tests/test_vault_integration.py is marked pytestmark = [pytest.mark.integration, pytest.mark.real_probe] and requires bwrap, gocryptfs, unshare, and fusermount on the host, plus a working unprivileged user namespace. The initial CI PR skips integration tests (-m "not integration").
Add a dedicated job that installs the required system packages (bubblewrap, gocryptfs, fuse3) on an Ubuntu runner and runs pytest -m integration. Verify that unprivileged user namespaces are usable on the runner; fall back to a privileged step or self-hosted runner if necessary.
Out of scope in initial CI PR; spinning off so the default CI path stays fast and simple.
tests/test_vault_integration.pyis markedpytestmark = [pytest.mark.integration, pytest.mark.real_probe]and requiresbwrap,gocryptfs,unshare, andfusermounton the host, plus a working unprivileged user namespace. The initial CI PR skips integration tests (-m "not integration").Add a dedicated job that installs the required system packages (
bubblewrap,gocryptfs,fuse3) on an Ubuntu runner and runspytest -m integration. Verify that unprivileged user namespaces are usable on the runner; fall back to a privileged step or self-hosted runner if necessary.Out of scope in initial CI PR; spinning off so the default CI path stays fast and simple.