Merge pull request #2 from GiulioSavini/feature/ubuntu-26.04-support

feat: Ubuntu 26.04 support + Docker compile CI

Author: GiulioSavini

.github/workflows/ci.yml

@@ -44,3 +44,37 @@ jobs:
           assert len(info.get('galaxy_tags', [])) >= 5, 'need at least 5 tags'
           print('Galaxy metadata OK')
           "
+
+  build-container:
+    name: Build & compile (${{ matrix.target }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        target:
+          - ubuntu2204
+          - ubuntu2404
+          - ubuntu2604
+          - debian12
+          - rocky9
+          - rocky8
+          - oraclelinux8
+          - oraclelinux9
+          - fedora
+    steps:
+      - uses: actions/checkout@v4
+
+      # Builds the per-distro Docker image and compiles open-vm-tools inside it,
+      # producing the .deb/.rpm. This is the real "does it compile in Docker"
+      # gate — a failed image build or compile fails the job for that target.
+      - name: Build container and compile open-vm-tools
+        working-directory: containers
+        run: ./build-all.sh --target ${{ matrix.target }}
+
+      - name: Upload built package
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: vmtools-${{ matrix.target }}
+          path: output/${{ matrix.target }}/*
+          if-no-files-found: warn

CHANGELOG.md

@@ -5,6 +5,10 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## [Unreleased]
 
+### Added
+- Ubuntu 26.04 LTS (Resolute Raccoon) support: `containers/Dockerfile.ubuntu2604` build target, `ubuntu2604` added to `build-all.sh`, and `resolute` listed in Galaxy platforms (the Ansible role already resolves the `ubuntu2604` package subdir dynamically from `ansible_distribution_version`)
+- CI now builds each per-distro Docker image and compiles open-vm-tools inside it (matrix `build-container` job), so "does it compile in Docker" is verified on every push/PR and the resulting package is uploaded as an artifact
+
 ### Fixed
 - RHEL build deps: enable EPEL from Fedora mirror when `epel-release` isn't in the distro repos, and enable CodeReady Builder via `subscription-manager` on real RHEL (so `xmlsec1-devel`, `libmspack-devel` and `rpcgen` resolve)
 

build.sh

@@ -87,8 +87,44 @@ get_latest_version() {
 # ------------------------------------------------------------------------------
 # Install build dependencies
 # ------------------------------------------------------------------------------
+
+# Ubuntu 26.04: il postinst di 'install-info' (script /usr/sbin/update-info-dir)
+# puo' fallire ("export: ... bad variable name") e lasciare dpkg in stato
+# "1 not fully installed or removed", bloccando OGNI apt successivo anche se le
+# dipendenze sono gia' presenti. Su una build-host l'indice dei doc 'info' e'
+# irrilevante: se dpkg e' rotto completiamo le configurazioni pendenti e, se il
+# trigger update-info-dir e' la causa, lo rendiamo no-op (reversibile via divert).
+repair_broken_dpkg() {
+    # dpkg pulito -> niente da fare
+    [ -z "$(dpkg --audit 2>/dev/null)" ] && return 0
+
+    warn "Stato dpkg incompleto rilevato, tentativo di riparazione..."
+
+    # 1) Tentativo pulito: riconfigura con un environment minimale (copre il caso
+    #    in cui la causa e' una variabile d'ambiente malformata ereditata dalla shell).
+    if env -i PATH=/usr/sbin:/usr/bin:/sbin:/bin LC_ALL=C \
+            DEBIAN_FRONTEND=noninteractive dpkg --configure -a >/dev/null 2>&1; then
+        log "dpkg riconfigurato correttamente."
+        return 0
+    fi
+
+    # 2) Fallback: il trigger update-info-dir e' rotto -> neutralizzalo e riprova.
+    if [ -e /usr/sbin/update-info-dir ] \
+       && ! grep -q 'vmtools-builder-noop' /usr/sbin/update-info-dir 2>/dev/null; then
+        warn "Neutralizzo /usr/sbin/update-info-dir (bug noto install-info su Ubuntu 26.04)."
+        dpkg-divert --quiet --local --rename \
+            --divert /usr/sbin/update-info-dir.distrib /usr/sbin/update-info-dir 2>/dev/null || true
+        printf '#!/bin/sh\n# vmtools-builder-noop: workaround bug install-info update-info-dir\nexit 0\n' \
+            > /usr/sbin/update-info-dir
+        chmod 0755 /usr/sbin/update-info-dir
+    fi
+    DEBIAN_FRONTEND=noninteractive dpkg --configure -a \
+        || warn "dpkg ancora non pulito dopo la riparazione; proseguo comunque."
+}
+
 install_deps_debian() {
     log "Installazione dipendenze di build (Debian/Ubuntu)..."
+    repair_broken_dpkg
     apt-get update -qq
     apt-get install -y --no-install-recommends \
         build-essential \
@@ -447,6 +483,11 @@ EOF
     # posti diversi (es. Fedora non genera 99-vmware-scsi-udev.rules, Rocky/OL
     # si'; udev rules dir e' /usr/lib su alcuni, /lib su altri). Cosi' il pacco
     # contiene esattamente cio' che e' stato installato.
+    # I file .la (libtool archive) non servono a runtime e su Fedora moderno la
+    # brp di rpmbuild li rimuove dal buildroot: se restano nel filelist generato
+    # da staging la build fallisce con "File not found: ...la". Li togliamo dallo
+    # staging cosi' filelist e buildroot restano coerenti su tutte le distro.
+    find "$RPM_STAGING" -name '*.la' -type f -delete
     FILELIST="$RPM_TOPDIR/SPECS/${PKG_NAME}.files"
     ( cd "$RPM_STAGING" && find . \( -type f -o -type l \) -printf '/%P\n' ) > "$FILELIST"
 

containers/Dockerfile.ubuntu2604

@@ -0,0 +1,49 @@
+FROM ubuntu:26.04
+
+LABEL maintainer="Infrastructure Team"
+LABEL description="Build container for open-vm-tools .deb (Ubuntu 26.04 LTS Resolute Raccoon)"
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+# Reti dove la porta 80 in uscita e' filtrata (es. proxy aziendale che lascia
+# passare solo 443): i mirror http di Ubuntu vanno in timeout. Passiamo ad
+# HTTPS. L'immagine base non porta le CA, quindi facciamo un bootstrap di
+# ca-certificates disabilitando la verifica TLS SOLO per quel primo fetch
+# (l'integrita' dei pacchetti resta garantita dalle firme GPG del repo);
+# subito dopo l'update gira verificato.
+RUN sed -i 's|http://|https://|g' /etc/apt/sources.list.d/ubuntu.sources && \
+    apt-get -o Acquire::https::Verify-Peer=false -o Acquire::https::Verify-Host=false update -qq && \
+    apt-get -o Acquire::https::Verify-Peer=false -o Acquire::https::Verify-Host=false \
+        install -y --no-install-recommends ca-certificates && \
+    apt-get update -qq && \
+    apt-get install -y --no-install-recommends \
+        build-essential \
+        automake \
+        autoconf \
+        libtool \
+        pkg-config \
+        libglib2.0-dev \
+        libpam0g-dev \
+        libssl-dev \
+        libxml2-dev \
+        libxmlsec1-dev \
+        libmspack-dev \
+        libfuse3-dev \
+        libudev-dev \
+        libdrm-dev \
+        libtirpc-dev \
+        rpcsvc-proto \
+        curl \
+        wget \
+        git \
+        dpkg-dev \
+        fakeroot \
+        debhelper \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY build-inside-container.sh /build.sh
+RUN chmod +x /build.sh
+
+VOLUME /output
+ENTRYPOINT ["/build.sh"]

containers/build-all.sh

@@ -32,6 +32,7 @@ header(){ echo -e "${CYAN}$*${NC}"; }
 TARGETS=(
     "ubuntu2204"
     "ubuntu2404"
+    "ubuntu2604"
     "debian12"
     "rocky9"
     "rocky8"

containers/build-inside-container.sh

@@ -306,6 +306,11 @@ EOF
     # posti diversi (es. Fedora non genera 99-vmware-scsi-udev.rules, Rocky/OL
     # si'; udev rules dir e' /usr/lib su alcuni, /lib su altri). Cosi' il pacco
     # contiene esattamente cio' che e' stato installato.
+    # I file .la (libtool archive) non servono a runtime e su Fedora moderno la
+    # brp di rpmbuild li rimuove dal buildroot: se restano nel filelist generato
+    # da staging la build fallisce con "File not found: ...la". Li togliamo dallo
+    # staging cosi' filelist e buildroot restano coerenti su tutte le distro.
+    find "$RPM_STAGING" -name '*.la' -type f -delete
     FILELIST="$RPM_TOPDIR/SPECS/${PKG_NAME}.files"
     ( cd "$RPM_STAGING" && find . \( -type f -o -type l \) -printf '/%P\n' ) > "$FILELIST"
 

meta/main.yml

@@ -14,6 +14,7 @@ galaxy_info:
         - focal
         - jammy
         - noble
+        - resolute
     - name: Debian
       versions:
         - bullseye