ci: run the forge tests as a normal user in the CI gate job #693

New issue

Open

opened 2026-10-03 16:55:53 +00:00 by hexajon · 0 comments

hexajon commented

2026-10-03 16:55:53 +00:00

Owner

What

The CI gate job runs in the golang:1.27-trixie container as root. The
workflow sets no user, and the Go build cache mounts at
/root/.cache/go-build. Forgejo and Gitea refuse to start as root, and the
harness neither switches user nor turns off that refusal. So when the forge
tests run in CI, every forge test fails there.

What to build

The CI gate job runs go test as a normal user.
The Go cache mounts move to the home directory of that user.
That user can read and write the checkout and the caches.

Acceptance

The CI gate log shows that the forge tests ran as a non-root user against
both forges, with no skipped forge test.
No CI step turns off the refusal of a forge to run as root.

Part of #674. #678 needs this.

## What The CI `gate` job runs in the `golang:1.27-trixie` container as root. The workflow sets no user, and the Go build cache mounts at `/root/.cache/go-build`. Forgejo and Gitea refuse to start as root, and the harness neither switches user nor turns off that refusal. So when the forge tests run in CI, every forge test fails there. ## What to build - The CI `gate` job runs `go test` as a normal user. - The Go cache mounts move to the home directory of that user. - That user can read and write the checkout and the caches. ## Acceptance - The CI `gate` log shows that the forge tests ran as a non-root user against both forges, with no skipped forge test. - No CI step turns off the refusal of a forge to run as root. Part of #674. #678 needs this.

hexajon added a new dependency

2026-10-03 16:55:58 +00:00

#678 ci: run the forge tests on the harness in the gate and in CI, and remove the docker-exec smoke job

hexajon added a new dependency

2026-10-03 16:55:58 +00:00

#674 epic: run forge tests against throwaway Forgejo and Gitea servers behind a real proxy

hexajon referenced this issue

2026-10-03 18:06:02 +00:00

docs(adr): record the forge-test rules in a new ADR #695

hexajon referenced this issue

2026-10-17 16:48:15 +00:00

bug(forge-test): the adr live forge test fails under the push-model runner, which ships no .git #795