e5f843d
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/build-policy.yml b/.github/workflows/build-policy.yml
@@ -108,6 +108,15 @@ jobs:
       run: |
         make validate
 
+    - name: Test module storage
+      working-directory: ${{ inputs.path }}
+      shell: bash
+      if: ${{ matrix.monolithic == 'n' }}
+      run: |
+        mkdir -p /tmp/policy_root/var/lib/selinux/refpolicy
+        /usr/sbin/semodule --noreload --store mls --path /tmp/policy_root --verbose --install *.pp
+        /sbin/setfiles -c /tmp/policy_root/var/lib/selinux/refpolicy/policy/policy.* /tmp/policy_root/var/lib/selinux/refpolicy/contexts/files/file_contexts
+
     - name: Build docs
       working-directory: ${{ inputs.path }}
       shell: bash