selinux: run the GNU test too

sylvestre · sylvestre · commit a631f10f214a · 2025-03-14T14:43:55.000+01:00
diff --git a/.github/workflows/GnuTests.yml b/.github/workflows/GnuTests.yml
@@ -82,6 +82,44 @@ jobs:
         submodules: false
         persist-credentials: false
 
+    - name: Selinux -  Setup Lima
+      uses: lima-vm/lima-actions/setup@v1
+      id: lima-actions-setup
+
+    - name: Selinux - Cache ~/.cache/lima
+      uses: actions/cache@v4
+      with:
+        path: ~/.cache/lima
+        key: lima-${{ steps.lima-actions-setup.outputs.version }}
+
+    - name: Selinux - Start Fedora VM with SELinux
+      run: limactl start --plain --name=default --cpus=2 --disk=40 --memory=8 --network=lima:user-v2 template://fedora
+
+    - name: Selinux - Setup SSH
+      uses: lima-vm/lima-actions/ssh@v1
+
+    - name: Selinux - Verify SELinux Status and Configuration
+      run: |
+        lima getenforce
+        lima ls -laZ /etc/selinux
+        lima sudo sestatus
+        lima sudo semanage boolean -l | head -5  # Show a few SELinux booleans
+
+        # Ensure we're running in enforcing mode
+        lima sudo setenforce 1
+        lima getenforce  # Verify it's enforcing
+
+        # Create test files with SELinux contexts for testing
+        lima sudo mkdir -p /var/test_selinux
+        lima sudo touch /var/test_selinux/test_file
+        lima sudo chcon -t etc_t /var/test_selinux/test_file
+        lima ls -Z /var/test_selinux/test_file  # Verify context
+
+    - name: Selinux - Install dependencies in VM
+      run: |
+        lima sudo dnf -y update
+        lima sudo dnf -y install git autoconf autopoint bison texinfo gperf gcc g++ gdb jq libacl-devel libattr-devel libcap-devel libselinux-devel attr
+
     - name: Override submodule URL and initialize submodules
       # Use github instead of upstream git server
       run: |
@@ -131,6 +169,32 @@ jobs:
         ## Build binaries
         cd '${{ steps.vars.outputs.path_UUTILS }}'
         bash util/build-gnu.sh --release-build
+
+    - name: Selinux - Copy the builds to VM
+      run: |
+        lima mkdir -p ~/work/uutils/ ~/work/gnu/
+        rsync -v -a -e ssh ./${{ steps.vars.outputs.path_UUTILS }}/ lima-default:~/work/uutils/
+        rsync -v -a -e ssh ./${{ steps.vars.outputs.path_GNU }}/ lima-default:~/work/gnu/
+
+    - name: Selinux - rebuild with the selinux feature
+      run: |
+        lima bash -c "cd work/uutils/ && cargo build --features 'feat_selinux'"
+
+    - name: Selinux - Find tests
+      run: |
+        # Find and list all tests that require SELinux
+        lima bash -c "cd ~/work/gnu/tests && grep -l 'require_selinux_' --include='*.sh' -r . > ~/work/selinux-tests.txt"
+        lima bash -c "cd ~/work && cat selinux-tests.txt"
+
+        # Count the tests
+        lima bash -c "cd ~/work && echo 'Found SELinux tests:'; wc -l selinux-tests.txt"
+
+        # Make paths relative to gnu directory for run-gnu-test.sh
+        lima bash -c "cd ~/work && sed -i 's|^./|tests/|g' selinux-tests.txt"
+
+        # Run each SELinux test individually
+        lima bash -c "cd ~/work && while read test; do echo \"Running \$test\"; bash uutils/util/run-gnu-test.sh \$test; done < selinux-tests.txt"
+
     - name: Run GNU tests
       shell: bash
       run: |
