tarantool: support luzer-based testing

[ligurio]

• Depends on Support integration with luzer #13929
• Depends on Support OSS Fuzz environment ligurio/luzer#74
• Depends on cmake: fix AR searching ligurio/luzer#76
• Depends on cmake: introduce option OSS_FUZZ ligurio/luzer#78
• Depends on cmake: bump luzer to a new version ligurio/lunapark#163
• Depends on Support Lua fuzzing tests in OSS FUZZ tarantool/tarantool#12097

[github-actions]

ligurio is integrating a new project:
- Main repo: https://github.com/ligurio/luzer
- Criticality score: 0.23719
ligurio is either the primary contact or is in the CCs list of projects/tarantool.
ligurio has previously contributed to projects/tarantool. The previous PR was #13379
ligurio is either the primary contact or is in the CCs list of projects/lua.
ligurio has previously contributed to projects/lua. The previous PR was #12685

[ligurio]

@jonathanmetzman can we merge these changes with minimal support for luzer (luarocks in base images and fixing bad_build_check)?

From 90b4b45f982540274aedd96bbdfc2ccc22ae4ba9 Mon Sep 17 00:00:00 2001
From: Sergey Bronnikov <estetus@gmail.com>
Date: Sun, 4 Jan 2026 14:43:34 +0300
Subject: [PATCH] base-images: minimal support luzer

The patch allows testing C/C++ projects via Lua C API.
---
 infra/base-images/base-runner/Dockerfile              | 1 +
 infra/base-images/base-runner/bad_build_check         | 3 +++
 infra/base-images/base-runner/ubuntu-20-04.Dockerfile | 2 ++
 infra/base-images/base-runner/ubuntu-24-04.Dockerfile | 2 ++
 4 files changed, 8 insertions(+)

diff --git a/infra/base-images/base-runner/Dockerfile b/infra/base-images/base-runner/Dockerfile
index 5f5f455f11f1..9a4302ea7368 100644
--- a/infra/base-images/base-runner/Dockerfile
+++ b/infra/base-images/base-runner/Dockerfile
@@ -117,6 +117,7 @@ COPY --from=base-ruby /usr/local/bin/gem /usr/local/bin/gem
 COPY --from=base-ruby /usr/local/lib/ruby /usr/local/lib/ruby
 COPY --from=base-ruby /usr/local/include/ruby-3.3.0 /usr/local/include/ruby-3.3.0
 
+RUN apt-get update && apt-get install -y luarocks
 
 # Do this last to make developing these files easier/faster due to caching.
 COPY bad_build_check \
diff --git a/infra/base-images/base-runner/bad_build_check b/infra/base-images/base-runner/bad_build_check
index e3f4787e865e..137fe6576168 100755
--- a/infra/base-images/base-runner/bad_build_check
+++ b/infra/base-images/base-runner/bad_build_check
@@ -349,6 +349,9 @@ function check_mixed_sanitizers {
     echo "UNSUPPORTED ARCHITECTURE"
     exit 1
   fi
+
+  egrep luarocks $FUZZER && return 0;
+
   local ASAN_CALLS=$(objdump -dC $FUZZER | egrep "${CALL_INSN}__asan" -c)
   local DFSAN_CALLS=$(objdump -dC $FUZZER | egrep "${CALL_INSN}__dfsan" -c)
   local MSAN_CALLS=$(objdump -dC $FUZZER | egrep "${CALL_INSN}__msan" -c)
diff --git a/infra/base-images/base-runner/ubuntu-20-04.Dockerfile b/infra/base-images/base-runner/ubuntu-20-04.Dockerfile
index c421cb21a003..7207d8cb2c13 100644
--- a/infra/base-images/base-runner/ubuntu-20-04.Dockerfile
+++ b/infra/base-images/base-runner/ubuntu-20-04.Dockerfile
@@ -117,6 +117,8 @@ COPY --from=base-ruby /usr/local/bin/gem /usr/local/bin/gem
 COPY --from=base-ruby /usr/local/lib/ruby /usr/local/lib/ruby
 COPY --from=base-ruby /usr/local/include/ruby-3.3.0 /usr/local/include/ruby-3.3.0
 
+RUN apt-get update && apt-get install -y luarocks
+
 # Do this last to make developing these files easier/faster due to caching.
 COPY bad_build_check \
     coverage \
diff --git a/infra/base-images/base-runner/ubuntu-24-04.Dockerfile b/infra/base-images/base-runner/ubuntu-24-04.Dockerfile
index 2e252a25ffd8..5addb421416b 100644
--- a/infra/base-images/base-runner/ubuntu-24-04.Dockerfile
+++ b/infra/base-images/base-runner/ubuntu-24-04.Dockerfile
@@ -117,6 +117,8 @@ COPY --from=base-ruby /usr/local/bin/gem /usr/local/bin/gem
 COPY --from=base-ruby /usr/local/lib/ruby /usr/local/lib/ruby
 COPY --from=base-ruby /usr/local/include/ruby-3.3.0 /usr/local/include/ruby-3.3.0
 
+RUN apt-get update && apt-get install -y luarocks
+
 # Do this last to make developing these files easier/faster due to caching.
 COPY bad_build_check \
     coverage \

[ligurio]

build (libfuzzer, undefined, x86_64)
build (centipede, address, x86_64)

DENABLE_ASAN=OFF -P /src/tarantool/cmake/CheckDependencies.cmake
Dependency: /lib/x86_64-linux-gnu/libc.so.6
Dependency: /lib/x86_64-linux-gnu/libdl.so.2
Dependency: /lib/x86_64-linux-gnu/libgcc_s.so.1
Dependency: /lib/x86_64-linux-gnu/libm.so.6
Dependency: /lib/x86_64-linux-gnu/libpthread.so.0
Dependency: /lib/x86_64-linux-gnu/libresolv.so.2
Dependency: /lib/x86_64-linux-gnu/librt.so.1
Dependency: /lib/x86_64-linux-gnu/libstdc++.so.6
CMake Error at /src/tarantool/cmake/CheckDependencies.cmake:52 (message):
  Blocklisted dependency: /lib/x86_64-linux-gnu/libresolv.so.2

build (afl, address, x86_64)

 /usr/bin/make  -f luzer/CMakeFiles/strip_lib_asan.dir/build.make luzer/CMakeFiles/strip_lib_asan.dir/build
make[6]: Entering directory '/src/tarantool/build/luzer/build'
[ 62%] Strip sanitizer library asan
make[6]: Leaving directory '/src/tarantool/build/luzer/build'
cd /src/tarantool/build/luzer/build/luzer && CMAKE_C_COMPILER_AR-NOTFOUND d libclang_rt.asan.a asan_preinit.cc.o asan_preinit.cpp.o
/bin/sh: 1: CMAKE_C_COMPILER_AR-NOTFOUND: not found
make[6]: *** [luzer/CMakeFiles/strip_lib_asan.dir/build.make:71: luzer/CMakeFiles/strip_lib_asan] Error 127

build (honggfuzz, address, x86_64)

 + [[ honggfuzz != libfuzzer ]]
+ return
/src/build.sh: line 119: return: can only `return' from a function or sourced script
ERROR:__main__:Building fuzzers failed.

build (libfuzzer, address, x86_64)

Broken fuzz targets 16

/tmp/not-out/tmpu_glwdq1/table_pack_test -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Unsupported version.
/tmp/not-out/tmpu_glwdq1/table_pack_test -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Unsupported version.
/tmp/not-out/tmpu_glwdq1/math_tointeger_test -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Unsupported version.
/tmp/not-out/tmpu_glwdq1/math_tointeger_test -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Unsupported version.
/tmp/not-out/tmpu_glwdq1/string_pack_test -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Unsupported version.
/tmp/not-out/tmpu_glwdq1/string_pack_test -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Unsupported version.
/tmp/not-out/tmpu_glwdq1/utf8_codepoint_test -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Unsupported version.
/tmp/not-out/tmpu_glwdq1/utf8_char_test -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Unsupported version.
/tmp/not-out/tmpu_glwdq1/utf8_char_test -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Unsupported version.
/tmp/not-out/tmpu_glwdq1/string_packsize_test -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Unsupported version.

<snipped>

BAD BUILD: /tmp/not-out/tmpu_glwdq1/test_engine seems to have either startup crash or exit:
vm.mmap_rnd_bits = 28
/tmp/not-out/tmpu_glwdq1/test_engine -- -rss_limit_mb=2560 -timeout=25 -seed=1337 -runs=4 < /dev/null
Can't open script /tmp/not-out/tmpu_glwdq1/test/fuzz/lua/test_engine.lua: No such file or directory

BAD BUILD: /tmp/not-out/tmpu_glwdq1/misc_sysprof_test seems to have either startup crash or exit:
/tmp/not-out/tmpu_glwdq1/misc_sysprof_test.lua:20: profiler misuse: profiler is disabled {"type":"LuajitError","trace":[{"file":"src/lua/utils.c","line":700}]}