| Age | Commit message (Collapse) | Author |
|---|
|
This runs much faster than the NixOS test suite, and is much more
precise. This also uncovered a recent severe pipewire regression.
This change removes all remaining deprecated nix code.
Closes #22.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This has better support for security-context metadata which can be
measured by the test suite.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
PipeWire/WirePlumber had become slopware while I was not looking.
WirePlumber 0.5.15 broke SecurityContext, and it has still not been
fixed. I have filed a ticket upstream, but considering the fact that my
previous security-related ticket, filed over 10 months ago, is still
being ignored, I do not have high hopes that they will fix it.
It is no longer safe to use PipeWire. Users are advised to downgrade to
0.5.14 for now. A drop-in replacement of PipeWire might be needed for
Rosa OS.
This change also adds additional packages required by the native
cmd/hakurei integration test suite.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
It is much easier to obtain these dist tarballs via cmd/mbf, and gitea
has been acting up again, taking minutes of retrying before finally
accepting the artifacts. This change removes them altogether and reverts
to contacting the cmd/mbf CI service.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This avoids having to reinstall packages on every run.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This avoids having multiple runs getting in the way of each other with
their Xwayland abstract socket.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This gets the cache action working without having to keep the init net
namespace.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This is cleaner than contacting the cmd/mbf CI service on every run,
although also slightly slower in some cases.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This structure is a lot less clumsy than the old nix-centric layout.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
Nix stuff is being removed, most of the flake.nix stuff is no longer
used by anything, so remove them here. This change also replaces a
hardcoded gcc command.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
There is no reason to keep using sudo here, now that processes are
spawned natively. This change removes all use of sudo.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This significantly improves performance, removing overhead of nix,
python, and virtualisation. Running this in an unprivileged container
required patching the kernel, but since special runner setup was already
needed, that was an acceptable tradeoff.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This also improves its API.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This avoids re-downloading packages on every run.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This was missed when migrating the test suite.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This runs tests directly in the container, significantly reducing
overhead introduced by virtualisation.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This also migrates from the unmaintained release action and improves
configuration so the new release is created as a draft, and the tag
annotation is automatically added as the release body.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This requires a lot of specialised setup to run, so document that here
for future reference.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This replaces the nix-based dist job.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This removes duplicate code and significantly eases maintenance.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
|
This represents workflow documents via compound literals and removes
the ugly and footgun-heavy yaml documents.
Signed-off-by: Ophestra <cat@gensokyo.uk>
|
