tests.yml

name: Tests

on:
  push:
    branches:
      - main
  pull_request:

env:
  CARGO_TERM_COLOR: always
  RUST_BACKTRACE: 1

jobs:
  test-macos:
    name: macOS Integration Tests
    runs-on: macos-15-xlarge

    steps:
      - uses: actions/checkout@v4

      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: stable

      - name: Setup Rust cache
        uses: Swatinem/rust-cache@v2

      - name: Install nextest
        uses: taiki-e/install-action@nextest

      - name: Build
        run: cargo build --verbose

      - name: Run unit tests
        run: cargo nextest run --profile ci --bins --verbose

      - name: Run smoke tests
        run: cargo nextest run --profile ci --test smoke_test --verbose

      - name: Run weak mode integration tests
        run: |
          # On macOS, we only support weak mode due to PF limitations
          # (PF translation rules cannot match on user/group)
          cargo nextest run --profile ci --test weak_integration --verbose

  test-linux:
    name: Linux Tests
    runs-on: [self-hosted, linux]

    steps:
      - name: Fix permissions from previous runs
        run: |
          # Clean up any files left from previous sudo runs before checkout
          # Use GITHUB_WORKSPACE parent directory or current working directory
          WORK_DIR="${GITHUB_WORKSPACE:-$(pwd)}"
          if [ -d "$WORK_DIR" ]; then
            sudo chown -R ci:ci "$WORK_DIR" || true
          fi
          # Ensure cargo cache has correct permissions
          if [ -d /home/ci/.cargo ]; then
            sudo chown -R ci:ci /home/ci/.cargo || true
          fi
      - uses: actions/checkout@v4

      - name: Fix permissions on current directory
        run: |
          # Clean up any files left from previous sudo runs
          if [ -d target ]; then
            sudo chown -R ci:ci target || true
          fi
          # Fix cargo registry permissions to enable cache reuse
          if [ -d /home/ci/.cargo/registry ]; then
            sudo chown -R ci:ci /home/ci/.cargo/registry || true
          fi
          # Ensure git index cache has correct permissions
          if [ -d /home/ci/.cargo/git ]; then
            sudo chown -R ci:ci /home/ci/.cargo/git || true
          fi

      - name: Setup Rust environment and install nextest
        run: |
          source ~/.cargo/env
          
          # Install nextest if not already present
          if ! command -v cargo-nextest &> /dev/null; then
            cargo install cargo-nextest --locked
          fi

      - name: Build
        run: |
          source ~/.cargo/env
          # Use incremental compilation for faster builds
          export CARGO_INCREMENTAL=1
          cargo build --verbose

      - name: Run unit tests
        run: |
          source ~/.cargo/env
          cargo nextest run --profile ci --bins --verbose

      - name: Run smoke tests
        run: |
          source ~/.cargo/env
          cargo nextest run --profile ci --test smoke_test --verbose

      - name: Run Linux jail integration tests
        run: |
          source ~/.cargo/env
          # Run all tests without CI workarounds since this is a self-hosted runner
          sudo -E $(which cargo) nextest run --profile ci --test linux_integration --verbose

      - name: Run isolated cleanup tests
        run: |
          source ~/.cargo/env
          # Run only the comprehensive cleanup and sigint tests with the feature flag
          # These tests need to run in isolation from other tests
          sudo -E $(which cargo) test --test linux_integration --features isolated-cleanup-tests -- test_comprehensive_resource_cleanup test_cleanup_after_sigint

  test-weak:
    name: Weak Mode Integration Tests (Linux)
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: stable

      - name: Setup Rust cache
        uses: Swatinem/rust-cache@v2

      - name: Install nextest
        uses: taiki-e/install-action@nextest

      - name: Build
        run: cargo build --verbose

      - name: Run weak mode integration tests
        run: cargo nextest run --profile ci --test weak_integration --verbose

  clippy:
    name: Clippy (${{ matrix.os }})
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os: [ubuntu-latest, macos-latest]

    steps:
      - uses: actions/checkout@v4

      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: stable
          components: clippy

      - name: Setup Rust cache
        uses: Swatinem/rust-cache@v2

      - name: Run clippy
        run: cargo clippy --all-targets -- -D warnings

  fmt:
    name: Format
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Install Rust
        uses: dtolnay/rust-toolchain@stable
        with:
          toolchain: stable
          components: rustfmt

      - name: Check formatting
        run: cargo fmt -- --check