Guide Cloud Image Certification Policy - Red Hat

1 Red Hat Certified Cloud and ServiceProvider Certification Hat Certified Cloud and Service ProviderCertification Policy GuideFor Use with Red Hat Certified Cloud and Service Provider Updated: 2019-10-18 Red Hat Certified Cloud and Service Provider Certification Red HatCertified Cloud and Service Provider Certification Policy GuideFor Use with Red Hat Certified Cloud and Service Provider NoticeCopyright 2019 Red Hat, text of and illustrations in this document are licensed by Red Hat under a Creative CommonsAttribution Share Alike Unported license ("CC-BY-SA"). An explanation of CC-BY-SA isavailable In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you mustprovide the URL for the original Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert,Section 4d of CC-BY-SA to the fullest extent permitted by applicable Hat, Red Hat Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift,Fedora, the Infinity logo, and RHCE are trademarks of Red Hat, Inc.

2 , registered in the United Statesand other is the registered trademark of Linus Torvalds in the United States and other is a registered trademark of Oracle and/or its is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United Statesand/or other is a registered trademark of MySQL AB in the United States, the European Union andother is an official trademark of Joyent. Red Hat is not formally related to or endorsed by theofficial Joyent open source or commercial OpenStack Word Mark and OpenStack logo are either registered trademarks/service marksor trademarks/service marks of the OpenStack Foundation, in the United States and othercountries and are used with the OpenStack Foundation's permission.

3 We are not affiliated with,endorsed or sponsored by the OpenStack Foundation, or the OpenStack other trademarks are the property of their respective document describes the technical and operational Certification requirements for CCSP partners who want to offer Infrastructure-as-a-Service (IaaS) based on Red Hat Enterprise ..Table of ContentsCHAPTER 1. USING Certification TO CREATE VALUE FOR OUR JOINT TEST SUITE VERSIONSCHAPTER 2. RED HAT Certification SELF RED HAT Certification SELF CHECK (RHCERT/SELFCHECK) SOSREPORT (SYSTEM REPORT)CHAPTER 3. SUPPORTABILITY LOG KERNEL UNSUPPORTED FILESYSTEM INSTALLED SOFTWARE SOFTWARE SOFTWARE MODULESCHAPTER 4.

4 Image Image CONFIGURATION DEFAULT SYSTEM NETWORK DEFAULT OS SYSTEM SUBSCRIPTION SERVICESCHAPTER 5. security security PRACTICES PASSWORD RPM SELINUX ENFORCINGCHAPTER 6. FINDING MORE REFERENCES333344455555666778899991010101 2121212121414 Table of Contents1 Red Hat Certified Cloud and Service Provider Certification Red Hat Certified Cloud and Service Provider Certification Policy Guide2 CHAPTER 1. AUDIENCEThis document describes the technical and operational Certification requirements as implemented forCCSP partners who want to offer Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), ora managed service based on Red Hat Enterprise Linux.

5 The Certification tools and methodologies caterto Cloud application images built on Red Hat Enterprise USING Certification TO CREATE VALUE FOR OUR JOINTCUSTOMERSAs a Certified Cloud and Service Provider (CCSP), you are required to certify images that you publish ina catalog. The Certification process includes a series of tests that provide your Red Hat customersassurance that they will have a consistent experience across Cloud providers, that the customer sexperience comes with the highest level of support, and that good security practices are available to Cloud Certification test suite (redhat- Certification - Cloud ) includes three tests (supportable,configuration, security ), each with a series of subtests and checks, which are explained below.

6 For moreinformation on running the tests, see CCSP Certification Workflow from a singular run with all three of the Cloud tests and the test suite self check test(rhcert/selfcheck) must be submitted to Red Hat for new certifications and for of the Cloud Certification subtests provide an immediate return status (Pass/Fail); however, somesubtests may require detailed review by Red Hat to confirm success. Such tests are marked with REVIEW status in the Red Hat Certification tests may also identify a potential issue and return a WARN status. This status indicates that bestpractices have not been followed. Tests marked with the WARN status warrant attention or action(s)but do not prevent a Certification from succeeding.

7 Partners are recommended to review the output ofsuch tests and perform appropriate action(s) based on the information contained within the TEST SUITE VERSIONSP artners must install the latest version of the Certification tooling and use the latest workflow for thecertification process. After a new version of the Certification tooling is released, Red Hat supports theprevious tooling and workflow for a period of 90 days post the the end of the 90 days period, test logs/results generated using the previous version(s) areautomatically rejected and partners are expected to regenerate the test logs/results using the latesttooling and latest version of the Certification tooling and workflow is available (by default) via Red HatSubscription Management and documented in the CCSP Workflow 1.

8 INTRODUCTION3 CHAPTER 2. RED HAT Certification SELF RED HAT Certification SELF CHECK (RHCERT/SELFCHECK)The Red Hat Certification Self Check test also known as rhcert/selfcheck confirms that all the softwarepackages required in the Certification process are installed and that they have not been altered. Thisensures that the test environment is ready for the Certification process and that all the certificationsoftware packages are Certification packages must not be modified for Certification testing or for any CriteriaThe test environment includes all the packages required in the Certification process and the packageshave not been SOSREPORT (SYSTEM REPORT)

9 The sosreport test, also known as Cloud /sosreport, captures the basic Hat uses a tool called sos to collect the configuration and diagnostic information from a RHEL system, and to assist customers in troubleshooting their system and following recommended system report subtest ensures that the sos tool functions as expected on the Image /system andcaptures a basic sosreport. For more information about sosreports, refer CriteriaA basic sosreport can be captured on the SOSR eport archives the output and can be used as a reference while debuggingcertification or any other system Hat Certified Cloud and Service Provider Certification Red Hat Certified Cloud and Service Provider Certification Policy Guide4 CHAPTER 3.

10 SUPPORTABILITY TESTSThe Supportability tests, also known as Cloud /supportable, ensure that the Image is supportable by RedHat. The test confirms that the Image consists of Red Hat kernel and user space software, is run in a RedHat supportable environment, and includes access to Red Hat updates and Cloud /supportable tests include the following LOG VERSIONSThe Log versions subtest verifies the version of Red Hat Enterprise Linux (RHEL) installed on the KERNELThe Kernel subtest confirms the kernel that the Image is running is from Red Hat, is appropriate andsupported for the version of RHEL undergoing Certification , and has not been modified. The kernelversion may be the original General Availability (GA) version or any subsequent kernel errata releasedfor the RHEL major + minor release.