Skip to content

ci: add conmon tests run#5159

Merged
lifubang merged 1 commit intoopencontainers:mainfrom
kolyshkin:add-conmon
Mar 12, 2026
Merged

ci: add conmon tests run#5159
lifubang merged 1 commit intoopencontainers:mainfrom
kolyshkin:add-conmon

Conversation

@kolyshkin
Copy link
Copy Markdown
Contributor

@kolyshkin kolyshkin commented Mar 10, 2026

Related to issue #5151, PR #5153.

@kolyshkin kolyshkin force-pushed the add-conmon branch 4 times, most recently from fba6385 to 9def035 Compare March 10, 2026 20:01
@kolyshkin kolyshkin marked this pull request as ready for review March 10, 2026 20:01
@kolyshkin kolyshkin added the backport/1.4-todo A PR in main branch which needs to backported to release-1.4 label Mar 10, 2026
@kolyshkin
Copy link
Copy Markdown
Contributor Author

Added backport/1.4-todo as I think 1.4 branch will also benefit from running those tests (by avoiding conmon-related regressions).


- name: build conmon
run: |
git clone --depth 1 https://github.com/containers/conmon
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it be less fragile to use the latest release of conmon instead?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That would be nice, but is there a simple way to do it? That's what I hate about GHA.

If dependabot can update the conmon version here, great. But otherwise, if we don't have an automated way to update it, I think I'd start with this and if it's noisy, we can always fall back to releases.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can checkout conmon via actions/checkout, like this:

    - name: checkout conmon
      uses: actions/checkout@v6
      with:
        repository: containers/conmon
        path: conmon
        ref: v2.2.1

but even in that case dependabot won't be able to update it (unless I miss something).

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's settle on latest released version (and the need to update it manually, which is probably better than random CI failures).

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SGTM

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was thinking you could use https://github.com/containers/conmon/releases/latest but this works fine too.

Copy link
Copy Markdown
Member

@rata rata left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome, thanks @kolyshkin ! This mostly LGTM, left some simple comments.


- name: build conmon
run: |
git clone --depth 1 https://github.com/containers/conmon
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That would be nice, but is there a simple way to do it? That's what I hate about GHA.

If dependabot can update the conmon version here, great. But otherwise, if we don't have an automated way to update it, I think I'd start with this and if it's noisy, we can always fall back to releases.

Copy link
Copy Markdown
Member

@rata rata left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. I'm fine if someone wants to do more improvements too, but I think this is good enough to merge. All the tests run in about 1min, that is great :)

This adds a CI job to run conmon tests with runc.

Related to issue 5151, PR 5153.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
Copy link
Copy Markdown
Member

@rata rata left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome, thank you very much for this improvement! LGTM

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds CI coverage in the validate GitHub Actions workflow to build runc and run the upstream conmon test suite against it, ensuring validate gates on these results.

Changes:

  • Introduce a new conmon job that installs deps, builds runc, checks out containers/conmon, builds it, and runs its tests.
  • Wire the new conmon job into the all-done aggregator via needs.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@lifubang lifubang merged commit 7837689 into opencontainers:main Mar 12, 2026
47 checks passed
@lifubang
Copy link
Copy Markdown
Member

lifubang commented Mar 12, 2026

Nice! Do you think we should also add a test for containerd?

@cyphar
Copy link
Copy Markdown
Member

cyphar commented Mar 12, 2026

Ah, this needed to be updated once #5103 was merged -- the CI fails. #5170 fixes this.

@lifubang
Copy link
Copy Markdown
Member

Ah, this needed to be updated once #5103 was merged -- the CI fails. #5170 fixes this.

👍
I realized it in #5103,
But I forgot it in here!
Let's discuss in #5103 (comment)

@kolyshkin kolyshkin added the backport/1.3-todo A PR in main branch which needs to be backported to release-1.3 label Mar 19, 2026
@kolyshkin
Copy link
Copy Markdown
Contributor Author

1.4 backport: #5187
1.3 backport: #5188

@kolyshkin kolyshkin removed backport/1.3-todo A PR in main branch which needs to be backported to release-1.3 backport/1.4-todo A PR in main branch which needs to backported to release-1.4 labels Mar 19, 2026
@kolyshkin kolyshkin added backport/1.3-done A PR in main branch which has been backported to release-1.3 backport/1.4-done A PR in main branch which has been backported to release-1.4 area/ci labels Mar 19, 2026
@kolyshkin
Copy link
Copy Markdown
Contributor Author

Nice! Do you think we should also add a test for containerd?

Makes sense! Perhaps podman and docker, too.

@kolyshkin kolyshkin added this to the 1.5.0-rc.1 milestone Mar 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ci backport/1.3-done A PR in main branch which has been backported to release-1.3 backport/1.4-done A PR in main branch which has been backported to release-1.4

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants