Martin Vogel ac8f5b8a81 ci(test): report whether unprivileged userns is actually available ...

The sysctl that lifts the AppArmor restriction is best-effort, and the test
runner prints per-shard aggregates only -- 'N passed, M skipped', never
individual test names. So if the sysctl stopped working, the #1830 namespace
test would quietly return to skipping and the log would stay green and look
identical. That is the same false assurance that let a security relaxation ship
behind a test which never executed.

Probe it the way the test does (unprivileged, no sudo) and print the answer, so
there is one greppable line of evidence per ubuntu leg. Deliberately not a gate:
a runner that cannot lift the restriction should still run everything else.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-09-13 10:35:41 +02:00

..

_build.yml

build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2

2026-08-22 05:55:41 +00:00

_lint.yml

ci: repin the apt.llvm.org ASan + analyzer lanes to clang-21

2026-09-09 21:05:29 +02:00

_security.yml

fix(ci): make the code-scanning gate able to see alerts, and fail closed

2026-09-12 20:07:33 +02:00

_smoke.yml

fix(ci): finish the single-composition sweep in the smoke workflow

2026-08-10 08:40:29 +02:00

_soak.yml

ci: select release binaries before smoke testing

2026-08-13 19:16:19 +02:00

_test.yml

ci(test): report whether unprivileged userns is actually available

2026-09-13 10:35:41 +02:00

bug-repro.yml

build(deps): bump actions/checkout from 7.0.0 to 7.0.1

2026-08-04 09:58:51 +00:00

cache-warm.yml

build(deps): bump actions/checkout from 7.0.0 to 7.0.1

2026-08-04 09:58:51 +00:00

codeql.yml

chore(deps): bump github/codeql-action init+analyze to v4.37.9 together

2026-08-30 16:39:49 +02:00

dco.yml

build(deps): bump actions/checkout from 7.0.0 to 7.0.1

2026-08-04 09:58:51 +00:00

dry-run.yml

fix(ci): grant the security permissions in dry-run.yml, and derive the caller list

2026-09-13 01:27:43 +02:00

fast-repro.yml

build(deps): bump actions/checkout from 7.0.0 to 7.0.1

2026-08-04 09:58:51 +00:00

issue-labeler.yml

build(deps): bump actions/checkout from 7.0.0 to 7.0.1

2026-08-04 09:58:51 +00:00

label-actions.yml

ci: add issue-triage bots (stale, label-actions, area-labeler)

2026-06-24 01:18:29 +02:00

nightly-soak.yml

ci: unify smoke/soak/test venues onto canonical leg entries

2026-07-26 22:23:05 +02:00

pages.yml

build(deps): bump actions/deploy-pages from 5.0.0 to 5.0.1

2026-09-05 05:46:19 +00:00

pr-acknowledgement.yml

build(deps): bump actions/checkout from 7.0.0 to 7.0.1

2026-08-04 09:58:51 +00:00

pr.yml

fix(ci): make the code-scanning gate able to see alerts, and fail closed

2026-09-12 20:07:33 +02:00

release.yml

fix(ci): make the code-scanning gate able to see alerts, and fail closed

2026-09-12 20:07:33 +02:00

scorecard.yml

chore(deps): Bump github/codeql-action/upload-sarif

2026-08-29 05:45:38 +00:00

smoke.yml

fix(release): externalize runtime assets and harden VT verification

2026-08-08 17:35:05 +02:00

stale.yml

build(deps): bump actions/stale from 10.4.0 to 11.0.0

2026-08-08 05:42:37 +00:00