Run e2e tests in CI and cover sandbox isolation #8

Merged

mathieu merged 7 commits from lain/e2e-in-ci-20261102152451 into main 2026-11-02 14:43:02 +00:00

Conversation 0 Commits 7 Files changed 4 +78 -5

Lain commented 2026-11-02 14:26:46 +00:00

Collaborator

Copy link

Adds unit tests for internal/podman, negative isolation checks to the dummy e2e agent (host env, host-only file), and a CI e2e job running make e2e with rootless podman as an unprivileged user.

Adds unit tests for internal/podman, negative isolation checks to the dummy e2e agent (host env, host-only file), and a CI e2e job running make e2e with rootless podman as an unprivileged user.

Lain added 1 commit 2026-11-02 14:26:46 +00:00

Run e2e tests in CI and cover sandbox isolation ... bc791ace14

- Add unit tests for podman.ImageExists and Command using a stub podman on PATH.
- Dummy agent now checks that host env vars and host-only files are not visible.
- Add an e2e CI job: rootless podman (vfs storage) as an unprivileged user, running make e2e.

Lain added 1 commit 2026-11-02 14:29:39 +00:00

Drop privileged container option from e2e CI job 7adaf97522

Lain added 1 commit 2026-11-02 14:31:56 +00:00

e2e CI: allow user namespaces for rootless podman 89000788d9

Lain added 1 commit 2026-11-02 14:34:25 +00:00

e2e CI: diagnose user namespace restrictions 4d91c58dd4

Lain added 2 commits 2026-11-02 14:36:26 +00:00

Revert "e2e CI: allow user namespaces for rootless podman" ... eaf6aa8e9e

This reverts commit 89000788d9.

Revert "e2e CI: diagnose user namespace restrictions" ... 0c350b6e74

This reverts commit 4d91c58dd4.

Lain added 1 commit 2026-11-02 14:37:58 +00:00

Drop e2e job from CI for now ... 6d31dc8c2a

The Docker-based runner blocks user namespaces, so rootless podman cannot run
the e2e tests there. Keep the e2e tests compiling via the vet step; run make e2e
manually or on a suitable runner later.

mathieu merged commit 96d55766a2 into main 2026-11-02 14:43:02 +00:00

mathieu deleted branch lain/e2e-in-ci-20261102152451 2026-11-02 14:43:03 +00:00

mathieu referenced this pull request from a commit 2026-11-02 14:43:03 +00:00

Run e2e tests in CI and cover sandbox isolation (#8)

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference

mathieu/dash!8

No description provided.