From 2618a42dc315177ca4b4114500469dcac96e735a Mon Sep 17 00:00:00 2001 From: Fabian Koller Date: Wed, 14 Jan 2026 13:14:44 +0100 Subject: [PATCH 1/2] ci: respect new image format for nighlty runs --- .github/workflows/test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 4b441e7d..8a985efc 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -34,7 +34,7 @@ jobs: if: ${{ inputs.image_tag == '' || github.event_name == 'workflow_run' || github.event_name == 'push' }} run: | #latest_tag=$(oras repo tags ghcr.io/gardenlinux/gardenlinux-ccloud | grep -E '^[0-9]+\.[0-9]+\.[0-9]+-metal-sci-usi-amd64-[0-9]+-[0-9]+-[0-9]-[0-9a-f]{8}$' | sort -r | head -n 1) - latest_tag=$(oras repo tags ghcr.io/gardenlinux/gardenlinux-ccloud | grep -E '^1877\.[0-9]+\.[0-9]+-metal-sci-usi-amd64-[0-9]+-[0-9]+-[0-9a-f]{8}$' | sort -r | head -n 1) + latest_tag=$(oras repo tags ghcr.io/gardenlinux/gardenlinux-ccloud | grep -E '^1877\.[0-9]+\.[0-9]+-metal-sci-usi-amd64-[0-9]+-[0-9]+-[0-9]+-[0-9a-f]{8}$' | sort -r | head -n 1) echo $latest_tag echo "latest_tag=$latest_tag" >> $GITHUB_ENV - name: Build From 2120095961c0c9a6788b6ee0d83cc7c277c01c0d Mon Sep 17 00:00:00 2001 From: Fabian Koller Date: Tue, 27 Jan 2026 15:14:54 +0100 Subject: [PATCH 2/2] ci: disable libvirt TLS/TCP sockets for CI tests Mask libvirtd-tls.socket and libvirtd-tcp.socket via Ignition. CI tests only need local Unix socket access, not remote TLS connections. This avoids missing CA cert errors. --- .github/actions/test/integration/build/action.yml | 7 ------- .../test/integration/build/dev-user-butane.yaml | 13 +++++++------ 2 files changed, 7 insertions(+), 13 deletions(-) diff --git a/.github/actions/test/integration/build/action.yml b/.github/actions/test/integration/build/action.yml index dd60bbac..b324d34e 100644 --- a/.github/actions/test/integration/build/action.yml +++ b/.github/actions/test/integration/build/action.yml @@ -106,13 +106,6 @@ runs: sed -i "s|PASSWORD_GOES_HERE|$PASSWORD|g" ./.github/actions/test/integration/build/dev-user-butane.yaml sed -i "s|TAG_GOES_HERE|${{ inputs.image_tag }}|g" ./.github/actions/test/integration/build/dev-user-butane.yaml - openssl req -new -x509 -days 3650 -nodes -sha256 \ - -subj "/C=XX/ST=State/L=City/O=GardenLinux/CN=Test CA" \ - -keyout "$RUNNER_TEMP/dummy-cakey.pem" -out "$RUNNER_TEMP/dummy-cacert.pem" - CA_CERT_B64=$(base64 -w 0 "$RUNNER_TEMP/dummy-cacert.pem") - sed -i "s|CA_CERT_BASE64_GOES_HERE|$CA_CERT_B64|g" ./.github/actions/test/integration/build/dev-user-butane.yaml - rm -f "$RUNNER_TEMP/dummy-cakey.pem" - butane --pretty --strict ./.github/actions/test/integration/build/dev-user-butane.yaml > "/opt/${TAG}.ign" - name: Download ubuntu cloud image diff --git a/.github/actions/test/integration/build/dev-user-butane.yaml b/.github/actions/test/integration/build/dev-user-butane.yaml index 3e852c8f..f7a331f1 100644 --- a/.github/actions/test/integration/build/dev-user-butane.yaml +++ b/.github/actions/test/integration/build/dev-user-butane.yaml @@ -85,9 +85,10 @@ storage: kernel.core_pattern=|/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h kernel.core_pipe_limit=16 fs.suid_dumpable=2 - # Dummy CA certificate for libvirt TLS - - path: /etc/pki/CA/cacert.pem - mode: 0644 - contents: - compression: "" - source: data:;base64,CA_CERT_BASE64_GOES_HERE +# Disable libvirt sockets not required for CI tests +systemd: + units: + - name: libvirtd-tls.socket + mask: true + - name: libvirtd-tcp.socket + mask: true