[tests/selinux] pr775-checkpolicy-revdeps: Reverse-dependency checkpolicy test plan

[Petr Lautrbach <lautrbach@redhat.com>]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : fd4fb0247df1a4b86c87ae2eb00a036df12bbbf3
            Author : Petr Lautrbach <lautrbach@redhat.com>
            Date   : 2026-09-11T14:43:48+02:00
            Stats  : +31/-0 in 1 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/fd4fb0247df1a4b86c87ae2eb00a036df12bbbf3?branch=pr775-checkpolicy-revdeps

            Log:
            Reverse-dependency checkpolicy test plan

Rebuilds checkpolicy package from its source RPM and installs it to the system.
This is necessary for checkpolicy reverse dependecy testing - checkpolicy statically links
libsepol-static and so we need to rebuild checkpolicy and run checkpolicy tests every time
libsepol is updated.

---
diff --git a/plans/revdeps-checkpolicy.fmf b/plans/revdeps-checkpolicy.fmf
new file mode 100644
index 0000000..e1a33e2
--- /dev/null
+++ b/plans/revdeps-checkpolicy.fmf
@@ -0,0 +1,31 @@
+summary: Reverse-dependency checkpolicy tests
+
+description: |+
+    Rebuilds checkpolicy package from its source RPM and installs it to the system.
+    This is necessary for checkpolicy reverse dependecy testing - checkpolicy statically links
+    libsepol-static and so we need to rebuild checkpolicy and run checkpolicy tests every time
+    libsepol is updated.
+
+environment:
+    INSTALL_CHECKPOLICY_RPM: true
+prepare:
+    - name: Install epel-release
+      how: shell
+      script: bash -c "dnf -y install epel-release || :"
+      order: 10
+    - name: Enable CRB repo
+      how: shell
+      script: bash -c "crb enable || :"
+      order: 10
+    
+discover:
+    - name: rebuild and install checkpolicy
+      how: fmf
+      test:
+        - /libsepol/rebuild-and-install-checkpolicy
+    - name: Run checkpolicy tests
+      how: fmf
+      filter: "component: checkpolicy & tag: -tf_broken"
+      
+execute:
+    how: tmt