Run Linux RPM in Rocky container

Author: kraenhansen

.github/workflows/test-installers.yml

@@ -39,7 +39,7 @@ jobs:
           # TODO: Re-enable (see https://github.com/mongodb-js/compass/actions/runs/13281152689/job/37079619474)
           # - linux_tar
           # TODO: Enable (needs a docker container)
-          # - linux_rpm
+          - linux_rpm
         hadron-distribution:
           - compass
           - compass-readonly
@@ -78,10 +78,20 @@ jobs:
           #   runs-on: ubuntu-latest
           #   arch: x64
           #   hadron-platform: linux
-          # - package: linux_rpm
-          #   runs-on: ubuntu-latest
-          #   arch: x64
-          #   hadron-platform: linux
+          - package: linux_rpm
+            runs-on: ubuntu-latest
+            arch: x64
+            hadron-platform: linux
+            post-checkout-command: |
+              dnf install -y gcc gcc-c++ make git nss dbus xorg-x11-server-Xvfb yum-utils
+              # Enable the devel repo to install compat-openssl11 (bringing libcrupto.so.1.1 to run mongod)
+              dnf config-manager --set-enabled devel
+              dnf update -y
+              dnf install -y compat-openssl11
+            container:
+              image: rockylinux:9
+              volumes:
+                - ${{ github.workspace }}:/compass
 
           # Install the update server for auto-update tests
           - test: auto-update-from
@@ -124,6 +134,7 @@ jobs:
             test: time-to-first-query
 
     runs-on: ${{ matrix.runs-on }}
+    container: ${{ matrix.container }}
     env:
       DEBUG: compass:smoketests:*
     steps:
@@ -134,6 +145,11 @@ jobs:
         with:
           node-version: 20
           cache: "npm"
+
+      - name: Run post-checkout command
+        if: matrix.post-checkout-command
+        run: ${{ matrix.post-checkout-command }}
+
       - name: Cache downloads
         uses: actions/cache@v4
         with:
@@ -174,6 +190,9 @@ jobs:
           HADRON_DISTRIBUTION: ${{ matrix.hadron-distribution }}
           PLATFORM: ${{ matrix.hadron-platform }}
           ARCH: ${{ matrix.arch }}
+          # Pass a "fake" DISTRO_ID environment to inform the "mongodb-download-url" package
+          # See https://github.com/mongodb-js/devtools-shared/blob/aff66db7b7fc4f8ecaec2383fd4e8c116733a7e4/packages/download-url/src/linux-distro.ts#L14
+          DISTRO_ID: ${{ matrix.package == 'linux_rpm' && 'rhel80' }}
           # Exposing token to prevent update server from being rate limited
           GITHUB_TOKEN: ${{ github.token }}
         working-directory: packages/compass-smoke-tests

packages/compass-smoke-tests/src/installers/linux-rpm.ts

@@ -30,13 +30,9 @@ function getPackageName(filepath: string) {
  * Check if a package is installed (by name)
  */
 export function isInstalled(packageName: string) {
-  const result = cp.spawnSync(
-    'sudo',
-    ['dnf', 'list', 'installed', packageName],
-    {
-      stdio: 'inherit',
-    }
-  );
+  const result = cp.spawnSync('dnf', ['list', 'installed', packageName], {
+    stdio: 'inherit',
+  });
   return result.status === 0;
 }
 
@@ -53,7 +49,7 @@ export function installLinuxRpm({
 
   function uninstall() {
     debug('Uninstalling %s', filepath);
-    execute('sudo', ['dnf', 'remove', '-y', packageName]);
+    execute('dnf', ['remove', '-y', packageName]);
   }
 
   if (isInstalled(packageName)) {
@@ -71,7 +67,7 @@ export function installLinuxRpm({
     !fs.existsSync(installPath),
     `Expected no install directory to exist: ${installPath}`
   );
-  execute('sudo', ['dnf', 'install', '-y', filepath]);
+  execute('dnf', ['install', '-y', filepath]);
 
   assert(isInstalled(packageName), 'Expected the package to be installed');
   assert(
@@ -80,7 +76,9 @@ export function installLinuxRpm({
   );
 
   // Check that the executable will run without being quarantined or similar
-  execute('xvfb-run', [appPath, '--version']);
+  // Passing --no-sandbox because RHEL and Rocky usually run as root and --disable-gpu to avoid warnings
+  // (see compass-e2e-tests/helpers/chrome-startup-flags.ts for details)
+  execute('xvfb-run', [appPath, '--version', '--no-sandbox', '--disable-gpu']);
 
   return {
     appName,