Skip to content

ci/tmt-tests: run build and test in the same fedora:latest container - #1182

Merged
Rolv-Apneseth merged 1 commit into
coreos:mainfrom
Rolv-Apneseth:tmt_run_on_fedora
Nov 5, 2026
Merged

Rolv-Apneseth merged 1 commit into
coreos:mainfrom
Rolv-Apneseth:tmt_run_on_fedora

Conversation

@Rolv-Apneseth

Copy link
Copy Markdown
Member

This is to avoid an issue where the binary is built in an environment with one version of a system library (e.g. openssl 3) and then attempted to be run in an environment without that same version of the system library (e.g. system only has openssl 4).

Encountered after the recent Fedora 45 release, since that moves to openssl 4, and Ubuntu 24 (which we recently pinned) remains on openssl 3.


e.g. #1181 (comment)

@openshift-ci

openshift-ci Bot commented Nov 5, 2026

Copy link
Copy Markdown

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@coderabbitai

coderabbitai Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

Explain Change →

No actionable comments were generated in the recent review.

Walkthrough

The TMT test job now runs in a Fedora container. It installs dependencies with dnf and always uses safe local provisioning. The optional source build remains conditional.

Changes: TMT workflow environment

Layer / File(s) Summary
Configure and run TMT
.github/workflows/tmt-tests.yml
The job runs in fedora:latest and installs its build and test tools with dnf. TMT now uses --feeling-safe and local provisioning. The conditional source build remains.

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Bug fix

Possibly related PRs

  • coreos/bootupd#1179: Changes the same job's runner environment and addresses a related TMT failure.

Suggested reviewers: c4rt0

Merge Risk: Minimal · up to 0e2df

The Fedora-container workflow is ready for normal checks; no concrete blocker remains in the reviewed changes.

Pre-merge checks: Passed 6

Check name Status Explanation
Title check Passed The title "ci/tmt-tests: run build and test in the same fedora:latest container" describes the main change: the tmt-tests job now runs in a fedora:latest container. It follows the 'subsystem: descript…
Description check Passed The description explains the reason for the change. Building in one environment with one OpenSSL version and running in another can fail. It also gives context: Fedora 45 moves to OpenSSL 4, while the…
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Commit Message Convention Passed The PR has one non-merge commit: ci/tmt-tests: run build and test in the same fedora:latest container. It uses a valid subsystem prefix, starts the description with the lowercase imperative verb `ru…
Full details: Title check

Explanation

The title "ci/tmt-tests: run build and test in the same fedora:latest container" describes the main change: the tmt-tests job now runs in a fedora:latest container. It follows the 'subsystem: description' pattern with a lowercase description and no trailing period. It does not fully match the required format, which asks for an imperative mood. The title uses the imperative 'run', so that requirement is met. The title also names the container change, which is the core of the diff.

Full details: Description check

Explanation

The description explains the reason for the change. Building in one environment with one OpenSSL version and running in another can fail. It also gives context: Fedora 45 moves to OpenSSL 4, while the pinned Ubuntu 24 stays on OpenSSL 3. The description relates directly to the workflow change.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Commit Message Convention

Explanation

The PR has one non-merge commit: ci/tmt-tests: run build and test in the same fedora:latest container. It uses a valid subsystem prefix, starts the description with the lowercase imperative verb run, and has no trailing period.

Finishing Touches

Generate unit tests (beta)

  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Recent review info

Run configuration

Commits

Reviewing files that changed from the base of the PR and between 1a0e1a1 and 0e2dfa7.

Files selected for processing: 1

  • .github/workflows/tmt-tests.yml

Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 0 remain after this review.

Recent review details

Context from checks skipped due to timeout: 20

  • GitHub Check: testing-farm:centos-stream-10-x86_64
  • GitHub Check: testing-farm:fedora-rawhide-x86_64
  • GitHub Check: rpm-build:centos-stream-10-x86_64
  • GitHub Check: CodeRabbit
  • GitHub Check: rpm-build:fedora-rawhide-x86_64
  • GitHub Check: Tests (release), minimum supported toolchain
  • GitHub Check: Tests, unstable toolchain (nightly)
  • GitHub Check: Tests (release), stable toolchain
  • GitHub Check: Lints, pinned toolchain
  • GitHub Check: bootc-e2e (ubuntu-24.04-arm, 0, 10)
  • GitHub Check: bootc-e2e (ubuntu-24.04, 0, 9)
  • GitHub Check: Tests, unstable toolchain (beta)
  • GitHub Check: bootc-e2e (ubuntu-24.04-arm, 0, 9)
  • GitHub Check: bootc-e2e (ubuntu-24.04, 1)
  • GitHub Check: Tests, stable toolchain
  • GitHub Check: bootc-e2e (ubuntu-24.04-arm, 1)
  • GitHub Check: Build on s390x
  • GitHub Check: Build on ppc64le
  • GitHub Check: tmt-tests
  • GitHub Check: bootc-e2e (ubuntu-24.04, 0, 10)
Additional comments: 1

.github/workflows/tmt-tests.yml: 1

42-42: Functional Correctness

The missing GCC concern does not apply to this job.

The dependency transaction installed gcc, and cargo build --release completed successfully.

This is to avoid an issue where the binary is built in an environment
with one version of a system library (e.g. openssl 3) and then attempted
to be run in an environment without that same version of the system
library (e.g. system only has openssl 4).

Encountered after the recent Fedora 45 release, since that moves to
openssl 4, and Ubuntu 24 (which we recently pinned) remains on openssl
3.

@aaradhak aaradhak left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Rolv-Apneseth added a commit to Rolv-Apneseth/afterburn that referenced this pull request Nov 5, 2026
This is to avoid an issue where the binary is built in an environment
with one version of a system library (e.g. openssl 3) and then attempted
to be run in an environment without that same version of the system
library (e.g. system only has openssl 4).

Encountered after the recent Fedora 45 release, since that moves to
openssl 4, and Ubuntu 24 (which we recently pinned) remains on openssl
3.

See coreos/bootupd#1182, which this change is
copying
@Rolv-Apneseth
Rolv-Apneseth merged commit 3632634 into coreos:main Nov 5, 2026
25 of 26 checks passed
@Rolv-Apneseth
Rolv-Apneseth deleted the tmt_run_on_fedora branch November 5, 2026 20:27
Rolv-Apneseth added a commit to coreos/afterburn that referenced this pull request Nov 6, 2026
This is to avoid an issue where the binary is built in an environment
with one version of a system library (e.g. openssl 3) and then attempted
to be run in an environment without that same version of the system
library (e.g. system only has openssl 4).

Encountered after the recent Fedora 45 release, since that moves to
openssl 4, and Ubuntu 24 (which we recently pinned) remains on openssl
3.

See coreos/bootupd#1182, which this change is
copying
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants