dm restrict audit: Run ts-depriv-audit-qemu

Add the new steps to jobs where the `recipe_dmrestrict' runvars is
set, and set that flag on the relevant job.

We introduce the new recipe-flag proc in sg-run-job to make this
more convenient.

Signed-off-by: Ian Jackson <Ian.Jackson@eu.citrix.com>

diff --git a/make-flight b/make-flight
index ebc9156d79ac1ef5a30ae95d72b8fcc4f5780169..4e2d464f517b9ef3223ff4efd5efef40816b571f 100755 (executable)
--- a/make-flight
+++ b/make-flight
@@ -452,6 +452,7 @@ do_hvm_debian_tests() {
     if $dmrestrict; then
       do_hvm_debian_test_one dmrestrict xl seabios false '' -dmrestrict '
                            debianhvm_dmrestrict=true
+                           recipe_dmrestrict=true
                            recipe_nomigrate=true
                            '
     fi

diff --git a/sg-run-job b/sg-run-job
index 965e55d195f0343f5f89bc44c5e349f8929e2d8b..71b5b828f2457d70a3882739898154d0adda09c1 100755 (executable)
--- a/sg-run-job
+++ b/sg-run-job
@@ -617,6 +617,14 @@ proc test-guest {g} {
     # guest is expected to be running, and ends up stopped
     test-guest-migr $g
     test-guest-nomigr $g
+    test-guest-dmrestrict $g
+}
+
+proc test-guest-dmrestrict {g} {
+    # guest is expected to be stopped, and is left stopped
+    if {![recipe-flag dmrestrict]} return
+    run-ts . = ts-depriv-audit-qemu create + host $g
+    run-ts . =.audited ts-guest-stop + host $g
 }
 
 proc test-guest-nomigr {g} {