1- name : Integration Tests
1+ name : C Integration Tests
22
33on :
44 push :
2828 - name : Run filesystem isolation subtest
2929 env :
3030 ENABLE_QUEUE : " false"
31- run : sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/ file privacy across request IDs' ./...
31+ run : sudo -E go test -v -run '^ TestContainerizationAPISecurityIntegration$/^ file privacy across request IDs$ ' ./...
3232
3333 test-disk-cleanup :
3434 name : " Security: Disk Cleanup (Storage Exhaustion)"
5151 - name : Run disk cleanup subtest
5252 env :
5353 ENABLE_QUEUE : " false"
54- run : sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/ disk spammer is terminated and data is reclaimed' ./...
54+ run : sudo -E go test -v -run '^ TestContainerizationAPISecurityIntegration$/^ disk spammer is terminated and data is reclaimed$ ' ./...
5555
5656 test-fork-bomb :
5757 name : " Resource: Fork Bomb Containment"
7474 - name : Run fork bomb subtest
7575 env :
7676 ENABLE_QUEUE : " false"
77- run : sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/ fork bomb does not poison subsequent requests' ./...
77+ run : sudo -E go test -v -run '^ TestContainerizationAPISecurityIntegration$/^ fork bomb does not poison subsequent requests$ ' ./...
7878
7979 test-network-isolation :
8080 name : " Security: Network Namespace (Localhost Bridge)"
9797 - name : Run network isolation subtest
9898 env :
9999 ENABLE_QUEUE : " false"
100- run : sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/ network namespace blocks localhost bridge' ./...
100+ run : sudo -E go test -v -run '^ TestContainerizationAPISecurityIntegration$/^ network namespace blocks localhost bridge$ ' ./...
101101
102102 test-memory-oom :
103103 name : " Security: Memory Limit (Hard OOM)"
@@ -120,7 +120,7 @@ jobs:
120120 - name : Run memory OOM subtest
121121 env :
122122 ENABLE_QUEUE : " false"
123- run : sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/ memory hard limit triggers oom kill' ./...
123+ run : sudo -E go test -v -run '^ TestContainerizationAPISecurityIntegration$/^ memory hard limit triggers oom kill$ ' ./...
124124
125125 test-io-flood :
126126 name : " Resilience: I/O Flood (Bounded Stderr)"
@@ -143,7 +143,7 @@ jobs:
143143 - name : Run I/O flood resilience subtest
144144 env :
145145 ENABLE_QUEUE : " false"
146- run : sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/ io flood is bounded and returns before timeout' ./...
146+ run : sudo -E go test -v -run '^ TestContainerizationAPISecurityIntegration$/^ io flood is bounded and returns before timeout$ ' ./...
147147
148148 test-signal-trap :
149149 name : " Resilience: Signal Trap Uses SIGKILL Timeout"
@@ -166,7 +166,7 @@ jobs:
166166 - name : Run signal trap resilience subtest
167167 env :
168168 ENABLE_QUEUE : " false"
169- run : sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/ signal trap cannot survive forced timeout' ./...
169+ run : sudo -E go test -v -run '^ TestContainerizationAPISecurityIntegration$/^ signal trap cannot survive forced timeout$ ' ./...
170170
171171 test-orphan-reaping :
172172 name : " Resilience: Orphan Grandchild Reaping"
@@ -189,7 +189,7 @@ jobs:
189189 - name : Run orphan reaping resilience subtest
190190 env :
191191 ENABLE_QUEUE : " false"
192- run : sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/ orphan grandchild is reaped after request exits' ./...
192+ run : sudo -E go test -v -run '^ TestContainerizationAPISecurityIntegration$/^ orphan grandchild is reaped after request exits$ ' ./...
193193
194194 test-inode-exhaustion :
195195 name : " Resilience: Inode Exhaustion Safety"
@@ -212,7 +212,7 @@ jobs:
212212 - name : Run inode exhaustion resilience subtest
213213 env :
214214 ENABLE_QUEUE : " false"
215- run : sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/ inode bomb does not poison host temp filesystem' ./...
215+ run : sudo -E go test -v -run '^ TestContainerizationAPISecurityIntegration$/^ inode bomb does not poison host temp filesystem$ ' ./...
216216
217217 test-privileged-syscall :
218218 name : " Resilience: Privileged Syscall Denial"
@@ -235,73 +235,4 @@ jobs:
235235 - name : Run privileged syscall denial subtest
236236 env :
237237 ENABLE_QUEUE : " false"
238- run : sudo -E go test -v -run 'TestContainerizationAPISecurityIntegration/privileged reboot syscall is denied' ./...
239-
240- test-python3-suite :
241- name : " Language Gap: Python3 Security/Resilience Suite (Expected Fail)"
242- runs-on : ubuntu-latest
243-
244- steps :
245- - name : Checkout
246- uses : actions/checkout@v4
247-
248- - name : Setup Go
249- uses : actions/setup-go@v5
250- with :
251- go-version-file : go.mod
252-
253- - name : Install native dependencies
254- run : |
255- sudo apt-get update
256- sudo apt-get install -y gcc libc6-dev python3
257-
258- - name : Run Python3 mirrored suite
259- env :
260- ENABLE_QUEUE : " false"
261- run : sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationPython3$' ./...
262-
263- test-cpp-suite :
264- name : " Language Gap: C++ Security/Resilience Suite (Expected Fail)"
265- runs-on : ubuntu-latest
266-
267- steps :
268- - name : Checkout
269- uses : actions/checkout@v4
270-
271- - name : Setup Go
272- uses : actions/setup-go@v5
273- with :
274- go-version-file : go.mod
275-
276- - name : Install native dependencies
277- run : |
278- sudo apt-get update
279- sudo apt-get install -y gcc g++ libc6-dev
280-
281- - name : Run C++ mirrored suite
282- env :
283- ENABLE_QUEUE : " false"
284- run : sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationCpp$' ./...
285-
286- test-java-suite :
287- name : " Language Gap: Java Security/Resilience Suite (Expected Fail)"
288- runs-on : ubuntu-latest
289-
290- steps :
291- - name : Checkout
292- uses : actions/checkout@v4
293-
294- - name : Setup Go
295- uses : actions/setup-go@v5
296- with :
297- go-version-file : go.mod
298-
299- - name : Install native dependencies
300- run : |
301- sudo apt-get update
302- sudo apt-get install -y gcc libc6-dev openjdk-21-jdk
303-
304- - name : Run Java mirrored suite
305- env :
306- ENABLE_QUEUE : " false"
307- run : sudo -E go test -v -run '^TestContainerizationAPISecurityIntegrationJava$' ./...
238+ run : sudo -E go test -v -run '^TestContainerizationAPISecurityIntegration$/^privileged reboot syscall is denied$' ./...
0 commit comments