Skip to content

ci: replace Cirrus CI with GitHub Actions#1

Open
giuseppe wants to merge 2 commits into
mainfrom
move-to-gh-actions
Open

ci: replace Cirrus CI with GitHub Actions#1
giuseppe wants to merge 2 commits into
mainfrom
move-to-gh-actions

Conversation

@giuseppe
Copy link
Copy Markdown
Contributor

No description provided.

@giuseppe giuseppe force-pushed the move-to-gh-actions branch 6 times, most recently from 02f998c to 6088e5c Compare May 24, 2026 18:12
@giuseppe giuseppe changed the title [WIP] [DO NOT REVIEW] ci: replace Cirrus CI with GitHub Actions ci: replace Cirrus CI with GitHub Actions May 25, 2026
@giuseppe giuseppe force-pushed the move-to-gh-actions branch from 6088e5c to 9608a60 Compare May 25, 2026 14:28
Copy link
Copy Markdown
Contributor

@Luap99 Luap99 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks this is a good start, mostly comments about the unnecessary dependency installs?

I have not deeply looked at the actual test setup/runs

Kir is suggesting to use hack/ci over contrib/ci, I don't mind either way but we should likely all agree on the same for all repos for consistency podman-container-tools/podman-sandbox#8

cc @mtrmac @kolyshkin @timcoding1988 @ashley-cui

Comment thread .github/workflows/ci.yml Outdated
Comment on lines +31 to +32
- uses: actions/checkout@v6
- uses: dorny/paths-filter@v3
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please pin all actions with its commit sha

Comment thread hack/ci/runner.sh
Comment on lines +18 to +20
###############################################################################
# Dependency installation
###############################################################################
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The feels wrong, what is actually missing here? All deps must be backed into the VM images and should not be installed at runtime.

Comment thread contrib/ci/runner.sh Outdated
Comment on lines +70 to +83
if [[ "$VARIANT" == "sequoia" ]]; then
case $OS_RELEASE_ID in
fedora) sudo dnf install -y openssl-devel capnproto ;;
debian) sudo apt-get install -y libssl-dev capnproto ;;
esac
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable
source "$HOME/.cargo/env"
git clone --depth=1 https://github.com/ueno/podman-sequoia.git /tmp/podman-sequoia
cargo build --release --manifest-path /tmp/podman-sequoia/Cargo.toml
case $OS_RELEASE_ID in
fedora) sudo cp /tmp/podman-sequoia/target/release/libpodman_sequoia.so /usr/lib64/ ;;
debian) sudo cp /tmp/podman-sequoia/target/release/libpodman_sequoia.so /usr/lib/x86_64-linux-gnu/ ;;
esac
sudo ldconfig
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why is this needed? podman-sequoia should be packaged, we should not runtime compile it all the time as it wasted test time and can fail suddenly

Comment thread .github/workflows/ci.yml Outdated
Comment on lines +227 to +228
# N/B: The prow merge-bot (tide) is sensitized to this exact name, DO NOT CHANGE IT.
# Ref: https://github.com/openshift/release/pull/49820
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This comment can be dropped since we do not use the bot but it can highlight github merge protection settings.

@Luap99
Copy link
Copy Markdown
Contributor

Luap99 commented May 26, 2026

oh btw I think it would make sense if you push the go fix commit on the main repo, no need to wait for this PR here.

@giuseppe
Copy link
Copy Markdown
Contributor Author

oh btw I think it would make sense if you push the go fix commit on the main repo, no need to wait for this PR here.

opened a PR: podman-container-tools/container-libs#874

@giuseppe giuseppe force-pushed the move-to-gh-actions branch 5 times, most recently from fc09a2d to c47e364 Compare May 26, 2026 12:39
@giuseppe
Copy link
Copy Markdown
Contributor Author

github seems on fire right now

@giuseppe giuseppe force-pushed the move-to-gh-actions branch 5 times, most recently from 4af5768 to 97147ae Compare May 26, 2026 17:19
Comment thread .github/workflows/ci.yml Outdated
Comment on lines +25 to +26
permissions:
pull-requests: read
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR read permission should be applied from the permissions: read-all, so this is redundant, no?

Comment thread .github/workflows/ci.yml Outdated
persist-credentials: false
- uses: lima-vm/lima-actions/setup@55627e31b78637bf254a8b2a14da8ea7d12564e5 # v1.1.0
with:
version: v2.1.1
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perhaps it would be better if the version was specified as a constant similarly to as it is done for go-version?

Comment thread .github/workflows/ci.yml Outdated
image: ${{ steps.filter.outputs.image }}
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: dorny/paths-filter@6852f92c20ea7fd3b0c25de3b5112db3a98da050 # v3
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why is this pinned to v3, latest version seem to v4.0.1 dorny/paths-filter@fbd0ab8

@giuseppe giuseppe force-pushed the move-to-gh-actions branch 2 times, most recently from a83fe52 to fd95acc Compare May 27, 2026 15:22
Copy link
Copy Markdown
Contributor

@kolyshkin kolyshkin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left a few nits.

Too bad file renames can't be shown here. Perhaps it's better to start with a commit which renames all contrib/cirrus to hack/ci (similar to podman-container-tools/podman-sandbox#8) and then do the migration, so the reviewers will see the exact changes to these files.

Comment thread .github/workflows/ci.yml Outdated
Comment thread .github/workflows/ci.yml Outdated
giuseppe and others added 2 commits May 28, 2026 09:14
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants