e45b6ed4a5
The `virgin` stage installed the distribution build dependencies, and that layer now lives in its own repository: https://github.com/kevinveenbirkenbach/base-images. What remains here is one image per distribution that installs pkgmgr on top of it. `slim` goes with it: it was published for every distribution and pulled by nothing. scripts/build/base.sh stops pinning five upstream images and resolves ghcr.io/<owner>/base-<distro>:<tag> instead. Its env names follow the images repository rather than this one, so the code shows whose namespace that is. image.sh loses the --target axis, the -virgin/-slim tag suffixes with it, and passes --platform on push. Manjaro joins the set; os_resolver.sh already maps it onto arch, so it needs no dependency script of its own. The two virgin workflows pull the base image rather than building it. What they prove is unchanged: pkgmgr installs into an untouched container, as root and as an unprivileged user. test_distro_dependency_scripts_install_gpg_tools goes: it grepped the dependency scripts for gnupg, and those scripts are base-images' responsibility now, where the contract test runs `gpg --version` instead of reading a package list. Verified against locally built base images: the arch image builds FROM base-arch, and the full suite passes inside it - 405 unit, 90 integration and 49 e2e tests. Requires base-images to be published first; until then every build here fails at the pull. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
69 lines
1.9 KiB
YAML
69 lines
1.9 KiB
YAML
name: Test Virgin User
|
|
|
|
on:
|
|
workflow_call:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
test-virgin-user:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 45
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
distro: [arch, debian, ubuntu, fedora, centos]
|
|
env:
|
|
NIX_CONFIG: |
|
|
access-tokens = github.com=${{ secrets.GITHUB_TOKEN }}
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Show Docker version
|
|
run: docker version
|
|
|
|
- name: Pull base image (${{ matrix.distro }})
|
|
run: docker pull "ghcr.io/kevinveenbirkenbach/base-${{ matrix.distro }}:latest"
|
|
|
|
- name: Virgin ${{ matrix.distro }} pkgmgr test (user)
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
docker run --rm \
|
|
-v "$PWD":/opt/src/pkgmgr \
|
|
-e NIX_CONFIG="${NIX_CONFIG}" \
|
|
-w /opt/src/pkgmgr \
|
|
"ghcr.io/kevinveenbirkenbach/base-${{ matrix.distro }}:latest" \
|
|
bash -lc '
|
|
set -euo pipefail
|
|
|
|
make install
|
|
|
|
useradd -m dev
|
|
echo "dev ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/dev
|
|
chmod 0440 /etc/sudoers.d/dev
|
|
chown -R dev:dev /opt/src/pkgmgr
|
|
|
|
mkdir -p /nix/store /nix/var/nix /nix/var/log/nix /nix/var/nix/profiles
|
|
chown -R dev:dev /nix
|
|
chmod 0755 /nix
|
|
chmod 1777 /nix/store
|
|
sudo -H -u dev env \
|
|
HOME=/home/dev \
|
|
NIX_CONFIG="$NIX_CONFIG" \
|
|
PKGMGR_DISABLE_NIX_FLAKE_INSTALLER=1 \
|
|
bash -lc "
|
|
set -euo pipefail
|
|
cd /opt/src/pkgmgr
|
|
make setup-venv
|
|
. \"\$HOME/.venvs/pkgmgr/bin/activate\"
|
|
|
|
pkgmgr version pkgmgr
|
|
|
|
export NIX_REMOTE=local
|
|
nix run /opt/src/pkgmgr#pkgmgr -- version pkgmgr
|
|
"
|
|
'
|