[autobackport: sssd-2-10] ci: add TMT plan for passkey testing in PRCI

[sssd-bot]

This is an automatic backport of PR#8672 ci: add TMT plan for passkey testing in PRCI to branch sssd-2-10, created by @ikerexxe.

Caution

@ikerexxe The patches did not apply cleanly. It is necessary to resolve conflicts before merging this pull request. Commits that introduced conflict are marked with CONFLICT!.

You can push changes to this pull request

git remote add sssd-bot git@github.com:sssd-bot/sssd.git
git fetch sssd-bot refs/heads/SSSD-sssd-backport-pr8672-to-sssd-2-10
git checkout SSSD-sssd-backport-pr8672-to-sssd-2-10
git push sssd-bot SSSD-sssd-backport-pr8672-to-sssd-2-10 --force

---

Original commits
d54cf52 - tests: add TMT plan for passkey testing
210f50f - ci: add TMT passkey tests to packit workflow

Backported commits

• 3702348 - tests: add TMT plan for passkey testing
• 6aa7c75 - CONFLICT! ci: add TMT passkey tests to packit workflow

Conflicting Files Information (check for deleted and re-added files)

• CONFLICT! ci: add TMT passkey tests to packit workflow

On branch SSSD-sssd-backport-pr8672-to-sssd-2-10
You are currently cherry-picking commit 210f50f50.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   .packit.yaml

no changes added to commit (use "git add" and/or "git commit -a")

---

Original Pull Request Body

Summary

This PR introduces testing infrastructure for SSSD passkey functionality using TMT and testing farm. It is designed to automate verification across diverse environments and integrate directly into the existing Packit CI workflow.

• Integrates passkey tests with Packit CI workflow to run automatically on pull requests.
• Supports Fedora (all versions) and CentOS Stream 10.
• Support testing across multiple identity providers (IPA, LDAP, Samba) in containerized environments.

Changes Made

• Adds comprehensive TMT test plans in plans/passkey/.
• Configures Packit integration to trigger tests on pull requests.
• Implements automated provisioning logic for virtual machines and nested containers.
• Standardizes log collection and artifact storage.

Test Plan

The TMT plan follows an automated lifecycle for each PR:

1. Provisions virtual machines with sufficient resources for containerized testing.
2. Sets up sssd-ci-container environment.
3. Installs SSSD from PR-specific COPR builds.
4. Executes passkey functionality tests with detailed logging.
5. Collects test artifacts for debugging failed runs.

Constraints & known limitations

• Provisioning gap: local testing baseline is 16GB RAM to prevent memory swap. However, the Testing Farm provisions 4GB RAM. Expect swap activity during CI runs. While tests remain functional, performance may be degraded compared to local environments.
• Container mapping: To ensure low maintenance across fedora-all, containers inherit the distribution of the host VM (e.g., F44 VM hosts F44 containers). This approach links test stability to the target distribution’s stability. Rawhide environments may occasionally experience failures due to upstream shifts unrelated to SSSD.
• Environment: c10s tests are executed within a fedora-latest VM (currently Fedora 44). Attempting to run on a c10s VM host caused severe memory pressure that prevented SSSD from installing correctly within the containers.

Observability & debugging

If a test fails, kKey data can be found at: tmt-log and test artifacts directory: plans/passkey/data/artifacts/tests/

Final notes

• CentOS Stream 10 and fedora rawhide CI failures observed in this PR are unrelated to the changes proposed here. These failures stem from an environment-wide issue where sssd-ci-containers for these distributions have not been refreshed for approximately 10 days. These targets should stabilize as soon as the container images are updated.
• This PR only enables the execution of the passkey tests, it doesn't make the umockdev to vfido transformation. If you want to see the CI working with vfido update take a look at tests: migrate passkey tests from umockdev to vfido #8510.

[packit-as-a-service]

Failed to load packit config file:

Please correct data and retry.

For more info, please check out the documentation or contact the Packit team. You can also use our CLI command config validate or our pre-commit hooks for validation of the configuration.

[gemini-code-assist]

Code Review

This pull request introduces a new TMT test plan for SSSD passkey functionality and updates the Packit configuration to include automated testing, downstream proposals, and Koji builds. However, the reviewer identified critical issues that must be addressed: the .packit.yaml file contains unresolved git conflict markers that render the configuration invalid, and the test plan's repository cloning logic incorrectly defaults to the master branch instead of the appropriate stable branch for this backport.

[ikerexxe]

/packit test

[ikerexxe]

CI failures are unrelated

[jakub-vavra-cz]

LGTM.

[sssd-bot]

The pull request was accepted by @justin-stephenson with the following PR CI status:

---

🟢 CodeQL (success)
🟢 rpm-build:centos-stream-10-x86_64:upstream (success)
🟢 testing-farm:centos-stream-10-x86_64:upstream (success)
🔴 Build / make-distcheck (failure)
🟢 ci / prepare (success)
🔴 ci / system (centos-10) (failure)
🟢 Static code analysis / codeql (success)
🟢 Static code analysis / pre-commit (success)
🔴 Static code analysis / python-system-tests (failure)

---

There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.