Skip to content

test(e2e): add rootless podman nix vm lane - #2982

Open
elezar wants to merge 3 commits into
mainfrom
codex/2980-rootless-podman-nix-vms
Open

test(e2e): add rootless podman nix vm lane#2982
elezar wants to merge 3 commits into
mainfrom
codex/2980-rootless-podman-nix-vms

Conversation

@elezar

@elezar elezar commented Aug 27, 2026

Copy link
Copy Markdown
Member

Summary

Add a Nix test-guest based rootless Podman E2E lane for Ubuntu 26.04 so rootless Podman with pasta is validated in a disposable VM instead of directly on the CI runner.

Related Issue

Closes #2980

Changes

  • Add Ubuntu 26.04 to the Nix test-guest catalog and rename the existing Ubuntu image to ubuntu-24-04.
  • Add a self-contained podman-rootless test-guest configuration that installs Podman rootless helpers and verifies rootless mode with pasta.
  • Replace the deleted direct runner rootless Podman script with a Nix VM-backed e2e:podman:rootless task and workflow job.
  • Teach e2e/run.sh to consume explicit prebuilt host CLI, gateway, and sandbox binaries for CI while keeping source builds as the local fallback.
  • Add CI wiring to download the prebuilt sandbox artifact alongside existing CLI and gateway artifacts for the rootless VM job.

Testing

  • mise run pre-commit passes
  • Unit tests added/updated
  • E2E tests added/updated (if applicable)

Local VM validation was started through dev-openshell and progressed through VM/gateway setup into the Rust smoke sandbox lifecycle before cleanup; final CI validation is expected to prove the runner-specific VM path.

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)

@elezar
elezar requested review from a team, derekwaynecarr, mrunalp and sjenning as code owners August 27, 2026 10:10
@elezar
elezar force-pushed the codex/2980-rootless-podman-nix-vms branch from 1f162b0 to 0557f19 Compare August 27, 2026 10:16
@github-actions

Copy link
Copy Markdown

@elezar
elezar force-pushed the codex/2980-rootless-podman-nix-vms branch 2 times, most recently from 071a1fb to fc9dbab Compare August 27, 2026 10:21
@elezar elezar added the test:e2e Requires end-to-end coverage label Aug 27, 2026
@github-actions

Copy link
Copy Markdown

Label test:e2e applied for fc9dbab. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.

@elezar
elezar force-pushed the codex/2980-rootless-podman-nix-vms branch 2 times, most recently from b75ac63 to 5f76756 Compare August 27, 2026 11:28
elezar added 3 commits August 27, 2026 14:08
The probe was added with the original rootless Podman CI lane in #2119 while investigating #2075. The reported failure was later traced to mismatched gateway and sandbox versions rather than rootless Podman capability-set handling.

Since #2981 removed the direct rootless Podman job, this probe no longer has a caller and does not represent active coverage.

Signed-off-by: Evan Lezar <elezar@nvidia.com>
Signed-off-by: Evan Lezar <elezar@nvidia.com>
Signed-off-by: Evan Lezar <elezar@nvidia.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

test:e2e Requires end-to-end coverage

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ci: re-add rootless Podman e2e using Nix VMs

1 participant