From 5e6cae20331f8e7cfd551b4656f0de852a4ad44c Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes@localhost>
Date: Wed, 12 Aug 2026 07:40:00 +0000
Subject: Clean workspace after rootfs finalization failure

---
 tests/build.rs | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

(limited to 'tests/build.rs')

diff --git a/tests/build.rs b/tests/build.rs
index cae79b0..a0a75b8 100644
--- a/tests/build.rs
+++ b/tests/build.rs
@@ -39,6 +39,18 @@ impl PackageInstaller for RootfslessInstaller {
     }
 }
 
+struct RootfsFinalizationFailingInstaller;
+
+impl PackageInstaller for RootfsFinalizationFailingInstaller {
+    fn install(&self, request: &PackageRequest) -> anyhow::Result<()> {
+        let rootfs = request.workdir().join("chroot");
+        fs::create_dir_all(rootfs.join("boot"))?;
+        fs::write(rootfs.join("boot/vmlinuz-6.12.0-rt1"), "kernel")?;
+        fs::write(rootfs.join("etc"), "not a directory")?;
+        Ok(())
+    }
+}
+
 struct FailingInitramfsBuilder;
 
 impl InitramfsBuilder for FailingInitramfsBuilder {
@@ -217,6 +229,24 @@ fn removes_the_new_workspace_when_the_installer_does_not_create_a_rootfs() {
     assert!(!artifact.exists());
 }
 
+#[test]
+fn removes_the_new_workspace_when_rootfs_finalization_fails() {
+    let fixture = tempdir().expect("fixture directory");
+    let spec = ImageSpec::load(std::path::Path::new("profiles/alt-controller.toml"))
+        .expect("load controller spec");
+    let plan = BuildPlan::compile(spec).expect("compile build plan");
+    let mut executor = BuildExecutor::new(RootfsFinalizationFailingInstaller, FixtureInitramfsBuilder);
+    let workspace = fixture.path().join("work");
+    let artifact = fixture.path().join("image.tar");
+
+    let _error = executor
+        .execute(&plan, &workspace, "profiles/apt.conf", &artifact)
+        .expect_err("failed rootfs finalization must fail the build");
+
+    assert!(!workspace.exists(), "failed build must not leave a workspace");
+    assert!(!artifact.exists());
+}
+
 #[test]
 fn removes_the_new_workspace_when_initramfs_build_fails() {
     let fixture = tempdir().expect("fixture directory");
-- 
cgit v1.2.3