Skip to content

ci: run AppContainer acceptance tests on Windows ARM64 - #57

Merged
senamakel merged 1 commit into
epic/7328-security-busfrom
tinybox-27-win11-arm64-appcontainer
Oct 24, 2026
Merged

senamakel merged 1 commit into
epic/7328-security-busfrom
tinybox-27-win11-arm64-appcontainer

Conversation

@senamakel

Copy link
Copy Markdown
Owner

Adds a focused AppContainer acceptance step to the Windows 11 ARM64 CI job. It explicitly runs the existing filesystem, network, process supervision/limit, and memory-limit tests on ARM64, including the verbatim-path and parent-traversal probes. It sets TINYBOX_REQUIRE_APPCONTAINER_RESOURCE_TESTS=1 so the memory-limit test cannot silently skip, and verifies that each exact filter ran one test.

The suite also asserts that Windows CPU enforcement remains Unsupported, as requested. No API or runtime behavior changes.

Validation:

  • Workflow YAML parsed successfully, and the extracted ARM64 shell step passed bash -n.
  • git diff --check and cargo fmt --all -- --check passed.
  • cargo check --locked --offline --target x86_64-pc-windows-gnu -p tinybox-jail --tests passed. This local host cannot execute the ARM64 AppContainer tests; the added Windows 11 ARM64 CI step runs them on the target runner.

Part of tinyhumansai#27 and tinyhumansai/openhuman#7328.

The Windows ARM64 job now runs a fixed list of AppContainer acceptance tests with resource tests required, asserting each test actually executes so a silently skipped or filtered test fails the build.

Auto-committed-on: cuttlefish
Co-authored-by: Medulla <medulla@tinyhumans.ai>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant