Merge pull request #57 from senamakel/tinybox-27-win11-arm64-appcontainer

ci: run AppContainer acceptance tests on Windows ARM64

Author: senamakel

.github/workflows/ci.yml

@@ -69,6 +69,35 @@ jobs:
       - name: Run Windows feature tests
         shell: bash
         run: scripts/test-features.sh
+      - name: Run required ARM64 AppContainer acceptance tests
+        shell: bash
+        env:
+          TINYBOX_REQUIRE_APPCONTAINER_RESOURCE_TESTS: "1"
+        run: |
+          set -euo pipefail
+          tests=(
+            windows::tests::appcontainer_backend_is_available_through_owned_process_supervision
+            windows::tests::appcontainer_plan_check_keeps_cpu_unsupported_and_reports_job_limits
+            windows::tests::appcontainer_owned_launch_captures_output_from_a_confined_child
+            windows::tests::appcontainer_owned_termination_stops_descendants_after_parent_exit
+            windows::tests::appcontainer_process_limit_enforces_maximum_child_count
+            windows::tests::appcontainer_denies_reads_and_writes_outside_granted_roots
+            windows::tests::appcontainer_denies_verbatim_path_reads_outside_granted_roots
+            windows::tests::appcontainer_denies_parent_traversal_reads_outside_granted_roots
+            windows::tests::appcontainer_child_cannot_connect_to_host_loopback
+            windows::tests::live_appcontainer_memory_limit_blocks_over_budget_allocation
+          )
+          for test in "${tests[@]}"; do
+            output="$(cargo test --locked -p tinybox-jail --lib "$test" -- --exact --nocapture --test-threads=1 2>&1)" || {
+              printf '%s\n' "$output"
+              exit 1
+            }
+            printf '%s\n' "$output"
+            if ! grep -qE '1 passed; 0 failed' <<<"$output"; then
+              echo "expected exactly one ARM64 AppContainer test to run: $test" >&2
+              exit 1
+            fi
+          done
   windows-2025:
     name: Windows Server 2025 E2E and feature tests (x64)
     runs-on: windows-2025