feat(e2e): validate fork-first image (DEC-055) on sample-e2e - #19
Merged
Conversation
…055) a0-up.sh: optional 'podman login ghcr.io' when GHCR_TOKEN is set, so private fork images can be pulled. sample-plugin-e2e: pass GHCR_PULL_TOKEN + target the private non-root fork image (ghcr.io/nuevanext/agent-zero:latest-nonroot) to validate the nested boot of the nonroot variant BEFORE flipping the shared default + fanning out. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The fork image bundles ML deps (onnxruntime) and is bigger than upstream's
8.76GB, exhausting the runner disk during the nested unpack ('no space left on
device'). Free ~30GB of preinstalled tooling (dotnet/android/ghc/CodeQL) first.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…boots The root image lets us overwrite /usr/sbin/sshd; the non-root fork image rejects it (Permission denied), which under set -e aborted boot before A0 started. Make it best-effort + proceed — the non-root image handles sshd via its own non-root init. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Wires ghcr private-pull auth into the harness and points the devkit self-test at the non-root fork image to validate the nested boot before flipping the shared default. 🤖