The VM jobs vary the kernel while running the daemon and tests inside the
Debian development image. This masks the guest's userspace, systemd, and
security configuration, limiting the host OS coverage of these jobs.
Build the pinned dependency bundle on the runner, provision native guest
packages and the rootless account, and invoke the harness in the guest.
The development image and make previously supplied the tools, account,
Git configuration, and GitHub Actions environment; native execution needs
these set up explicitly. Use fuse-overlayfs for rootless SELinux guests.
Install the bundle as root without overwriting existing guest directory
metadata, and make bundles/ traversable before copying the checkout.
BuildKit exports have runner ownership and mode 0700, including newly
created parents. DIND did not extract these onto the guest or copy their
permissions into daemon binary and data paths. Move the export outside
the checkout so source and report copies exclude build dependencies.
Document provisioning and native integration test commands for local VMs.
Assisted-by: Codex
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Akihiro Suda
7a85699d57