Files

Ruben Fiszel d5a5e54da0 test(sandbox_setup): add overlayfs and crane integration tests

Replace placeholder #[ignore] tests with real integration tests:

- overlay_integration: test overlayfs read/write semantics via unshare
  (no root required), and overlayfs rootfs as nsjail sandbox root
- crane_integration: test crane export of alpine image → tar/gz
  roundtrip, and running the extracted rootfs in nsjail

Also fix tar_gz to preserve symlinks (follow_symlinks=false) instead
of following them to absolute paths that may not exist on the host.

All tests skip gracefully when tools (nsjail, crane, unshare) are
unavailable, so they won't break CI.

Total: 32 passing (with parquet), 14 parser tests = 46 tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-17 21:14:40 +00:00