Skip to content

ci: run the qsys-mac-installer smoke test on the macOS leg - #11

Merged
reowens merged 1 commit into
mainfrom
ci/installer-smoke-test
Jul 10, 2026
Merged

reowens merged 1 commit into
mainfrom
ci/installer-smoke-test

Conversation

@reowens

@reowens reowens commented Jul 10, 2026

Copy link
Copy Markdown
Owner

The last remaining item from the 2026-07-09 audit: scripts/test.sh existed but no workflow invoked it, so the installer's guarantees went unchecked in CI.

What this adds

A macOS-only step on the existing test job that runs packages/qsys-mac-installer/scripts/test.sh with QSYS_SKIP_XCODE=1. Guarded by if: matrix.os == 'macos-latest', so the two Linux legs skip it.

What CI now enforces on every PR:

  • Shell syntax across all 9 installer scripts
  • WINEDLLOVERRIDES launch-path parity (dev / generated .app / installed GUI — the drift guard)
  • MSI path-containment fixtures (traversal-safety check)
  • Wine process-cleanup harness (stubs wineserver, so no real Wine is needed — CI-safe)

What it deliberately doesn't cover

The xcodebuild compile. The Installer target copies Resources/{bin,cache}, which are gitignored and only materialized by bundle-deps.sh (it downloads the Wine + .NET bundle). In a clean checkout those dirs are absent, so xcodegen generate fails spec validation ("missing source directory") before any build runs — that Swift compile belongs to packaging, not a per-PR gate.

If we want that coverage later, the clean way is a separate, path-filtered job (only when packages/qsys-mac-installer/** changes) that runs bundle-deps.sh then the full test.sh — heavier, so it shouldn't gate every PR.

Verification

Verified against a clean git worktree (tracked files only, mirroring the CI runner): the full script fails at xcodegen as described; QSYS_SKIP_XCODE=1 exits 0 with "all checks passed". ci.yml parses and the step is attached to the macOS leg only.

🤖 Generated with Claude Code

The last remaining item from the 2026-07-09 audit: scripts/test.sh existed but
no workflow invoked it, so the installer's guarantees went unchecked in CI.

Adds a macOS-only step to the existing job that runs test.sh with
QSYS_SKIP_XCODE=1 — shell-syntax across the 9 installer scripts, WINEDLLOVERRIDES
launch-path parity (dev / generated .app / installed GUI), the MSI
path-containment fixtures, and the Wine process-cleanup harness (which stubs
wineserver, so no real Wine is required). Guarded by
`if: matrix.os == 'macos-latest'` so the two Linux legs skip it.

The xcodebuild half is deliberately skipped: the Installer target copies
Resources/{bin,cache}, which are gitignored and only populated by bundle-deps.sh
(it downloads the Wine + .NET bundle). In a clean checkout those dirs are absent,
so `xcodegen generate` fails spec validation before any build runs — that Swift
compile belongs to packaging, not a per-PR gate.

Verified against a clean `git worktree` (tracked files only, mirroring the CI
runner): the full script fails at xcodegen as described; QSYS_SKIP_XCODE=1 exits
0 with "all checks passed". ci.yml parses and the step is attached to the macOS
leg only.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@reowens
reowens merged commit f6a62d2 into main Jul 10, 2026
3 checks passed
@reowens
reowens deleted the ci/installer-smoke-test branch July 10, 2026 22:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant