#!/bin/bash

# This script runs inside a Lima Fedora VM to set up and run
# the Fedora Rawhide based CI tests with a vanilla kernel.
# It mirrors the logic from vagrant.sh's setup() and fedora-rawhide().
#
#   lima.sh fedora-rawhide-setup
#   lima.sh fedora-rawhide-test


set -e
set -x

CRIU_DIR="${CRIU_DIR:-/home/criu}"

fedora-rawhide-setup() {
	# Disable sssd to avoid zdtm test failures in pty04 due to sssd socket
	systemctl mask sssd

	# Upgrade the kernel to the latest vanilla one
	dnf -y copr enable @kernel-vanilla/stable
	# The shellcheck tool misunderstands the "do" to be from a loop
	# shellcheck disable=SC1010
	dnf -y do --action=upgrade \* --action=install make podman
}

fedora-rawhide-test() {
	# Increase the max thread limit for the thread-bomb test
	sysctl -w kernel.threads-max=100000

	# Allow memory overcommit. The thread-bomb test creates 1024
	# threads that each create a successor after restore. In a
	# memory-constrained VM the heuristic overcommit check can
	# deny mmap for new thread stacks, and glibc maps ENOMEM to
	# EAGAIN in pthread_create.
	sysctl -w vm.overcommit_memory=1

	# Newer systemd versions limit the number of tasks per scope/slice
	# via cgroup pids controller. Set the system-wide default to
	# unlimited and also remove the limit for the root user's slice.
	# Without this, podman container scopes inherit the default
	# TasksMax and thread-bomb fails with EAGAIN.
	mkdir -p /etc/systemd/system.conf.d
	printf '[Manager]\nDefaultTasksMax=infinity\n' \
		> /etc/systemd/system.conf.d/50-tasks.conf
	systemctl daemon-reload
	systemctl set-property user-0.slice TasksMax=infinity

	# Some tests in the container need selinux to be disabled.
	# In the container it is not possible to change the state of selinux.
	# Let's just disable it for this test run completely.
	setenforce Permissive

	cd "${CRIU_DIR}"
	# excluding zdtm/static/socket-tcpbuf-local in this setup as it fails
	# sometimes: https://github.com/checkpoint-restore/criu/issues/2987
	make -C scripts/ci fedora-rawhide \
		CONTAINER_RUNTIME=podman \
		BUILD_OPTIONS="--security-opt seccomp=unconfined" \
		ZDTM_OPTS="-x zdtm/static/socket-tcpbuf-local"
}

"$@"