Martin Vogel ac8f5b8a81 ci(test): report whether unprivileged userns is actually available ...

The sysctl that lifts the AppArmor restriction is best-effort, and the test
runner prints per-shard aggregates only -- 'N passed, M skipped', never
individual test names. So if the sysctl stopped working, the #1830 namespace
test would quietly return to skipping and the log would stay green and look
identical. That is the same false assurance that let a security relaxation ship
behind a test which never executed.

Probe it the way the test does (unprivileged, no sudo) and print the answer, so
there is one greppable line of evidence per ubuntu leg. Deliberately not a gate:
a runner that cannot lift the restriction should still run everything else.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-09-13 10:35:41 +02:00

..

ISSUE_TEMPLATE

feat(diag): persistent memory trajectory + query-leak CI soak for #581

2026-06-28 23:28:01 +02:00

workflows

ci(test): report whether unprivileged userns is actually available

2026-09-13 10:35:41 +02:00

CODEOWNERS

docs: make maintainer policy project-oriented

2026-06-29 00:00:10 +02:00

dependabot.yml

Pin Actions to SHA + enforce via security audit + Dependabot

2026-03-21 16:57:17 +01:00

issue-labeler.yml

fix(ci): issue labeler no-oped on every issue — (?i) is invalid in JS RegExp

2026-07-10 00:03:43 +02:00

label-actions.yml

ci: add issue-triage bots (stale, label-actions, area-labeler)

2026-06-24 01:18:29 +02:00

pr-acknowledgement.md

docs(ci): tell contributors the release freeze is over, not that it is ongoing

2026-07-31 02:29:13 +02:00

pull_request_template.md

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00