From 33d7607e61317633e9bf5acd92cdd2f983eb73fd Mon Sep 17 00:00:00 2001
From: "Eric D. Helms" <ericdhelms@gmail.com>
Date: Mon, 13 May 2024 14:39:53 -0400
Subject: [PATCH] Add ipv6 disable check

(cherry picked from commit e19db7795935de12fe10239bd9aef40891971418)
---
 definitions/checks/check_ipv6_disable.rb      | 23 +++++++++++++++++++
 .../scenarios/upgrade_to_capsule_6_15.rb      |  1 +
 .../scenarios/upgrade_to_capsule_6_15_z.rb    |  1 +
 .../scenarios/upgrade_to_satellite_6_15.rb    |  1 +
 .../scenarios/upgrade_to_satellite_6_15_z.rb  |  1 +
 .../checks/check_ipv6_disable_test.rb         | 21 +++++++++++++++++
 6 files changed, 48 insertions(+)
 create mode 100644 definitions/checks/check_ipv6_disable.rb
 create mode 100644 test/definitions/checks/check_ipv6_disable_test.rb

diff --git a/definitions/checks/check_ipv6_disable.rb b/definitions/checks/check_ipv6_disable.rb
new file mode 100644
index 000000000..ca6064f37
--- /dev/null
+++ b/definitions/checks/check_ipv6_disable.rb
@@ -0,0 +1,23 @@
+class Checks::CheckIpv6Disable < ForemanMaintain::Check
+  metadata do
+    label :check_ipv6_disable
+    description 'Check if ipv6.disable=1 is set at kernel level'
+  end
+
+  def run
+    cmdline_file = File.read('/proc/cmdline')
+
+    assert(!cmdline_file.include?("ipv6.disable=1"), error_message)
+  end
+
+  def error_message
+    base = "\nThe kernel contains ipv6.disable=1 which is known to break installation and upgrade"\
+           ", remove and reboot before continuining."
+
+    if feature(:instance).downstream
+      base += " See https://access.redhat.com/solutions/5045841 for more details."
+    end
+
+    base
+  end
+end
diff --git a/definitions/scenarios/upgrade_to_capsule_6_15.rb b/definitions/scenarios/upgrade_to_capsule_6_15.rb
index faa31f95a..b8e5d1788 100644
--- a/definitions/scenarios/upgrade_to_capsule_6_15.rb
+++ b/definitions/scenarios/upgrade_to_capsule_6_15.rb
@@ -27,6 +27,7 @@ class PreUpgradeCheck < Abstract
     def compose
       add_steps(find_checks(:default))
       add_steps(find_checks(:pre_upgrade))
+      add_step(Checks::CheckIpv6Disable)
       add_step(Checks::Repositories::Validate.new(:version => '6.15'))
     end
   end
diff --git a/definitions/scenarios/upgrade_to_capsule_6_15_z.rb b/definitions/scenarios/upgrade_to_capsule_6_15_z.rb
index 49d51cece..f8b8703f9 100644
--- a/definitions/scenarios/upgrade_to_capsule_6_15_z.rb
+++ b/definitions/scenarios/upgrade_to_capsule_6_15_z.rb
@@ -27,6 +27,7 @@ class PreUpgradeCheck < Abstract
     def compose
       add_steps(find_checks(:default))
       add_steps(find_checks(:pre_upgrade))
+      add_step(Checks::CheckIpv6Disable)
       add_step(Checks::Repositories::Validate.new(:version => '6.15'))
     end
   end
diff --git a/definitions/scenarios/upgrade_to_satellite_6_15.rb b/definitions/scenarios/upgrade_to_satellite_6_15.rb
index 62f37d5d3..8c1779179 100644
--- a/definitions/scenarios/upgrade_to_satellite_6_15.rb
+++ b/definitions/scenarios/upgrade_to_satellite_6_15.rb
@@ -27,6 +27,7 @@ class PreUpgradeCheck < Abstract
     def compose
       add_steps(find_checks(:default))
       add_steps(find_checks(:pre_upgrade))
+      add_step(Checks::CheckIpv6Disable)
       add_step(Checks::Repositories::Validate.new(:version => '6.15'))
     end
   end
diff --git a/definitions/scenarios/upgrade_to_satellite_6_15_z.rb b/definitions/scenarios/upgrade_to_satellite_6_15_z.rb
index 3c74e94be..80e673967 100644
--- a/definitions/scenarios/upgrade_to_satellite_6_15_z.rb
+++ b/definitions/scenarios/upgrade_to_satellite_6_15_z.rb
@@ -27,6 +27,7 @@ class PreUpgradeCheck < Abstract
     def compose
       add_steps(find_checks(:default))
       add_steps(find_checks(:pre_upgrade))
+      add_step(Checks::CheckIpv6Disable)
       add_step(Checks::Repositories::Validate.new(:version => '6.15'))
     end
   end
diff --git a/test/definitions/checks/check_ipv6_disable_test.rb b/test/definitions/checks/check_ipv6_disable_test.rb
new file mode 100644
index 000000000..aab76acc1
--- /dev/null
+++ b/test/definitions/checks/check_ipv6_disable_test.rb
@@ -0,0 +1,21 @@
+require 'test_helper'
+
+describe Checks::CheckIpv6Disable do
+  include DefinitionsTestHelper
+
+  subject { Checks::CheckIpv6Disable.new }
+
+  it 'throws an error message when ipv6.disable=1 is set' do
+    File.expects(:read).with('/proc/cmdline').returns('ipv6.disable=1')
+    result = run_step(subject)
+
+    assert result.fail?
+  end
+
+  it 'success when ipv6.disable=1 is not set' do
+    File.expects(:read).with('/proc/cmdline').returns('test.net=0')
+    result = run_step(subject)
+
+    assert result.success?
+  end
+end