Skip to content

test(sandbox): isolate Landlock descriptor-limit regression - #4457

Merged
johntmyers merged 1 commit into
NVIDIA:mainfrom
grs:test/4455-isolate-landlock-fd-test/grs
Oct 14, 2026
Merged

johntmyers merged 1 commit into
NVIDIA:mainfrom
grs:test/4455-isolate-landlock-fd-test/grs

Conversation

@grs

@grs grs commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

Summary

Fix an intermittent Landlock regression test failure caused by counting descriptors shared with concurrently running tests. Verify actual baseline preparation in an isolated subprocess under a low descriptor limit.

Related Issue

Closes #4455

Changes

  • Replace process-wide descriptor counting with preparation of 128 entries under a 64-descriptor limit.
  • Confine the descriptor-limit change to a subprocess.

Testing

  • Checks appropriate to the affected code and behavior pass
  • Unit tests added/updated (if applicable)
  • E2E tests added/updated (if applicable)

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)
  • Architecture docs updated (if applicable)

Signed-off-by: Gordon Sim <gsim@redhat.com>
@copy-pr-bot

copy-pr-bot Bot commented Oct 13, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@johntmyers johntmyers added the test:e2e Requires end-to-end coverage label Oct 14, 2026
@johntmyers

Copy link
Copy Markdown
Collaborator

/ok to test c6c5e39

@github-actions

Copy link
Copy Markdown

Label test:e2e applied for c6c5e39. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway, sandbox, and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.

@johntmyers johntmyers left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

gator-agent

PR Review Status

The isolated descriptor-limit regression test matches #4455 and exercises the production Landlock baseline preparation path. The independent code review found no blocking issues.

Test dispatch is temporarily blocked: the E2E Label Help bot requested Re-run all jobs, but GitHub refuses to rerun the current attempt while it remains active. I requested cancellation; the supervisor will retry the authorized rerun after this attempt finishes. Some build jobs show failures, but their logs are currently inaccessible from this sandbox, so their cause is not yet established.

Action required: Gator should confirm cancellation/completion, rerun the current-head E2E workflow, and verify a new attempt before advancing to pipeline monitoring. No author code change is requested by this review.

Blocking findings: None.
Carried findings: None.
Non-blocking suggestions: None.

Gator metadata
  • Validation: Focused test correction with reproduction and acceptance criteria in #4455; no duplicate implementation identified.
  • Docs: Not needed; only a regression test changes, with no user-facing behavior change.
  • Checks: DCO, vouch, Helm Lint, and Trivy Changes pass; Branch Checks are running.
  • E2E: test:e2e applied; /ok to test posted with the freshly read full current head; mirror is current. E2E rerun is awaiting completion of attempt 1 after a cancellation request.
  • Head SHA: c6c5e397b4c3a2d2c76b490c40631a69dc68f4f8
  • Base SHA: 5e414eadde83644d7a8a27554313b74a8bd61639
  • Merge base SHA: ca187123dd807f5e0f1cbeae64dcbf32245c296f
  • Patch ID: 8bb288437833d184a4b2f17842d3f92a62176441
  • Gator payload: 12
  • Review mode: initial
  • Previous reviewed SHA: none
  • Review budget exhausted: no
  • Maintainer decision required: no
  • Next state: gator:blocked
  • Blocked reason: test_dispatch_required

@johntmyers johntmyers added gator:blocked Gator is blocked by process or repository gates gator:watch-pipeline Gator is monitoring PR CI/CD status gator:approval-needed Gator completed review; maintainer approval needed and removed gator:blocked Gator is blocked by process or repository gates gator:watch-pipeline Gator is monitoring PR CI/CD status labels Oct 14, 2026
@johntmyers
johntmyers added this pull request to the merge queue Oct 14, 2026
@johntmyers johntmyers removed the gator:approval-needed Gator completed review; maintainer approval needed label Oct 14, 2026
Merged via the queue into NVIDIA:main with commit 91385f4 Oct 14, 2026
145 of 175 checks passed
@johntmyers

Copy link
Copy Markdown
Collaborator

gator-agent

Monitoring Complete

Monitoring is complete because this PR has merged. The independent review found no blocking issues, all required checks including E2E passed, and @johntmyers approved the current head.

I removed the active gator:* label because there is nothing left for gator to monitor on this PR.

Gator metadata
  • Head SHA: c6c5e397b4c3a2d2c76b490c40631a69dc68f4f8
  • Gator payload: 12

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

test:e2e Requires end-to-end coverage

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Landlock descriptor regression test fails intermittently during parallel CI runs

2 participants