ci: stabilize Linux Podman E2E setup

[skevetter]

Summary

Extracted Podman CI setup improvements from PR #1179 to stabilize Linux Podman E2E workflow runs independently:

• Pin Podman E2E matrix runners to ubuntu-24.04 in .github/workflows/pr-ci.yml
• Introduce hack/ci/setup-podman-linux.sh to configure and validate rootless and rootful Podman setups, enforce crun OCI runtime, and reload AppArmor profiles when required
• Refactor inline Podman setup steps in .github/workflows/pr-ci.yml to delegate to hack/ci/setup-podman-linux.sh

Summary by CodeRabbit

• Chores
  • Updated integration testing to run Podman-based checks on Ubuntu 24.04.
  • Standardized Podman setup across rootless and rootful test environments.
  • Added validation for the configured OCI runtime, socket readiness, and basic container execution before tests run.

[netlify]

✅ Deploy Preview for images-devsy-sh canceled.

Name	Link
🔨 Latest commit	a0a79d5
🔍 Latest deploy log	https://app.netlify.com/projects/images-devsy-sh/deploys/6a9efee028ca67000786f017

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 00d27f86-c11b-4844-937c-de8dee95877b

📥 Commits

Reviewing files that changed from the base of the PR and between 8db813b and a0a79d5.

📒 Files selected for processing (2)

• .github/workflows/pr-ci.yml
• hack/ci/setup-podman-linux.sh

---

📝 Walkthrough

Walkthrough

The workflow pins Podman integration jobs to Ubuntu 24.04. A new script centralizes rootless and rootful Podman setup, crun configuration, socket handling, environment reporting, and smoke tests.

Changes

Podman CI setup

Layer / File(s)	Summary
Workflow runner and setup wiring .github/workflows/pr-ci.yml	Podman matrix jobs now use ubuntu-24.04. The workflow invokes the shared setup script with rootless or rootful.
Podman validation and runtime configuration hack/ci/setup-podman-linux.sh	The script validates its mode and required binaries, configures crun, updates the AppArmor profile when present, and prints environment details.
Rootless and rootful smoke tests hack/ci/setup-podman-linux.sh	Rootful mode enables and checks podman.socket and exports DOCKER_HOST. Both modes verify crun and run Podman smoke tests.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Sequence Diagram(s)

sequenceDiagram
  participant GitHub Actions
  participant setup-podman-linux.sh
  participant Podman
  participant systemd
  alt rootless
    GitHub Actions->>setup-podman-linux.sh: invoke with rootless
    setup-podman-linux.sh->>Podman: verify crun and run smoke test
  else rootful
    GitHub Actions->>setup-podman-linux.sh: invoke with rootful
    setup-podman-linux.sh->>systemd: enable podman.socket
    systemd-->>setup-podman-linux.sh: report socket readiness
    setup-podman-linux.sh->>Podman: verify crun and run smoke test
  end

Loading

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch extract-podman-ci-fix-pr-1179-github-workflows

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[netlify]

✅ Deploy Preview for devsydev canceled.

Name	Link
🔨 Latest commit	a0a79d5
🔍 Latest deploy log	https://app.netlify.com/projects/devsydev/deploys/6a9efee2f5ccfa000831f8cc