Add fix for CI break - #114
Merged
Merged
Conversation
Collaborator
Author
Collaborator
|
@alicefr still something is failing in tests |
alicefr
force-pushed
the
ci-fix
branch
4 times, most recently
from
August 14, 2026 12:01
be5712a to
95faeba
Compare
alicefr
force-pushed
the
ci-fix
branch
6 times, most recently
from
August 17, 2026 08:59
7a3e3bb to
463dbe2
Compare
Use the user Podman socket instead of the system socket. Write container config to ~/.config/containers/ and set CONTAINER_HOST via GITHUB_ENV so all integration test steps pick it up without sudo. Assisted-by: AI Signed-off-by: Alice Frosi <afrosi@redhat.com>
The verify container needs SYS_ADMIN, /dev/fuse, and disabled SELinux to run podman inside a rootless container, matching the populator container configuration. Assisted-by: AI Signed-off-by: Alice Frosi <afrosi@redhat.com>
Disable the AppArmor service and run aa-teardown before and after apt-get installs, since packages like passt reload their profiles in enforce mode in postinst scripts. Also set security_driver = "none" in qemu.conf so that libvirt's QEMU driver does not load per-VM AppArmor profiles when starting domains. Assisted-by: AI Signed-off-by: Alice Frosi <afrosi@redhat.com>
Collect audit log and full system journal on failure. Fix the script to work with rootless Podman by removing sudo from podman commands. Use direct redirects instead of sudo tee for host logs. Assisted-by: AI Signed-off-by: Alice Frosi <afrosi@redhat.com>
alicefr
force-pushed
the
ci-fix
branch
2 times, most recently
from
August 17, 2026 11:58
3d9be03 to
c8ced10
Compare
Collaborator
Author
|
@HarshwardhanPatil07 can you please take a look now that the tests are passing |
Collaborator
Author
|
@HarshwardhanPatil07 the test-container-image seems stuck, but it isn't that important. I'd like to merge this asap in this we can unblock the bootc-operator and release the correct node images |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The fix includes the disablement of Apparmor after the package installation since it might reload the profile. There is a bug in the apparmor profile for passt which a permission denied for accessing the
/proc/sys/net/ipv4/ip_local_port_range.Additionally. the refactoring for the CI job of #98 wrongly execute the test as root. This PR reintroduce the rootless execution of the integration tests