TMT: Initial enablement

Run podman local rootful and rootless tests on every PR.

Packit will handle syncing of the TMT tests and gating config
from upstream to downstream Fedora with every upstream release.

TODO: enable CentOS Stream test jobs.

Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>

Author: lsm5

.fmf/version

@@ -0,0 +1 @@
+1

.packit.yaml

@@ -5,6 +5,23 @@
 downstream_package_name: conmon
 upstream_tag_template: v{version}
 
+# These files get synced from upstream to downstream (Fedora / CentOS Stream) on every
+# propose-downstream job. This is done so tests maintained upstream can be run
+# downstream in Zuul CI and Bodhi.
+# Ref: https://packit.dev/docs/configuration#files_to_sync
+files_to_sync:
+  - src: rpm/gating.yaml
+    dest: gating.yaml
+    delete: true
+  - src: plans/
+    dest: plans/
+    delete: true
+    mkpath: true
+  - src: .fmf/
+    dest: .fmf/
+    delete: true
+  - .packit.yaml
+
 packages:
   conmon-fedora:
     pkg_tool: fedpkg
@@ -23,7 +40,7 @@ jobs:
       failure_comment:
         message: "Ephemeral COPR build failed. @containers/packit-build please check."
     enable_net: true
-    targets:
+    targets: &fedora_copr_targets
       - fedora-all-aarch64
       - fedora-all-x86_64
 
@@ -41,7 +58,7 @@ jobs:
     packages: [conmon-centos]
     notifications: *copr_build_failure_notification
     enable_net: true
-    targets:
+    targets: &centos_copr_targets
       - centos-stream-10-aarch64
       - centos-stream-10-x86_64
       - centos-stream-9-aarch64
@@ -58,6 +75,19 @@ jobs:
     project: podman-next
     enable_net: true
 
+  - job: tests
+    trigger: pull_request
+    packages: [conmon-fedora]
+    targets:
+      - fedora-all-aarch64
+      - fedora-all-x86_64
+    enable_net: true
+    tf_extra_params:
+      environments:
+        - artifacts:
+          - type: repository-file
+            id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/fedora-$releasever/rhcontainerbot-podman-next-fedora-$releasever.repo
+
   # Downstream sync for Fedora
   - job: propose_downstream
     trigger: release

hack/tmt/bats-setup.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+set -exo pipefail
+
+# Install bats
+# https://bats-core.readthedocs.io/en/stable/installation.html
+
+BATS_TMPDIR=$(mktemp -d)
+pushd "$BATS_TMPDIR"
+
+BATS_VERSION=1.12.0
+curl -ssfL https://github.com/bats-core/bats-core/archive/refs/tags/v"$BATS_VERSION".tar.gz | tar -xz
+pushd bats-core-"$BATS_VERSION"
+./install.sh /usr
+popd
+popd

hack/tmt/dnf-repo-setup.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+set -exo pipefail
+
+COPR_REPO_FILE="/etc/yum.repos.d/*podman-next*.repo"
+if compgen -G "$COPR_REPO_FILE" > /dev/null; then
+    # shellcheck disable=SC2016
+    sed -i -n '/^priority=/!p;$apriority=1' "$COPR_REPO_FILE"
+fi
+dnf -y upgrade --allowerasing

plans/podman.fmf

@@ -0,0 +1,37 @@
+prepare:
+    - when: distro == centos-stream or distro == rhel
+      how: shell
+      script: bash hack/tmt/bats-setup.sh
+      order: 10
+    - when: initiator == packit
+      how: shell
+      script: bash hack/tmt/dnf-repo-setup.sh
+      order: 20
+
+provision:
+    how: artemis
+    hardware:
+        memory: ">= 16 GB"
+        cpu:
+            cores: ">= 4"
+            threads: ">=8"
+        disk:
+            - size: ">= 512 GB"
+
+discover:
+    how: fmf
+    url: https://github.com/containers/podman
+    ref: "main"
+
+execute:
+    how: tmt
+
+/system/root-local:
+    summary: Run podman system rootful tests
+    discover+:
+        test: /test/tmt/system/local-root
+
+/system/rootless-oocal:
+    summary: Run podman system rootless tests
+    discover+:
+        filter: /test/tmt/system/local-rootless

rpm/gating.yaml

@@ -0,0 +1,16 @@
+--- !Policy
+product_versions:
+  - fedora-*
+decision_contexts:
+  - bodhi_update_push_stable
+  - bodhi_update_push_testing
+subject_type: koji_build
+rules:
+  - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional}
+
+--- !Policy
+product_versions:
+  - rhel-*
+decision_context: osci_compose_gate
+rules:
+  - !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}