josh
0a5e5d0b39
v24.3 crashed in cp_version() during the copy-package-manager-trees step because its sandbox needs bubblewrap (not present in the runner apt list), and cp --version returned empty output inside the broken sandbox. Installing bubblewrap and bumping to v25.3 which has tighter sandbox fallback behavior. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
68 lines
2.1 KiB
YAML
68 lines
2.1 KiB
YAML
name: E2E (manual)
|
|
|
|
# The E2E job builds the live image (mkosi, requires apt package
|
|
# updates) and boots a QEMU VM against a running orchestrator. It's
|
|
# slow and needs a Linux runner with nested virtualization + loop
|
|
# devices, so it runs only on workflow_dispatch against the privileged
|
|
# self-hosted runner.
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
ref:
|
|
description: "Git ref to test (default: main)"
|
|
required: false
|
|
default: main
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
e2e:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 45
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ inputs.ref }}
|
|
|
|
- name: Set up Go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version: "1.26.x"
|
|
cache: false
|
|
|
|
- name: Install live-image build dependencies
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y --no-install-recommends \
|
|
debootstrap squashfs-tools \
|
|
systemd-ukify systemd-boot kmod bubblewrap \
|
|
debian-archive-keyring python3-pip git zstd \
|
|
qemu-system-x86 qemu-utils \
|
|
dnsmasq iperf3 ipxe-qemu
|
|
# See release.yml for rationale — Ubuntu's apt mkosi is too old
|
|
# to handle bookworm's non-free-firmware component correctly.
|
|
sudo pip install --break-system-packages \
|
|
"git+https://github.com/systemd/mkosi.git@v25.3"
|
|
|
|
- name: Install templ
|
|
run: go install github.com/a-h/templ/cmd/templ@v0.3.1001
|
|
|
|
- name: Build orchestrator + agent
|
|
run: |
|
|
templ generate
|
|
make orchestrator-linux agent-linux
|
|
|
|
- name: Build live image
|
|
run: make live-image
|
|
|
|
- name: Run E2E suite
|
|
# The E2E test expects a registered host + queued run; in CI we
|
|
# don't have an operator, so it's skipped unless VETTING_E2E_RUN_ID
|
|
# is supplied. When someone stands up the orchestrator for a
|
|
# dispatch, they can set it via a workflow_dispatch secret.
|
|
env:
|
|
VETTING_E2E_RUN_ID: ${{ vars.VETTING_E2E_RUN_ID }}
|
|
run: sudo -E go test -tags=e2e -count=1 -v ./test/e2e/...
|