Add update command integration tests to contest

[saku3]

Description

Add update integration tests to tests/contest equivalent to tests/integration/update.bats in runc, then make youki pass them.

Motivation

The contest framework (Rust-based OCI runtime integration tests) currently has no coverage for update functionality. The existing BATS-based tests in runc's update.bats cover this area but are not available through contest.

Implement contest tests

Add the following tests to tests/contest.

These tests are skipped when running with youki, as the required functionality is not fully implemented yet.

• update cgroup v1/v2 common limits (test(contest): add update cgroup v2 common limits integration test #3580)
• update cgroup cpu limits
• update pids.limit
• cpu burst
• set cpu period with no quota
• set cpu period with no quota (invalid period)
• set cpu quota with no period
• update cpu period with no previous period/quota set
• update cpu quota with no previous period/quota set
• update cpu period in a pod cgroup with pod limit set
• update cgroup cpu.idle
• update cgroup cpu.idle via systemd v252+
• update cgroup v2 resources via unified map
• update cpuset parameters via resources.CPU
• update cpuset parameters via v2 unified map
• update cpuset cpus range via v2 unified map
• update rt period and runtime
• update devices [minimal transition rules]
• update paused container
• update memory vs CheckBeforeUpdate
• update per-device iops/bps values

[saku3]

@hayama17 @moz-sec

Would you be interested in taking a look at this issue?

We would appreciate your help.

[moz-sec]

I'm interested.
I'll look into it and start with what I can.

[hayama17]

Thanks @saku3 !
I'm interested in taking this on. I'll go ahead and break it down into sub-issues based on the task list and start working through them.

[hayama17]

@saku3
#3580
I've created a draft scaffold for the update tests.

@moz-sec
The test logic isn't implemented yet — Would you like to build on top of this with me?

[hayama17]

@saku3
Open PR #3580, which adds e2e tests for cgroup resource update (memory, pids, cpuset).

Scoped to cgroup v2 + cgroupfs driver for now; cgroup v1 and systemd driver support are TODO
Tests pass on runc. youki is currently skipped due to missing cpuset update support

[hayama17]

I'll take on these 4 related CPU test cases together:

• set cpu period with no quota
• set cpu period with no quota (invalid period)
• set cpu quota with no period
• cpu burst