Add plan and test for container tools integration testing (teemtee#4026)

Implement a simple test verifying the basic container provision
functionality. Include a plan in the special `friends` directory so that
related components can easily enable integration testing at their side.
Check that no AVC failures are triggered during its execution.

The plan can be enabled in the related git repositories in the following
way:

    summary: Run tmt integration tests
    plan:
        import:
            url: https://github.com/teemtee/tmt
            path: /plans/friends
            name: /podman

Fix teemtee#3996.

Author: psss

plans/friends/podman.fmf

@@ -0,0 +1,26 @@
+summary: Integration plan for podman & friends
+
+description:
+    Ensure that the basic functionality of the container provision
+    plugin is working and no AVC denials are triggered. This plan
+    is supposed to be run for podman, crun, container-selinux and
+    friends pull requests to prevent introducing breaking changes.
+
+discover:
+    how: fmf
+    url: https://github.com/teemtee/tmt
+    filter: "tag:podman"
+    adjust-tests:
+      - check: avc
+
+prepare:
+    name: enable-epel
+    how: feature
+    epel: enabled
+    order: 20
+
+link:
+  - relates: https://github.com/containers/container-selinux
+  - relates: https://github.com/containers/podman
+  - relates: https://github.com/containers/crun
+  - verifies: https://github.com/containers/container-selinux/issues/389

tests/provision/container/alpine/main.fmf

@@ -5,6 +5,3 @@ description:
     so make sure a reasonable error is returned to the user.
     Run a simple successful check against the Alpine Linux
     tests image.
-tag+:
-    - provision-only
-    - provision-container

tests/provision/container/basic/data/.fmf/version

@@ -0,0 +1 @@
+1

tests/provision/container/basic/data/main.fmf

@@ -0,0 +1,11 @@
+/plan:
+    discover:
+        how: fmf
+    provision:
+        how: container
+        image: fedora
+    execute:
+        how: tmt
+
+/test:
+    test: cat /etc/os-release

tests/provision/container/basic/main.fmf

@@ -0,0 +1,7 @@
+summary: Provision a fedora container and run a simple command
+description:
+    Make sure that the simple use case of starting a container,
+    running a simple command in it and stopping it works fine and
+    does not trigger any AVC denials.
+tag+:
+  - podman

tests/provision/container/basic/test.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+. /usr/share/beakerlib/beakerlib.sh || exit 1
+
+rlJournalStart
+    rlPhaseStartSetup
+        rlRun "run=\$(mktemp -d)" 0 "Create a run directory"
+        rlRun "pushd data"
+    rlPhaseEnd
+
+    rlPhaseStartTest
+        rlRun -s "tmt run --id $run -vvv"
+        rlAssertGrep "NAME.*Fedora Linux" $rlRun_LOG
+    rlPhaseEnd
+
+    rlPhaseStartCleanup
+        rlRun "popd"
+        rlGetTestState || rlFileSubmit "$run/log.txt"
+        rlRun "rm -r $run" 0 "Remove the run directory"
+    rlPhaseEnd
+rlJournalEnd

tests/provision/container/main.fmf

@@ -0,0 +1,3 @@
+tag+:
+  - provision-only
+  - provision-container

tests/provision/container/toolbox/main.fmf

@@ -6,9 +6,6 @@ description:
     Silverblue.
 
 duration: 30m
-tag+:
-  - provision-only
-  - provision-container
 require+:
   - toolbox
 adjust+: