ci: reduce memory and disk usage in test-convert jobs

- Remove --tmpfs /tmp from the test container. The work directory created
  by cryptpilot-convert.sh inside /tmp can reach ~40 GB (rootfs.img +
  work qcow2), far exceeding the 7 GB RAM available on ubuntu-latest
  runners. Without the tmpfs flag /tmp uses Docker overlay storage backed
  by host disk, eliminating the OOM that caused encrypted test cases to
  fail after ~53 minutes.

- Delete the pulled test docker image immediately after extracting the
  qcow2 file, freeing several GB of Docker layer cache.

- In run_test_case, delete input.qcow2 and SOURCE_IMAGE right after
  conversion succeeds. output.qcow2 is a standalone image and does not
  reference these files, so they are safe to remove before the verify
  and QEMU boot steps. This reclaims ~20.5 GB of disk space during the
  most resource-intensive part of the test.

- Add a disk/memory reporting step (df -h && free -h) before starting
  the test container to aid future debugging.

Author: imlk0

.github/workflows/build-rpm.yml

@@ -212,6 +212,11 @@ jobs:
           docker cp temp-extract:/image.qcow2 ${{ github.workspace }}/test-images/test-image.qcow2
           docker rm temp-extract
           ls -lh ${{ github.workspace }}/test-images/test-image.qcow2
+          echo "Removing pulled test image to reclaim disk space..."
+          docker rmi "$TEST_IMAGE"
+
+      - name: Check available disk and memory
+        run: df -h && echo "---" && free -h
 
       - name: Start test container
         run: |
@@ -222,7 +227,6 @@ jobs:
             -v /dev:/dev \
             -v /run/udev/control:/run/udev/control \
             -v ${{ github.workspace }}:/workspace \
-            --tmpfs /tmp:exec,size=20G \
             alibaba-cloud-linux-3-registry.cn-hangzhou.cr.aliyuncs.com/alinux3/alinux3:latest \
             sleep infinity
 
@@ -273,7 +277,9 @@ jobs:
 
       - name: Cleanup
         if: always()
-        run: docker rm -f test-container || true
+        run: |
+          docker rm -f test-container || true
+          rm -rf ${{ github.workspace }}/test-images
 
   release:
     if: startsWith(github.ref, 'refs/tags/')

tests/test-convert.sh

@@ -624,6 +624,12 @@ run_test_case() {
         return 1
     fi
 
+    # Free input image and source immediately after conversion to reclaim disk space.
+    # output.qcow2 is a standalone image that no longer depends on these files.
+    log::info "Freeing input image and source to reclaim disk space..."
+    rm -f "${input_image}"
+    rm -f "${SOURCE_IMAGE}"
+
     # Verify the result
     if ! verify_converted_image "${test_name}" "${output_image}" "${use_uki}" "${use_encryption}"; then
         return 1
@@ -634,9 +640,9 @@ run_test_case() {
         return 1
     fi
 
-    # Clean up test-specific files to save space
+    # Clean up remaining test-specific files
     log::info "Cleaning up test files for: ${test_name}"
-    rm -f "${input_image}" "${output_image}"
+    rm -f "${output_image}"
 
     log::success "Test case passed: ${test_name}"
     return 0