Emir Beganovic
bb1ad28887
actions/checkout v5.0.0 -> v7.0.1 actions/upload-artifact v6.0.0 -> v7.0.2 actions/download-artifact v4.3.0 -> v8.0.2 docker/setup-buildx-action v4.3.0 -> v4.4.1 Each stays pinned to a commit, with the version in its comment. From the release notes, what the new majors change and why none of it touches these workflows: download-artifact v5 moved the path of an artifact fetched by ID, and ours is fetched by name; v8 fails on a checksum mismatch where v4 said nothing, which is what a publish job wants. checkout v7 refuses a fork's code under pull_request_target and workflow_run, and the one workflow_run here checks nothing out. The Node 24 releases need runner 2.327.1; ours run 2.337.0. Pinned actions do not update themselves, so .github/dependabot.yml asks for one grouped pull request a week.
63 lines
2.6 KiB
YAML
63 lines
2.6 KiB
YAML
name: Unit tests
|
|
|
|
# The fast, VM-free tests under test/unit/: cidata autoinstall loading and the
|
|
# orchestrator's phases. Seconds per run, no ISO build; the install test
|
|
# covers the rest.
|
|
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches: [quattro]
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
unit:
|
|
runs-on: ubuntu-24.04
|
|
timeout-minutes: 10
|
|
steps:
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
|
|
# The tests run where the code they cover runs: on Arch, the same as
|
|
# the live ISO and an Omarchy workstation. The container boots systemd
|
|
# because the keyboard tests ask the real localectl for its keymaps, and
|
|
# the tests run as an ordinary user because some of them check what
|
|
# happens when a file cannot be written.
|
|
#
|
|
# A privileged container shares the host's consoles and devices, so the
|
|
# units that would claim them are masked before systemd starts: without
|
|
# that, its getty, udev and vconsole setup take over the host's.
|
|
- name: Run ./test/all in an Arch container
|
|
run: |
|
|
docker run -d --name unit --privileged --cgroupns=host \
|
|
-v /sys/fs/cgroup:/sys/fs/cgroup:rw --tmpfs /run --tmpfs /tmp:exec \
|
|
-v "$PWD:/src:ro" archlinux:latest bash -c '
|
|
systemctl mask getty.target console-getty.service \
|
|
systemd-udev-trigger.service systemd-udevd.service \
|
|
systemd-vconsole-setup.service
|
|
exec /usr/lib/systemd/systemd
|
|
'
|
|
docker exec unit bash -euo pipefail -c '
|
|
for i in $(seq 1 60); do
|
|
state=$(systemctl is-system-running 2>/dev/null || true)
|
|
case $state in running | degraded) break ;; esac
|
|
sleep 1
|
|
done
|
|
echo "systemd: $state"
|
|
# From our own Arch mirror first, and a second and third try: a
|
|
# mirror that drops one file must not fail the tests.
|
|
sed -i "1i Server = https://mirror.omarchy.org/\$repo/os/\$arch" /etc/pacman.d/mirrorlist
|
|
for attempt in 1 2 3; do
|
|
pacman -Syu --noconfirm --needed python parted diffutils jq >/dev/null && break
|
|
[ "$attempt" -lt 3 ] || { echo "::error::the test container could not install its tools"; exit 1; }
|
|
sleep 15
|
|
done
|
|
useradd -m tester
|
|
cp -r /src /home/tester/omarchy-iso
|
|
chown -R tester /home/tester/omarchy-iso
|
|
cd /home/tester/omarchy-iso
|
|
setpriv --reuid=tester --regid=tester --init-groups ./test/all
|
|
'
|