From 56576fe5cc0e4cca4c42adef9f7c12dbe39f0c6a Mon Sep 17 00:00:00 2001
From: Xiaofeng Wang <henrywangxf@me.com>
Date: Mon, 1 Dec 2025 20:23:12 +0800
Subject: [PATCH] test: Debug reboot issue in C10S

Signed-off-by: Xiaofeng Wang <henrywangxf@me.com>
---
 tmt/tests/booted/bootc_testlib.nu | 30 +++++++++++++++++++++++++-----
 1 file changed, 25 insertions(+), 5 deletions(-)

diff --git a/tmt/tests/booted/bootc_testlib.nu b/tmt/tests/booted/bootc_testlib.nu
index 5f15586ab..0a449e3d0 100644
--- a/tmt/tests/booted/bootc_testlib.nu
+++ b/tmt/tests/booted/bootc_testlib.nu
@@ -4,11 +4,31 @@
 # that seems to have appeared in C10S
 # TODO diagnose and fill in here
 export def reboot [] {
-    # Sometimes systemd daemons are still running old binaries and response "Access denied" when send reboot request
-    # Force a full sync before reboot
-    sync
-    # Allow more delay for bootc to settle
-    sleep 30sec
+    # Confirm root cause
+    # loginctl show-session $(loginctl | awk '/tty/ {print $1}')
+    loginctl
+    busctl call org.freedesktop.login1 /org/freedesktop/login1 org.freedesktop.login1.Manager CanReboot
+    journalctl -u systemd-logind -n200 --no-pager
+    journalctl -b -n200 | sed -n '1,200p'
+    journalctl -k -n200 --no-pager
+    ausearch -m USER_CMD -ts recent 2>/dev/null or true
+    ausearch -m avc,USER_AVC -ts recent 2>/dev/null or true
+    journalctl -b | grep -i "denied\|capability\|reboot\|sys_reboot"
+    capsh --print 2>/dev/null or true
+    # Enable polkit permissions for test user (root or non-root)
+    # to allow logind reboot non-interactively
+    sudo sh -c 'cat >/etc/polkit-1/rules.d/49-allow-reboot.rules <<EOF
+polkit.addRule(function(action, subject) {
+    if (action.id == "org.freedesktop.login1.reboot" ||
+        action.id == "org.freedesktop.login1.reboot-multiple-sessions" ||
+        action.id == "org.freedesktop.login1.power-off") {
+
+        if (subject.user == "root" || subject.isInGroup("wheel")) {
+            return polkit.Result.YES;
+        }
+    }
+});
+EOF'
 
     tmt-reboot
 }