Init pm

.github/workflows/e2e-nightly-reusable-pipeline.yml

@@ -211,7 +211,7 @@ jobs:
         run: |
           GIT_SHORT_HASH=$(git rev-parse --short HEAD)
 
-          namespace="nightly-e2e-$STORAGE_TYPE-$GIT_SHORT_HASH-$RANDUUID4C"
+          namespace="pr2088-e2e-$STORAGE_TYPE-$GIT_SHORT_HASH-$RANDUUID4C"
 
           echo "namespace=$namespace" >> "$GITHUB_OUTPUT"
           echo "sha_short=$GIT_SHORT_HASH" >> "$GITHUB_OUTPUT"

.github/workflows/e2e-nightly.yml

@@ -15,6 +15,11 @@
 name: E2E Nightly
 
 on:
+  pull_request:
+    types: [opened, reopened, synchronize, labeled, unlabeled]
+    branches:
+      - main
+      - feat/pm
   workflow_dispatch:
 
 env:
@@ -30,6 +35,7 @@ defaults:
 
 jobs:
   cleanup-nested-clusters:
+    if: github.event_name != 'pull_request'
     name: Cleanup nested clusters
     runs-on: ubuntu-latest
     steps:
@@ -51,6 +57,7 @@ jobs:
         run: bash .github/scripts/bash/e2e/cleanup-nightly-resources.sh
 
   power-off-vms-for-nested:
+    if: github.event_name != 'pull_request'
     name: Power off VMs for nested clusters
     needs: cleanup-nested-clusters
     runs-on: ubuntu-latest
@@ -70,7 +77,7 @@ jobs:
 
   set-vars:
     name: Set vars
-    needs: power-off-vms-for-nested
+    # needs: power-off-vms-for-nested
     runs-on: ubuntu-latest
     outputs:
       date_start: ${{ steps.vars.outputs.date_start }}
@@ -105,14 +112,15 @@ jobs:
       nested_storageclass_name: nested-thin-r1
       nested_cluster_network_name: cn-4006-for-e2e-test
       branch: main
-      virtualization_tag: main
+      virtualization_tag: pr2088
       deckhouse_channel: ${{ needs.set-vars.outputs.deckhouse_channel }}
       deckhouse_version: ${{ needs.set-vars.outputs.deckhouse_version }}
       registry_profile: ${{ needs.set-vars.outputs.registry_profile }}
       default_user: cloud
       go_version: "1.25.11"
       e2e_timeout: "3.5h"
       e2e_image_base_url: ${{ needs.set-vars.outputs.e2e_image_base_url }}
+      e2e_focus_tests: "VirtualMachineConfiguration"
       date_start: ${{ needs.set-vars.outputs.date_start }}
       randuuid4c: ${{ needs.set-vars.outputs.randuuid4c }}
       cluster_config_workers_memory: "9Gi"
@@ -128,6 +136,7 @@ jobs:
       E2E_ARTIFACTS_GPG_PASSPHRASE: ${{ secrets.E2E_ARTIFACTS_GPG_PASSPHRASE }}
 
   e2e-nfs:
+    if: github.event_name != 'pull_request'
     name: E2E Pipeline (NFS)
     needs:
       - set-vars
@@ -161,12 +170,13 @@ jobs:
       E2E_ARTIFACTS_GPG_PASSPHRASE: ${{ secrets.E2E_ARTIFACTS_GPG_PASSPHRASE }}
 
   report-to-channel:
+    if: github.event_name != 'pull_request'
     runs-on: ubuntu-latest
     name: End-to-End tests report
     needs:
       - e2e-replicated
-      - e2e-nfs
-    if: ${{ always()}}
+      # - e2e-nfs
+    # if: ${{ always()}}
     steps:
       - uses: actions/checkout@v6
 
@@ -202,7 +212,7 @@ jobs:
         env:
           EXPECTED_STORAGE_TYPES: '["replicated","nfs"]'
           LOOP_API_BASE_URL: ${{ secrets.LOOP_API_BASE_URL }}
-          LOOP_CHANNEL_ID: ${{ secrets.LOOP_CHANNEL_ID }}
+          LOOP_CHANNEL_ID: ${{ secrets.LOOP_TEST_CHANNEL_ID }}
           LOOP_TOKEN: ${{ secrets.LOOP_TOKEN }}
         with:
           script: |

build/base-images/base-images-pins.yml

@@ -10,4 +10,5 @@ fromContainerFactory:
   # CVE mitigation (08-06-2026): requires the ALT 20260119 based toolchain
   # provided by container-factory instead of the deckhouse_images build.
   - builder/golang-alt-1.25
+  - builder/distroless
   - builder/golang-debian-1.25

images/cdi-importer/werf.inc.yaml

@@ -16,67 +16,38 @@ imageSpec:
 
 ---
 {{- define "cdi-importer-deps" -}}
-binaries:
-  # nbd bins and libs
-  - /usr/sbin/nbdkit
-  - /usr/lib64/nbdkit/filters/*.so
-  - /usr/lib64/nbdkit/plugins/*.so
-  # CDI binaries
-  - /usr/bin/cdi-image-size-detection /usr/bin/cdi-importer /usr/bin/cdi-source-update-poller
-  # QEMU bins
-  - /usr/bin/qemu-img
-# do not include glibc, it will be replaced by one from qemu-img
 packages:
-- nbdkit libnbd
 - libtasn1 libxml2
 - xz
 - libunistring
-- libffi libgmp gnutls
+- libffi gmp gnutls
 - nettle libidn2
 - p11-kit zlib
-- glib2 libbsd libfuse3
-- gcc ubdsrv liburing
+- glib2 libfuse
+- liburing
 - libaio libaudit libcap-ng numactl
-- linux-pam zstd
+- zstd libnbd
+- nbdkit libbsd linux-pam
 {{- end -}}
 
 {{ $cdiImporterDependencies := include "cdi-importer-deps" . | fromYaml }}
 
 image: {{ .ModuleNamePrefix }}{{ .ImageName }}-bins
 final: false
-fromImage: {{ .ModuleNamePrefix }}base-alt-p11-binaries
+fromImage: builder/distroless
 import:
-- image: tools/util-linux
-  add: /
-  to: /relocate/usr
-  after: setup
-  includePaths:
-  - sbin/blockdev
-  - bin/mount
-  - bin/umount
 - image: {{ .ModuleNamePrefix }}cdi-artifact
   add: /cdi-binaries
-  to: /usr/bin
-  before: setup
+  to: /relocate/usr/bin
+  before: install
   includePaths:
   - cdi-image-size-detection
   - cdi-importer
   - cdi-source-update-poller
 - image: {{ .ModuleNamePrefix }}qemu
   add: /qemu-img
-  to: /qemu-img
+  to: /relocate
   before: install
-{{- include "importPackageImages" (list . $cdiImporterDependencies.packages "install") -}}
 shell:
   install:
-  - |
-    echo "Install packages"
-    PKGS="{{ $cdiImporterDependencies.packages | join " " }}"
-    PKGS+=" qemu-img"
-    for pkg in $PKGS; do
-      cp -a /$pkg/. /
-      rm -rf /$pkg
-    done
-  setup:
-  - |
-    /relocate_binaries.sh -i "{{ $cdiImporterDependencies.binaries | join " " }}" -o /relocate
+  - pm install {{ $cdiImporterDependencies.packages | join " " }} -d /relocate

images/dvcr-artifact/werf.inc.yaml

@@ -67,61 +67,32 @@ shell:
 ---
 {{- $name := print .ImageName "-dependencies" -}}
 {{- define "$name" -}}
-binaries:
-- /usr/local/bin/dvcr-importer
-- /usr/sbin/nbd*
-- /usr/lib64/nbdkit/filters/*.so
-- /usr/lib64/nbdkit/plugins/*.so
-- /usr/bin/file
-- /usr/share/misc/magic.mgc
-- /usr/local/bin/dvcr-uploader
-- /usr/local/bin/dvcr-cleaner
-- /usr/bin/qemu-img
-- /usr/bin/qemu-nbd
-- /usr/lib64/libnbd.s*
 packages:
-- bzip2 file nbdkit libnbd xz libxml2
+- bzip2 file xz libxml2
 - libseccomp zlib zstd
-- libffi libgmp gnutls nettle libidn2
-- p11-kit libtasn1 libfuse3
-- gcc ubdsrv liburing
-- libaio libaudit libcap-ng numactl
-- linux-pam libunistring glib2
+- libffi gmp gnutls nettle libidn2
+- p11-kit libtasn1 libfuse
+- liburing libaio libaudit libcap-ng numactl
+- libunistring glib2 libnbd gnu-glibc
 {{- end -}}
 
 {{ $builderDependencies := include "$name" . | fromYaml }}
 
 image: {{ .ModuleNamePrefix }}{{ .ImageName }}-bins
 final: false
-fromImage: {{ .ModuleNamePrefix }}base-alt-p11-binaries
+fromImage: builder/distroless
 import:
-- image: tools/util-linux
-  add: /
-  to: /relocate/usr
-  after: setup
-  includePaths:
-  - bin/mount
-  - bin/umount
 - image: {{ .ModuleNamePrefix }}{{ .ImageName }}-builder
   add: /out
-  to: /usr/local/bin
-  before: setup
-{{- include "importPackageImages" (list . $builderDependencies.packages "install") -}}
+  to: /relocate/usr/local/bin
+  before: install
 - image: {{ .ModuleNamePrefix }}qemu
   add: /qemu-img
-  to: /qemu-img
+  to: /relocate
   before: install
 shell:
   install:
   - |
-    # Install packages
-    PKGS="{{ $builderDependencies.packages | join " " }}"
-    PKGS+=" qemu-img"
-    for pkg in $PKGS; do
-      cp -a /$pkg/. /
-      rm -rf /$pkg
-    done
-
-  setup:
-  - |
-    /relocate_binaries.sh -i "{{ $builderDependencies.binaries | join " " }}" -o /relocate
+    pm install {{ $builderDependencies.packages | join " " }} -d /relocate
+    echo "Rebuild ld.so.cache so binaries without RUNPATH (e.g. dvcr-importer -> libnbd) find libs in both /usr/lib and /usr/lib64"
+    /relocate/lib64/ld-linux-x86-64.so.2 --library-path /relocate/lib64:/relocate/usr/lib:/relocate/usr/lib64 /relocate/sbin/ldconfig -r /relocate

images/edk2/werf.inc.yaml

@@ -121,10 +121,6 @@ import:
   - Logo.bmp
   - build.sh
 {{- include "importPackageImages" (list . $builderDependencies.packages "install") -}}
-- image: {{ .ModuleNamePrefix }}qemu
-  add: /qemu-img
-  to: /qemu-img
-  before: install
 shell:
   beforeInstall:
   {{- include "alt packages proxy" . | nindent 2 }}
@@ -138,7 +134,6 @@ shell:
   - |
     # Install packages
     PKGS="{{ $builderDependencies.packages | join " " }}"
-    PKGS+=" qemu-img"
     for pkg in $PKGS; do
       cp -a /$pkg/. /
       rm -rf /$pkg