refactor: rename VM instance from 'torrust-vm' to 'torrust-tracker-vm' #94
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # LXD Container Provisioning Test Workflow | |
| # | |
| # This workflow tests that LXD container provisioning works correctly in GitHub Actions runners. | |
| # It's a continuous integration test to ensure our OpenTofu LXD provider configuration is valid | |
| # and can successfully create containers in shared CI environments. | |
| # | |
| # PURPOSE: | |
| # - Validates OpenTofu configuration syntax and LXD provider integration | |
| # - Tests container creation, initialization, and basic functionality | |
| # - Ensures cloud-init scripts work properly in containerized environments | |
| # - Provides confidence that LXD provisioning works in CI/CD pipelines | |
| # | |
| # SCOPE: | |
| # - Uses static configuration fixtures (no dynamic templating) to avoid application coupling | |
| # - Tests infrastructure provisioning only (no application deployment) | |
| # - Focuses on LXD container lifecycle management and basic system validation | |
| # | |
| # This is NOT a full end-to-end test but a focused infrastructure validation workflow. | |
| name: Test LXD Container Provisioning | |
| # NOTE: This workflow uses CI-specific approaches like 'sudo chmod 666' on the LXD socket | |
| # and 'sudo' with LXD commands. These approaches are NOT recommended for local development. | |
| # For local use, follow the proper group membership approach documented in templates/tofu/lxd/README.md | |
| # | |
| # NETWORK TUNING: We use smorimoto/tune-github-hosted-runner-network to fix flaky networking | |
| # issues that may affect container provisioning in GitHub Actions. | |
| # See: https://github.com/actions/runner-images/issues/1187 | |
| on: | |
| push: | |
| branches: [main, develop] | |
| pull_request: | |
| branches: [main] | |
| workflow_dispatch: # Allow manual triggering | |
| jobs: | |
| test-lxd-provision: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 # Set reasonable timeout for LXD provisioning | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Tune GitHub-hosted runner network | |
| uses: smorimoto/tune-github-hosted-runner-network@v1 | |
| - name: Install and configure LXD | |
| run: ./scripts/setup/install-lxd-ci.sh | |
| - name: Install OpenTofu | |
| run: ./scripts/setup/install-opentofu.sh | |
| - name: Setup Rust toolchain and build template system | |
| uses: dtolnay/rust-toolchain@stable | |
| with: | |
| toolchain: stable | |
| - name: Cache Rust dependencies | |
| uses: Swatinem/rust-cache@v2 | |
| - name: Render template configurations | |
| run: | | |
| # Build the template system and render the static templates | |
| cargo build --release | |
| # For this workflow, we use static fixtures without variables for testing | |
| mkdir -p build | |
| cp -r templates/* build/ | |
| # Override the dynamic cloud-init template with static fixture | |
| cp fixtures/tofu/lxd/cloud-init.yml build/tofu/lxd/cloud-init.yml | |
| - name: Verify installations | |
| run: | | |
| sudo lxc version | |
| tofu version | |
| - name: Test LXD socket permissions | |
| run: | | |
| # Test that LXD commands work without sudo due to socket permissions | |
| lxc version | |
| lxc list | |
| - name: Initialize OpenTofu | |
| working-directory: build/tofu/lxd | |
| run: tofu init | |
| - name: Validate OpenTofu configuration | |
| working-directory: build/tofu/lxd | |
| run: tofu validate | |
| - name: Plan deployment | |
| working-directory: build/tofu/lxd | |
| run: tofu plan | |
| - name: Apply configuration | |
| working-directory: build/tofu/lxd | |
| run: | | |
| # Use tofu without sudo since socket permissions are set up | |
| # NOTE: For local development, use "sg lxd -c 'tofu apply'" instead | |
| tofu apply -auto-approve | |
| - name: Wait for container to be ready | |
| run: | | |
| echo "Waiting for container to be fully initialized..." | |
| sleep 30 | |
| # Wait up to 5 minutes for cloud-init to complete | |
| timeout=300 | |
| elapsed=0 | |
| while [ $elapsed -lt $timeout ]; do | |
| if lxc exec torrust-tracker-vm -- test -f /tmp/provision_complete 2>/dev/null; then | |
| echo "Container provisioning completed successfully!" | |
| break | |
| fi | |
| echo "Waiting for container provisioning to complete... ($elapsed/$timeout seconds)" | |
| sleep 10 | |
| elapsed=$((elapsed + 10)) | |
| done | |
| if [ $elapsed -ge $timeout ]; then | |
| echo "Timeout waiting for container provisioning to complete" | |
| exit 1 | |
| fi | |
| - name: Test container functionality | |
| run: | | |
| # Test basic connectivity | |
| lxc list | |
| lxc info torrust-tracker-vm | |
| # Test command execution | |
| lxc exec torrust-tracker-vm -- whoami | |
| # Test system information with error handling | |
| echo "Getting system information..." | |
| lxc exec torrust-tracker-vm -- cat /etc/os-release || echo "os-release failed" | |
| sleep 1 | |
| lxc exec torrust-tracker-vm -- df -h || echo "df failed" | |
| sleep 1 | |
| lxc exec torrust-tracker-vm -- free -h || echo "free failed" | |
| sleep 1 | |
| # Test cloud-init functionality | |
| echo "Testing cloud-init..." | |
| lxc exec torrust-tracker-vm -- cloud-init status || echo "cloud-init status failed" | |
| sleep 1 | |
| # Test user creation | |
| echo "Testing user creation..." | |
| lxc exec torrust-tracker-vm -- id torrust || echo "torrust user not found" | |
| sleep 1 | |
| # Test systemd services | |
| echo "Testing systemd..." | |
| lxc exec torrust-tracker-vm -- systemctl status ssh || echo "ssh service check failed" | |
| - name: Get container outputs | |
| working-directory: build/tofu/lxd | |
| run: tofu output | |
| - name: Cleanup | |
| if: always() | |
| working-directory: build/tofu/lxd | |
| run: | | |
| echo "Cleaning up container..." | |
| # Use tofu without sudo since socket permissions are set up | |
| # NOTE: For local development, use "sg lxd -c 'tofu destroy'" instead | |
| tofu destroy -auto-approve || true | |
| lxc delete torrust-tracker-vm --force || true | |
| - name: Final verification | |
| if: always() | |
| run: | | |
| echo "Verifying cleanup..." | |
| lxc list |