CI: Streaming Ring3 gate + workflow

.github/workflows/ci-test.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+# CI test script - runs Breenix exactly as in local testing
+
+echo "Starting Breenix CI test..."
+echo "Current directory: $(pwd)"
+echo "QEMU version:"
+qemu-system-x86_64 --version || echo "QEMU not found"
+
+# Run the test
+timeout 30 ./scripts/run_breenix.sh uefi -display none > ci_test.log 2>&1
+EXIT_CODE=$?
+
+echo "Test completed with exit code: $EXIT_CODE"
+
+# Check for success
+if grep -q "USERSPACE OUTPUT: Hello from userspace" ci_test.log; then
+    echo "✅ SUCCESS: Found userspace execution!"
+    grep "USERSPACE OUTPUT" ci_test.log | head -5
+    exit 0
+else
+    echo "❌ FAILED: No userspace execution found"
+    echo "Last 30 lines of output:"
+    tail -30 ci_test.log
+    exit 1
+fi

.github/workflows/kernel-ci.yml

@@ -0,0 +1,129 @@
+name: kernel-ci
+
+on:
+  pull_request:
+  push:
+    branches: [ "**" ]
+
+jobs:
+  ring3-smoke:
+    runs-on: ubuntu-22.04
+    env:
+      RUST_BACKTRACE: full
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Rust (nightly)
+        uses: dtolnay/rust-toolchain@nightly
+        with:
+          components: rust-src, llvm-tools-preview
+
+      - name: Verify Rust components
+        run: |
+          rustc -Vv
+          cargo -Vv
+          rustup component list --installed
+          echo "sysroot: $(rustc --print sysroot)"
+
+      - name: Cache cargo
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: cargo-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
+
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            qemu-system-x86 \
+            qemu-utils \
+            ovmf \
+            mtools \
+            dosfstools \
+            xorriso \
+            nasm \
+            lld
+          qemu-system-x86_64 --version || true
+          qemu-img --version || true
+          mcopy -V 2>/dev/null || true
+          mkfs.fat -v 2>/dev/null || true
+          ld --version | head -1 || true
+          ld.lld --version | head -1 || true
+          objcopy --version | head -1 || true
+          $(rustc --print sysroot)/lib/rustlib/*/bin/llvm-objcopy --version || true
+
+      - name: Prefetch dependencies
+        run: cargo fetch
+
+      - name: Build (UEFI only, warnings as errors)
+        env:
+          RUSTFLAGS: "-D warnings -A dead_code"
+        run: cargo build --release --features testing --bin qemu-uefi --verbose
+
+      - name: Ring3 smoke test (UEFI)
+        env:
+          RING3_TIMEOUT_SECONDS: "480"
+          # Optionally point to DEBUG OVMF pair cached in the repo or runner
+          # BREENIX_OVMF_CODE_PATH: ${{ github.workspace }}/third_party/ovmf/DEBUGX64_OVMF_CODE.fd
+          # BREENIX_OVMF_VARS_PATH: ${{ github.workspace }}/third_party/ovmf/DEBUGX64_OVMF_VARS.fd
+        run: |
+          set -euxo pipefail
+          # Fetch DEBUG OVMF pair (4 MiB) for decisive firmware logging (with fallback)
+          mkdir -p third_party/ovmf
+          set +e
+          curl -fsSLo third_party/ovmf/OVMF_CODE.fd https://retrage.github.io/edk2-nightly/bin/DEBUGX64/OVMF_CODE.fd
+          curl -fsSLo third_party/ovmf/OVMF_VARS.fd https://retrage.github.io/edk2-nightly/bin/DEBUGX64/OVMF_VARS.fd
+          set -e
+          if [[ ! -s third_party/ovmf/OVMF_CODE.fd || ! -s third_party/ovmf/OVMF_VARS.fd ]]; then
+            echo "DEBUG OVMF download failed; falling back to distro OVMF if available"
+            # Try 4M first, then 2M (resolve symlinks and copy real files)
+            if [[ -e /usr/share/OVMF/OVMF_CODE_4M.fd && -e /usr/share/OVMF/OVMF_VARS_4M.fd ]]; then
+              cp -f "$(readlink -f /usr/share/OVMF/OVMF_CODE_4M.fd)" third_party/ovmf/OVMF_CODE.fd
+              cp -f "$(readlink -f /usr/share/OVMF/OVMF_VARS_4M.fd)" third_party/ovmf/OVMF_VARS.fd
+            elif [[ -e /usr/share/OVMF/OVMF_CODE.fd && -e /usr/share/OVMF/OVMF_VARS.fd ]]; then
+              cp -f "$(readlink -f /usr/share/OVMF/OVMF_CODE.fd)" third_party/ovmf/OVMF_CODE.fd
+              cp -f "$(readlink -f /usr/share/OVMF/OVMF_VARS.fd)" third_party/ovmf/OVMF_VARS.fd
+            else
+              echo "ERROR: No DEBUG OVMF available and no distro firmware found"; exit 1
+            fi
+          fi
+          stat -Lc '%n %s' third_party/ovmf/OVMF_CODE.fd third_party/ovmf/OVMF_VARS.fd || stat -c '%n %s' third_party/ovmf/OVMF_CODE.fd third_party/ovmf/OVMF_VARS.fd
+          echo "OVMF sha256:"; sha256sum third_party/ovmf/OVMF_CODE.fd third_party/ovmf/OVMF_VARS.fd || true
+          echo "DEBUG OVMF strings (sanity):"; (strings third_party/ovmf/OVMF_CODE.fd | grep -m1 -E 'DEBUG|RELEASE' || true)
+          export BREENIX_OVMF_CODE_PATH="${{ github.workspace }}/third_party/ovmf/OVMF_CODE.fd"
+          export BREENIX_OVMF_VARS_PATH="${{ github.workspace }}/third_party/ovmf/OVMF_VARS.fd"
+          # ESP precheck: print UEFI image path from launcher then validate BOOTX64.EFI
+          UEFI_IMAGE_PATH=$(BREENIX_PRINT_UEFI_IMAGE=1 target/release/qemu-uefi | sed -n 's/^UEFI_IMAGE=//p')
+          echo "Resolved UEFI image: $UEFI_IMAGE_PATH"
+          if [[ -z "$UEFI_IMAGE_PATH" || ! -f "$UEFI_IMAGE_PATH" ]]; then echo "ERROR: UEFI image not found"; exit 1; fi
+          start=$(parted -sm "$UEFI_IMAGE_PATH" unit B print | awk -F: '/:.*(efi|esp)/{print $2; exit}' | sed 's/B$//')
+          if [[ -z "${start:-}" ]]; then echo "ERROR: No ESP found in $UEFI_IMAGE_PATH"; exit 1; fi
+          loopdev=$(sudo losetup --find --show --offset "$start" "$UEFI_IMAGE_PATH")
+          trap 'sudo losetup -d "$loopdev" || true' EXIT
+          mnt=$(mktemp -d)
+          sudo mount -o ro "$loopdev" "$mnt"
+          if [[ ! -f "$mnt/EFI/BOOT/BOOTX64.EFI" ]]; then echo "ERROR: Missing EFI/BOOT/BOOTX64.EFI in ESP"; sudo umount "$mnt"; exit 1; fi
+          sudo umount "$mnt"; rmdir "$mnt"
+          echo "ESP + BOOTX64.EFI present ✅"
+
+          # Ensure line-buffering from launcher and run smoke test
+          export BREENIX_USE_STDBUF=1
+          bash scripts/ci/ring3_check.sh uefi || {
+            echo "ring3_check.sh failed; dumping qemu stderr if any";
+            ls -l logs || true;
+            exit 1;
+          }
+
+      - name: Upload logs
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: breenix-logs
+          path: logs/*.log
+          if-no-files-found: ignore
+          retention-days: 7

.github/workflows/manual-test.yml

@@ -0,0 +1,112 @@
+name: Manual Test Run
+
+on:
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: 'Branch to test'
+        required: true
+        default: 'sanity-check-happy-ring-3'
+
+jobs:
+  test:
+    name: Test Userspace
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.inputs.branch }}
+
+    - name: System info
+      run: |
+        echo "=== System Information ==="
+        uname -a
+        echo ""
+        echo "=== CPU Info ==="
+        lscpu | grep -E "Model name|CPU\(s\)|Thread|Core|Socket"
+        echo ""
+        echo "=== Memory Info ==="
+        free -h
+
+    - name: Install QEMU and build dependencies
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y qemu-system-x86 nasm
+        qemu-system-x86_64 --version
+        nasm --version
+
+    - name: Setup Rust
+      uses: dtolnay/rust-toolchain@master
+      with:
+        toolchain: nightly-2025-06-24
+        components: rust-src, llvm-tools-preview
+        targets: x86_64-unknown-none
+
+    - name: Build Breenix
+      run: |
+        echo "=== Building Breenix ==="
+        rustup default nightly-2025-06-24
+        cargo +nightly-2025-06-24 build --release
+
+    - name: Run Test 1
+      run: |
+        echo "=== Test Run 1 ==="
+        timeout 30 ./scripts/run_breenix.sh uefi -display none > test1.log 2>&1 || true
+        if grep -q "USERSPACE OUTPUT: Hello from userspace" test1.log; then
+          echo "✅ Test 1: PASSED"
+        else
+          echo "❌ Test 1: FAILED"
+          tail -20 test1.log
+        fi
+
+    - name: Run Test 2
+      run: |
+        echo "=== Test Run 2 ==="
+        timeout 30 ./scripts/run_breenix.sh uefi -display none > test2.log 2>&1 || true
+        if grep -q "USERSPACE OUTPUT: Hello from userspace" test2.log; then
+          echo "✅ Test 2: PASSED"
+        else
+          echo "❌ Test 2: FAILED"
+          tail -20 test2.log
+        fi
+
+    - name: Run Test 3
+      run: |
+        echo "=== Test Run 3 ==="
+        timeout 30 ./scripts/run_breenix.sh uefi -display none > test3.log 2>&1 || true
+        if grep -q "USERSPACE OUTPUT: Hello from userspace" test3.log; then
+          echo "✅ Test 3: PASSED"
+        else
+          echo "❌ Test 3: FAILED"
+          tail -20 test3.log
+        fi
+
+    - name: Summary
+      if: always()
+      run: |
+        echo "=== Test Summary ==="
+        PASSED=0
+        for i in 1 2 3; do
+          if grep -q "USERSPACE OUTPUT: Hello from userspace" test${i}.log 2>/dev/null; then
+            ((PASSED++))
+          fi
+        done
+        echo "Passed: $PASSED/3"
+        if [ $PASSED -eq 3 ]; then
+          echo "✅ ALL TESTS PASSED!"
+          exit 0
+        else
+          echo "❌ SOME TESTS FAILED!"
+          exit 1
+        fi
+
+    - name: Upload logs
+      if: always()
+      uses: actions/upload-artifact@v4
+      with:
+        name: test-logs-${{ github.run_number }}
+        path: |
+          test*.log
+          logs/*.log

.github/workflows/test-sanity-check.yml

@@ -0,0 +1,103 @@
+name: Test Sanity Check Branch
+
+on:
+  push:
+    branches: [ sanity-check-happy-ring-3 ]
+  pull_request:
+    branches: [ main ]
+  workflow_dispatch:
+
+env:
+  RUST_BACKTRACE: 1
+
+jobs:
+  test-userspace:
+    name: Test Userspace Execution
+    runs-on: ubuntu-22.04
+
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v4
+
+    - name: Install QEMU and build dependencies
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y \
+          qemu-system-x86 \
+          qemu-utils \
+          ovmf \
+          mtools \
+          dosfstools \
+          xorriso \
+          nasm
+
+    - name: Setup Rust
+      uses: dtolnay/rust-toolchain@nightly
+      with:
+        components: rust-src, llvm-tools-preview
+        targets: x86_64-unknown-none
+
+    - name: Cache cargo registry
+      uses: actions/cache@v4
+      with:
+        path: ~/.cargo/registry
+        key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
+
+    - name: Cache cargo index
+      uses: actions/cache@v4
+      with:
+        path: ~/.cargo/git
+        key: ${{ runner.os }}-cargo-index-${{ hashFiles('**/Cargo.lock') }}
+
+    - name: Cache cargo build
+      uses: actions/cache@v4
+      with:
+        path: target
+        key: ${{ runner.os }}-cargo-build-target-${{ hashFiles('**/Cargo.lock') }}
+
+    - name: Prefetch dependencies
+      run: cargo fetch
+
+    - name: Build Breenix (UEFI only)
+      env:
+        RUSTFLAGS: "-D warnings -A dead_code"
+      run: |
+        cargo build --release --features testing --bin qemu-uefi --verbose
+
+    - name: Ring3 smoke test (streaming)
+      env:
+        RING3_TIMEOUT_SECONDS: "480"
+      run: |
+        set -euxo pipefail
+        # Fetch DEBUG OVMF pair (with fallback to distro firmware)
+        mkdir -p third_party/ovmf
+        set +e
+        curl -fsSLo third_party/ovmf/OVMF_CODE.fd https://retrage.github.io/edk2-nightly/bin/DEBUGX64/OVMF_CODE.fd
+        curl -fsSLo third_party/ovmf/OVMF_VARS.fd https://retrage.github.io/edk2-nightly/bin/DEBUGX64/OVMF_VARS.fd
+        set -e
+        if [[ ! -s third_party/ovmf/OVMF_CODE.fd || ! -s third_party/ovmf/OVMF_VARS.fd ]]; then
+          if [[ -e /usr/share/OVMF/OVMF_CODE_4M.fd && -e /usr/share/OVMF/OVMF_VARS_4M.fd ]]; then
+            cp -f "$(readlink -f /usr/share/OVMF/OVMF_CODE_4M.fd)" third_party/ovmf/OVMF_CODE.fd
+            cp -f "$(readlink -f /usr/share/OVMF/OVMF_VARS_4M.fd)" third_party/ovmf/OVMF_VARS.fd
+          elif [[ -e /usr/share/OVMF/OVMF_CODE.fd && -e /usr/share/OVMF/OVMF_VARS.fd ]]; then
+            cp -f "$(readlink -f /usr/share/OVMF/OVMF_CODE.fd)" third_party/ovmf/OVMF_CODE.fd
+            cp -f "$(readlink -f /usr/share/OVMF/OVMF_VARS.fd)" third_party/ovmf/OVMF_VARS.fd
+          fi
+        fi
+        stat -Lc '%n %s' third_party/ovmf/OVMF_CODE.fd third_party/ovmf/OVMF_VARS.fd || stat -c '%n %s' third_party/ovmf/OVMF_CODE.fd third_party/ovmf/OVMF_VARS.fd || true
+        echo "OVMF sha256:"; (sha256sum third_party/ovmf/OVMF_CODE.fd third_party/ovmf/OVMF_VARS.fd || true)
+        export BREENIX_OVMF_CODE_PATH="${{ github.workspace }}/third_party/ovmf/OVMF_CODE.fd"
+        export BREENIX_OVMF_VARS_PATH="${{ github.workspace }}/third_party/ovmf/OVMF_VARS.fd"
+        # Line-buffer QEMU launcher for streaming markers
+        export BREENIX_USE_STDBUF=1
+        bash scripts/ci/ring3_check.sh uefi
+
+
+    - name: Upload logs on failure
+      if: failure()
+      uses: actions/upload-artifact@v4
+      with:
+        name: test-logs
+        path: |
+          test_output.log
+          logs/*.log