mirror of
https://github.com/SCST-project/scst.git
synced 2026-10-22 14:12:33 +00:00
Gleb Chesnokov
555826aaa5
Build kernel-matched images on GitHub-hosted runners and execute tests under an external QEMU supervisor. Run KUnit and Ginkgo in independent jobs that each build and test SCST. Keep guest images local to each job and upload build logs and test reports. Capture serial logs outside the guests, require complete matching reports, and bound guest execution independently of kernel health. Exercise guest panic and timeout handling before KUnit. Give Ginkgo an isolated iSCSI peer and disposable block storage. Print native test output and summaries in the job log. On failure, include supervisor errors, kernel diagnostics and bounded serial tails while retaining complete artifacts and the original test command exit status. Select basic management and smoke SCSI/I/O tests on both transports for pull requests. Run every Ginkgo spec after pushes to master and on manual runs. Pass the label filter into the guest and require both transport reports to confirm the requested selection.
49 lines
2.0 KiB
Bash
49 lines
2.0 KiB
Bash
#!/usr/bin/env bash
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
# Build a bootable, version-matched test image without booting or loading SCST.
|
|
set -euo pipefail
|
|
if [[ $# != 2 || ! $1 =~ ^(kunit|ginkgo)$ ]]; then
|
|
echo "Usage: $0 kunit|ginkgo OUTPUT_DIRECTORY" >&2
|
|
exit 2
|
|
fi
|
|
suite=$1
|
|
out=$(realpath -m "$2")
|
|
mkdir "$out"
|
|
root=$(git rev-parse --show-toplevel)
|
|
commit=$(git rev-parse HEAD)
|
|
# shellcheck source=kernel.env
|
|
source "$root/scripts/ci/kernel.env"
|
|
work=$(mktemp -d)
|
|
cleanup() {
|
|
rm -rf -- "$work"
|
|
}
|
|
trap cleanup EXIT
|
|
mkdir "$work/source" "$work/root"
|
|
# A committed snapshot excludes local profiles, generated files and Git credentials.
|
|
git -C "$root" archive "$commit" | tar -x -C "$work/source"
|
|
docker build --progress=plain \
|
|
--build-arg "KERNEL_BUILD=$KERNEL_BUILD" --build-arg "SUITE=$suite" \
|
|
--build-arg "SOURCE_COMMIT=$commit" --output "type=tar,dest=$work/rootfs.tar" \
|
|
-f "$work/source/scripts/ci/Dockerfile" "$work/source" 2>&1 | tee "$out/image-build.log"
|
|
# Preserve guest owners without host root, mounts or loop devices. Extraction
|
|
# and mkfs must share one fakeroot session so ownership metadata survives.
|
|
fakeroot -- bash -euo pipefail /dev/stdin "$work" "$out" <<'SH'
|
|
tar -xpf "$1/rootfs.tar" -C "$1/root"
|
|
rm "$1/rootfs.tar"
|
|
chown 0:0 "$1/root"
|
|
# Fedora ships these with mode 000. fakeroot preserves metadata but cannot
|
|
# bypass host DAC when mkfs reads file contents; keep them root-only.
|
|
for file in "$1/root/etc"/{shadow,gshadow}{,-}; do
|
|
if [[ -f $file ]]; then chmod 600 "$file"; fi
|
|
done
|
|
cp -a "$1/root/opt/ci-build/." "$2/"
|
|
cp "$1/root/boot/ci-vmlinuz" "$2/vmlinuz"
|
|
cp "$1/root/boot/ci-initramfs" "$2/initramfs"
|
|
# Otherwise systemd can mistake the VM for a container and skip udev.
|
|
rm -f "$1/root/.dockerenv" "$1/root/run/.containerenv"
|
|
size=$(du -sm "$1/root" | cut -f1)
|
|
truncate -s "$((size + 2048))M" "$2/rootfs.img"
|
|
mkfs.ext4 -q -F -d "$1/root" "$2/rootfs.img"
|
|
SH
|
|
(cd "$out" && sha256sum vmlinuz initramfs rootfs.img image.json > SHA256SUMS)
|