mirror of
https://github.com/checkpoint-restore/criu.git
synced 2026-07-18 17:14:28 +00:00
711b4ebfb8
Cirrus CI reports "Failed to start an instance: FAILED_PRECONDITION: Monthly compute limit exceeded!" making the Vagrant Fedora Rawhide test unusable. Replace the Cirrus CI Vagrant-based Fedora Rawhide test with a Lima VM-based equivalent in GitHub Actions. This follows the same pattern used by the runc project (lima-vm/lima-actions). The new vagrant-fedora-rawhide-test job: - Starts a Lima Fedora VM with KVM acceleration - Installs the latest vanilla kernel - Reboots the VM to activate the new kernel - Runs the fedora-rawhide CI target inside a podman container Assisted-by: Claude:claude-opus-4-6 Signed-off-by: Adrian Reber <areber@redhat.com>
63 lines
2.1 KiB
Bash
Executable file
63 lines
2.1 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
# This script runs inside a Lima Fedora VM to set up and run
|
|
# the Fedora Rawhide based CI tests with a vanilla kernel.
|
|
# It mirrors the logic from vagrant.sh's setup() and fedora-rawhide().
|
|
#
|
|
# lima.sh fedora-rawhide-setup
|
|
# lima.sh fedora-rawhide-test
|
|
|
|
|
|
set -e
|
|
set -x
|
|
|
|
CRIU_DIR="${CRIU_DIR:-/home/criu}"
|
|
|
|
fedora-rawhide-setup() {
|
|
# Disable sssd to avoid zdtm test failures in pty04 due to sssd socket
|
|
systemctl mask sssd
|
|
|
|
# Upgrade the kernel to the latest vanilla one
|
|
dnf -y copr enable @kernel-vanilla/stable
|
|
# The shellcheck tool misunderstands the "do" to be from a loop
|
|
# shellcheck disable=SC1010
|
|
dnf -y do --action=upgrade \* --action=install make podman
|
|
}
|
|
|
|
fedora-rawhide-test() {
|
|
# Increase the max thread limit for the thread-bomb test
|
|
sysctl -w kernel.threads-max=100000
|
|
|
|
# Allow memory overcommit. The thread-bomb test creates 1024
|
|
# threads that each create a successor after restore. In a
|
|
# memory-constrained VM the heuristic overcommit check can
|
|
# deny mmap for new thread stacks, and glibc maps ENOMEM to
|
|
# EAGAIN in pthread_create.
|
|
sysctl -w vm.overcommit_memory=1
|
|
|
|
# Newer systemd versions limit the number of tasks per scope/slice
|
|
# via cgroup pids controller. Set the system-wide default to
|
|
# unlimited and also remove the limit for the root user's slice.
|
|
# Without this, podman container scopes inherit the default
|
|
# TasksMax and thread-bomb fails with EAGAIN.
|
|
mkdir -p /etc/systemd/system.conf.d
|
|
printf '[Manager]\nDefaultTasksMax=infinity\n' \
|
|
> /etc/systemd/system.conf.d/50-tasks.conf
|
|
systemctl daemon-reload
|
|
systemctl set-property user-0.slice TasksMax=infinity
|
|
|
|
# Some tests in the container need selinux to be disabled.
|
|
# In the container it is not possible to change the state of selinux.
|
|
# Let's just disable it for this test run completely.
|
|
setenforce Permissive
|
|
|
|
cd "${CRIU_DIR}"
|
|
# excluding zdtm/static/socket-tcpbuf-local in this setup as it fails
|
|
# sometimes: https://github.com/checkpoint-restore/criu/issues/2987
|
|
make -C scripts/ci fedora-rawhide \
|
|
CONTAINER_RUNTIME=podman \
|
|
BUILD_OPTIONS="--security-opt seccomp=unconfined" \
|
|
ZDTM_OPTS="-x zdtm/static/socket-tcpbuf-local"
|
|
}
|
|
|
|
"$@"
|