ci: Run Moby extension integration tests

[vvoland]

No description provided.

[thaJeztah]

Wondering if we should look if go.work is suitable for this;

go work init .
go work edit -replace=github.com/moby/extensions="${GITHUB_WORKSPACE}/extensions"
go work vendor

[vvoland]

Not sure if there's any difference in this case? It's only a temporary checkout to run the tests from

[thaJeztah]

Yeah; I was trying to see if we could make it more align with the intended use of Go.

I was hoping go.work could "augment" the replaced module;

• use github.com/moby/moby and vendor/
• but use ${GITHUB_WORKSPACE}/extensions for the extensions module

But unfortunately that doesn't work when using vendor/ - in that case, it only looks at the vendor/ directory so it either must re-vendor, or we need to disable vendor mode, and download all modules.

☝️ I should mention that go mod vendor would already download all modules, so ... perhaps not the worst, but it likely requires changes in the moby integration tests, which assume vendor 🤔

Would look something like;

cd "$GITHUB_WORKSPACE"

go work init ./moby ./extensions

cd moby
GOFLAGS=-mod=readonly make test-integration

[Copilot]

Copilot review overview

🟢 Approval recommended

The workflow correctly builds Moby against the proposed extension code and reports integration failures.

Review effort: Balanced
Findings: None

What changed in this PR

Adds Moby extension integration tests to CI.

Changes:

• Checks out Moby and replaces its extensions dependency with the PR source.
• Builds Moby’s development image and runs extension integration tests.
• Includes integration results in the required success job.

File	Description
.github/​workflows/​ci.yml	Adds and gates CI on Moby integration testing.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[thaJeztah]

LGTM

[thaJeztah]

Oh! CI is failing though;

Run # Match the outputs exported by Moby's generate-files target, excluding vendoring changes.
fatal: pathspec 'profiles/seccomp/default.json' did not match any files
Error: Process completed with exit code 128.