Skip to content

Conversation

@teacup-on-rockingchair
Copy link
Contributor

Description:

  • Fixes related to dconf rules in SLE16 context

Rationale:

  • User ansible_enable_dconf_user_profile macro to set user gdm profile and use dconf_gdm_dirvariable for location
  • Add definition of dconf_gdm_dir variable for ubuntu
  • Use bash_enable_dconf_user_profile macro to set gdm user profile for sle
  • Add SLE16 CCE for gnome_gdm_disable_unattended_automatic_login rule
  • Use grep instead of sed for boolean checks

Review Hints:

  • @ComplianceAsCode/ubuntu-maintainers please review ubuntu platform-related changes

@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Used by openshift-ci bot. label Feb 6, 2026
@openshift-ci
Copy link

openshift-ci bot commented Feb 6, 2026

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@Mab879
Copy link
Member

Mab879 commented Feb 6, 2026

/packit build

@teacup-on-rockingchair teacup-on-rockingchair added this to the 0.1.80 milestone Feb 8, 2026
@teacup-on-rockingchair teacup-on-rockingchair added SLES SUSE Linux Enterprise Server product related. Ansible Ansible remediation update. OVAL OVAL update. Related to the systems assessments. Bash Bash remediation update. Update Template Issues or pull requests related to Templates updates. labels Feb 8, 2026
@teacup-on-rockingchair teacup-on-rockingchair marked this pull request as ready for review February 8, 2026 11:37
@openshift-ci openshift-ci bot removed the do-not-merge/work-in-progress Used by openshift-ci bot. label Feb 8, 2026
sssd: sssd-common
openssl-pkcs11: libpam-pkcs11

dconf_gdm_dir: "local.d"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This overrides the default setting gdm.d and could break a few rules which need to have settings defined in the gdm profile/database.

If I recall correctly, some settings need to be defined in gdm/gdm and others in user/local profile/database in Ubuntu:

  • dconf_gnome_banner_enabled (gdm/gdm)
  • dconf_gnome_disable_user_list (gdm/gdm)
  • dconf_gnome_disable_automount (user/local)
  • dconf_gnome_screensaver_idle_delay (user/local)

Can you check if that's the case on SLE? It might be better to use another variable, e.g. dconf_user_dir.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For now in SLE we use only one system account/profile, so thanks for the feedback. Will revert the patch for ubuntu platform, to behave as before.

@openshift-ci
Copy link

openshift-ci bot commented Feb 10, 2026

@teacup-on-rockingchair: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/4.12-images 4a2f31e link true /test 4.12-images
ci/prow/4.16-images 4a2f31e link true /test 4.16-images
ci/prow/4.19-images 4a2f31e link true /test 4.19-images
ci/prow/4.14-images 4a2f31e link true /test 4.14-images
ci/prow/4.20-images 4a2f31e link true /test 4.20-images
ci/prow/e2e-aws-openshift-platform-compliance 4a2f31e link true /test e2e-aws-openshift-platform-compliance
ci/prow/e2e-aws-openshift-node-compliance 4a2f31e link true /test e2e-aws-openshift-node-compliance
ci/prow/4.18-images 4a2f31e link true /test 4.18-images
ci/prow/4.17-images 4a2f31e link true /test 4.17-images
ci/prow/4.21-images 4a2f31e link true /test 4.21-images
ci/prow/images 4a2f31e link true /test images

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Ansible Ansible remediation update. Bash Bash remediation update. OVAL OVAL update. Related to the systems assessments. SLES SUSE Linux Enterprise Server product related. Update Template Issues or pull requests related to Templates updates.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants