nerdctl/.github/workflows/workflow-test.yml at d7f0e296fd281c2fdbd388e82c0d186b4c1c216e · containerd/nerdctl · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
name: test

on:
  push:
    branches:
      - main
      - 'release/**'
  pull_request:
    paths-ignore:
      - '**.md'

permissions:
  contents: read

jobs:
  test-unit:
    # Note: inputs.hack is undefined - its purpose is to prevent GitHub Actions from displaying all matrix variants as part of the name.
    name: "unit${{ inputs.hack }}"
    uses: ./.github/workflows/job-test-unit.yml
    strategy:
      fail-fast: false
      matrix:
        # Run on all supported platforms but freebsd
        # Additionally run on canary for linux
        include:
          - runner: "ubuntu-26.04"
          - runner: "macos-15"
          - runner: "windows-2025"
          # FIXME: failing since the release of go1.27rc1
          # - runner: "ubuntu-26.04"
          #   canary: true
    with:
      runner: ${{ matrix.runner }}
      canary: ${{ matrix.canary && true || false }}
      # Windows routinely go over 5 minutes
      timeout: 10
      go-version: 1.26
      windows-cni-version: v0.3.1
      linux-cni-version: v1.7.1
      linux-cni-sha: 1a28a0506bfe5bcdc981caf1a49eeab7e72da8321f1119b7be85f22621013098

  # This job builds the dependency target of the test-image for all supported architectures and cache it in GHA
  build-dependencies:
    name: "dependencies${{ inputs.hack }}"
    uses: ./.github/workflows/job-test-dependencies.yml
    strategy:
      fail-fast: false
      matrix:
        include:
          # Build for arm & amd, current containerd
          - runner: ubuntu-26.04
          - runner: ubuntu-26.04-arm
          # Additionally build for old containerd on amd
          - runner: ubuntu-26.04
            containerd-version: v1.7.34
    with:
      runner: ${{ matrix.runner }}
      containerd-version: ${{ matrix.containerd-version }}
      timeout: 20

  test-integration-host-linux:
    name: "in-host${{ inputs.hack }}"
    uses: ./.github/workflows/job-test-in-host.yml
    needs: build-dependencies
    strategy:
      fail-fast: false
      matrix:
        include:
          ###### Rootless
          # amd64
          - runner: ubuntu-26.04
            target: rootless
          # arm64
          - runner: ubuntu-26.04-arm
            target: rootless
            skip-flaky: true
          # port-slirp4netns
          - runner: ubuntu-26.04
            target: rootless-port-slirp4netns
            skip-flaky: true
          # old containerd + old ubuntu + old rootlesskit
          - runner: ubuntu-22.04
            target: rootless
            containerd-version: v1.7.34
            rootlesskit-version: v1.1.1
          # gomodjail
          - runner: ubuntu-26.04
            target: rootless
            binary: "nerdctl.gomodjail"
          # ipv6
          - runner: ubuntu-26.04
            target: rootless
            ipv6: true
            skip-flaky: true
          ###### Rootful
          # amd64
          - runner: ubuntu-26.04
            target: rootful
          # arm64
          - runner: ubuntu-26.04-arm
            target: rootful
            skip-flaky: true
          # old containerd + old ubuntu
          - runner: ubuntu-22.04
            target: rootful
            containerd-version: v1.7.34
          # ipv6
          - runner: ubuntu-26.04
            target: rootful
            ipv6: true
            skip-flaky: true
          # all canary
          # FIXME: failing since the release of go1.27rc1
          # - runner: ubuntu-26.04
          #   target: rootful
          #   canary: true

    with:
      timeout: 80
      runner: ${{ matrix.runner }}
      target: ${{ matrix.target }}
      binary: ${{ matrix.binary && matrix.binary || 'nerdctl' }}
      containerd-version: ${{ matrix.containerd-version }}
      rootlesskit-version: ${{ matrix.rootlesskit-version }}
      ipv6: ${{ matrix.ipv6 && true || false }}
      canary: ${{ matrix.canary && true || false }}
      skip-flaky: ${{ matrix.skip-flaky && true || false }}
      go-version: 1.26

  test-integration-host:
    name: "in-host${{ inputs.hack }}"
    uses: ./.github/workflows/job-test-in-host.yml
    strategy:
      fail-fast: false
      matrix:
        include:
          # Test on windows w/o canary
          - runner: windows-2022
          # FIXME: failing since the release of go1.27rc1
          # - runner: windows-2025
          #   canary: true
          # Test docker on linux
          - runner: ubuntu-26.04
            binary: docker
    with:
      timeout: 45
      runner: ${{ matrix.runner }}
      binary: ${{ matrix.binary != '' && matrix.binary || 'nerdctl' }}
      canary: ${{ matrix.canary && true || false }}
      # Hyper-V is broken on canary.
      # [v2.3.0-beta.2 regression] The virtual machine or container JSON document is invalid. (Hyper-V container)
      # https://github.com/containerd/containerd/issues/13254
      no-hyperv: ${{ matrix.canary && true || false }}
      go-version: 1.26
      windows-cni-version: v0.3.1
      docker-version: 5:29.6.1-1~ubuntu.26.04~resolute
      # Windows CI still requires containerd v2.2.
      # [v2.3.0 regression] The virtual machine or container JSON document is invalid. (Hyper-V container)
      # https://github.com/containerd/containerd/issues/13254
      windows-containerd-version: 2.2.5
      windows-containerd-sha: 8724c3a873b4984f5ee092c8f15c1a98ebbb0f968106cf8f5849ea100f3a0236