ci: add C++ ASan+TSan gate on every PR; document test strategy - #539

Merged

jbachorik merged 38 commits into

mainfrom

jb/ci-sanitizer-split

May 26, 2026

Commits on May 24, 2026

fix(build): fix ASan/TSan runtime linking for clang
jbachorik
and
claude
committed
546531a
test: make C++ unit tests TSan-compatible
jbachorik
and
claude
committed
374f3dd
ci: add C++ ASan+TSan gate via GitLab
jbachorik
and
claude
committed
a6a5972
docs: add testing strategy guide
jbachorik
and
claude
committed
56186c9
ci(sanitizer): move to build stage, drop prepare:start dependency
jbachorik
and
claude
committed
51fadfe
docs: update TestingGuide for GitLab migration of C++ sanitizer tests
jbachorik
and
claude
committed
142caef
ci: gate build-artifact on sanitizer tests
jbachorik
and
claude
committed
b81d027
ci: dedicated sanitizer stage before build
jbachorik
and
claude
committed
c377d5f
ci(sanitizer): start immediately with needs: []
jbachorik
and
claude
committed
3dbfe9c
ci(sanitizer): add Gradle cache and sysctl vm.mmap_rnd_bits
jbachorik
and
claude
committed
29de934
build: remove log_path from ASAN_OPTIONS and UBSAN_OPTIONS
jbachorik
and
claude
committed
7299fbf
ci(sanitizer): use push+pull Gradle cache
jbachorik
and
claude
committed
30642e4
build: route gtest output to stdout; increase Gradle download retries
jbachorik
and
claude
committed
d2dff8b
build: write gtest output to /dev/stdout and /dev/stderr
jbachorik
and
claude
committed
8dc54dd
build: explain Gradle output discard; flush /dev/std* streams after run
jbachorik
and
claude
committed
cbfd226
ci(sanitizer): use setarch -R instead of sysctl for ASLR
jbachorik
and
claude
committed
238458e
build: add buildGtest{Config} task for compile+link without run
jbachorik
and
claude
committed
9772ffc
ci(sanitizer): build via Gradle, run binaries directly from shell
jbachorik
and
claude
committed
815616a
ci(sanitizer): fix Gradle cache miss — set GRADLE_USER_HOME=.gradle
jbachorik
and
claude
committed
91cf178
ci(sanitizer): remove setarch from Gradle build step
jbachorik
and
claude
committed
473f4fc
ci(sanitizer): add --parallel --build-cache to Gradle build step
jbachorik
and
claude
committed
e403da6
build: compile gtest library sources once per config (shared objects)
jbachorik
and
claude
committed
5aeeaf4
build(gtest): simplify review fixes
jbachorik
and
claude
committed
debe31f
ci(sanitizer): restore TSan with allow_failure; add llvm-symbolizer
jbachorik
and
claude
committed
5c58f58
ci(tsan): run inside docker --privileged to allow sysctl
jbachorik
and
claude
committed
ee0ef26
ci(tsan): revert to setarch fallback; document infra requirement
jbachorik
and
claude
committed
9c6e4b5
ci(tsan): use docker-in-docker tags for proper runner access
jbachorik
and
claude
committed
1d77b32
ci(tsan): set GTEST_DEATH_TEST_STYLE=threadsafe for TSan runs
jbachorik
and
claude
committed
64e8eac
ci(tsan-amd64): use one-shot privileged container for sysctl only
jbachorik
and
claude
committed
cdfd71b
ci(tsan-amd64): use BUILD_IMAGE_X64 for sysctl, not alpine
jbachorik
and
claude
committed
c5faa51
ci(tsan-amd64): use direct sysctl on kata-qemu micro VM
jbachorik
and
claude
committed
6e8a874
ci(tsan): fix amd64 sysctl path; add arm64 diagnostics
jbachorik
and
claude
committed
d35025b
ci(tsan-amd64): add diagnostics — clang version, kernel, TSan probe
jbachorik
and
claude
committed
17550f8
ci(tsan-amd64): install LLVM 18 — LLVM 11 crashes on kernel 6.8
jbachorik
and
claude
committed
158c0df
ci(tsan): fix arm64 regression; simplify amd64
jbachorik
and
claude
committed
02d4e09

Commits on May 26, 2026

Merge origin/main and resolve gtest build-logic conflicts
Copilot
authored
46394bb
Merge branch 'main' into jb/ci-sanitizer-split
jbachorik
authored
23470e7
Temporarily allow asan jobs failing
jbachorik
committed
fe0d85d