fireactions-smoke.yml

name: Fireactions Smoke

on:
  workflow_dispatch:
    inputs:
      ref:
        description: "Branch or tag to validate"
        required: true
        default: "fireactions-runners"
      dry_run:
        description: "Must remain true for this validation workflow"
        required: true
        default: "true"
  workflow_call:
    inputs:
      ref:
        required: false
        type: string
        default: "fireactions-runners"
      dry_run:
        required: false
        type: string
        default: "true"

concurrency:
  group: fireactions-smoke-${{ github.ref }}
  cancel-in-progress: true

jobs:
  smoke:
    runs-on: [self-hosted, fireactions]
    timeout-minutes: 30
    steps:
      - name: Enforce dry-run mode
        run: |
          if [ "${{ inputs.dry_run }}" != "true" ]; then
            echo "dry_run must be true for this workflow."
            exit 1
          fi

      - name: Checkout target ref
        uses: actions/checkout@v4
        with:
          ref: ${{ inputs.ref }}

      - name: Enforce no-install campaign mode
        run: |
          echo "No system package installs are allowed in this validation campaign."

      - name: Check runner identity
        run: |
          whoami
          id
          groups

      - name: Verify required tools
        run: |
          for cmd in docker gh jq git curl unzip bc; do
            command -v "$cmd"
          done
          docker --version
          gh --version
          jq --version
          git --version
          curl --version
          unzip --version
          bc --version || bc -v

      - name: Install Rust toolchain
        uses: actions-rs/toolchain@v1
        with:
          toolchain: stable

      - name: Verify Rust toolchain
        run: |
          rustc --version
          cargo --version
          command -v cargo

      - name: Run Docker smoke test
        run: |
          docker pull hello-world:latest
          docker run --rm hello-world:latest