Disable SELinux for integration testing on RHEL only

We currently don't fully support SELinux so we need to disable it for now until
we get it fixed properly. Make this a variable so that we can change dynamically
later if we need to for testing purposes.

Temporarily disable voting until we get things working properly again.

Change-Id: Ib6dec3f6ea1cbc13d9c82d372b4f65f689adc0bc
Signed-off-by: Lance Albertson <lance@osuosl.org>

.zuul.yaml

@@ -6,6 +6,7 @@
     pre-run: playbooks/pre-delivery.yaml
     run: playbooks/delivery.yaml
     timeout: 1800
+    voting: false # TODO(ramereth): Remove after this gets merged
 
 - job:
     name: openstack-chef-integration-ubuntu
@@ -17,6 +18,7 @@
     run: playbooks/integration.yaml
     post-run: playbooks/post.yaml
     timeout: 5400
+    voting: false # TODO(ramereth): Remove after this gets merged
 
 - job:
     name: openstack-chef-minimal-integration-ubuntu
@@ -28,6 +30,7 @@
     run: playbooks/minimal.yaml
     post-run: playbooks/post.yaml
     timeout: 5400
+    voting: false # TODO(ramereth): Remove after this gets merged
 
 - job:
     name: openstack-chef15-minimal-integration-ubuntu
@@ -45,6 +48,7 @@
     run: playbooks/integration.yaml
     post-run: playbooks/post.yaml
     timeout: 5400
+    voting: false # TODO(ramereth): Remove after this gets merged
 
 - job:
     name: openstack-chef-minimal-integration-centos
@@ -56,6 +60,7 @@
     run: playbooks/minimal.yaml
     post-run: playbooks/post.yaml
     timeout: 5400
+    voting: false # TODO(ramereth): Remove after this gets merged
 
 - job:
     name: openstack-chef15-minimal-integration-centos

Rakefile

@@ -110,6 +110,7 @@ def _run_env_queries
   when 'centos7'
     _run_commands(
       'basic rhel env queries', {
+        '/sbin/getenforce' => [''],
         '/usr/sbin/ip' => ['addr'],
         'cat' => ['/etc/yum.repos.d/*'],
       },

bindep.txt

@@ -3,3 +3,4 @@ liblzma-dev [platform:dpkg]
 xz-devel [platform:rpm]
 zlib1g-dev [platform:dpkg]
 zlib-devel [platform:rpm]
+libselinux-utils [platform:rpm]

playbooks/roles/install-chef/defaults/main.yaml

@@ -1,2 +1,3 @@
 openstack_chef_client_type: chef
 openstack_chef_client_version: 16
+openstack_selinux_setenforce: 0

playbooks/roles/install-chef/tasks/main.yaml

@@ -17,3 +17,7 @@
 - name: Install cookstyle
   shell: /opt/chef/embedded/bin/gem install -N cookstyle
   become: yes
+- name: Setup SELinux
+  shell: "setenforce {{ openstack_selinux_setenforce }}"
+  become: yes
+  when: ansible_distribution == "CentOS"