github: set the GOPROXY for all actions that need it

Workaround for expired cert at source of indirect dependency
go.opencensus.io/trace

The Fedora tests are run using a container again instead of relying on
the makefile so we can control the environment.

Author: achilleas-k

.github/workflows/gitlab-helper.yml

@@ -16,6 +16,10 @@ jobs:
   prepare:
     name: "🔍 Check source preparation and test configs"
     runs-on: ubuntu-latest
+    env:
+      # workaround for expired cert at source of indirect dependency
+      # (go.opencensus.io/trace)
+      GOPROXY: "https://proxy.golang.org|direct"
     steps:
 
       - name: Set up Go 1.21

.github/workflows/test-osbuild-composer-integration.yml

@@ -53,6 +53,10 @@ jobs:
     runs-on: ubuntu-latest
     container:
       image: registry.fedoraproject.org/fedora:latest
+    env:
+      # workaround for expired cert at source of indirect dependency
+      # (go.opencensus.io/trace)
+      GOPROXY: "https://proxy.golang.org|direct"
     outputs:
       # Define job outputs
       # (see https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/passing-information-between-jobs#example-defining-outputs-for-a-job)

.github/workflows/tests.yml

@@ -23,19 +23,39 @@ jobs:
       fail-fast: false  # if one fails, keep the other(s) running
     name: "🛃 Unit tests (Fedora ${{ matrix.fedora_version }})"
     runs-on: ubuntu-latest
-
+    container: registry.fedoraproject.org/fedora:${{ matrix.fedora_version }}
     steps:
       - name: Check out code into the Go module directory
         uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
+      - name: Install python3
+        # The Fedora 41 container doesn't have python3 installed by default
+        run: dnf -y install python3
+
+      - name: Set up repository for pinned osbuild commit
+        run: ./test/scripts/setup-osbuild-repo
+
+      - name: Install test dependencies
+        run: ./test/scripts/install-dependencies
+
+      - name: Mark the working directory as safe for git
+        run: git config --global --add safe.directory "$(pwd)"
+
       - name: Run unit tests
-        run: make BASE_CONTAINER_IMAGE_TAG=${{matrix.fedora_version}} gh-action-test
+        run: go test -race ./...
+
+      - name: Run depsolver tests with force-dnf to make sure it's not skipped
+        run: go test -race ./pkg/dnfjson/... -force-dnf
 
   container-resolver-tests:
     name: "🛃 Container resolver tests"
     runs-on: ubuntu-latest
+    env:
+      # workaround for expired cert at source of indirect dependency
+      # (go.opencensus.io/trace)
+      GOPROXY: "https://proxy.golang.org|direct"
 
     steps:
       - name: Set up Go 1.21
@@ -76,6 +96,9 @@ jobs:
       image: quay.io/centos/centos:${{ matrix.centos_stream.image_tag }}
     env:
       GOFLAGS: "-tags=exclude_graphdriver_btrfs"
+      # workaround for expired cert at source of indirect dependency
+      # (go.opencensus.io/trace)
+      GOPROXY: "https://proxy.golang.org|direct"
 
     steps:
       - name: Install dnf plugins
@@ -114,6 +137,10 @@ jobs:
   lint:
     name: "⌨ Lint"
     runs-on: ubuntu-latest
+    env:
+      # workaround for expired cert at source of indirect dependency
+      # (go.opencensus.io/trace)
+      GOPROXY: "https://proxy.golang.org|direct"
     steps:
       - name: Set up Go 1.21
         uses: actions/setup-go@v5
@@ -146,6 +173,10 @@ jobs:
   shellcheck:
     name: "🐚 Shellcheck"
     runs-on: ubuntu-latest
+    env:
+      # workaround for expired cert at source of indirect dependency
+      # (go.opencensus.io/trace)
+      GOPROXY: "https://proxy.golang.org|direct"
     steps:
       - uses: actions/checkout@v4
         with:
@@ -162,6 +193,10 @@ jobs:
   python-test:
     name: "🐍 pytest (imgtestlib and test scripts)"
     runs-on: ubuntu-latest
+    env:
+      # workaround for expired cert at source of indirect dependency
+      # (go.opencensus.io/trace)
+      GOPROXY: "https://proxy.golang.org|direct"
     container:
       image: registry.fedoraproject.org/fedora:latest
     steps:
@@ -181,6 +216,10 @@ jobs:
   python-lint:
     name: "🐍 Lint (test scripts)"
     runs-on: ubuntu-latest
+    env:
+      # workaround for expired cert at source of indirect dependency
+      # (go.opencensus.io/trace)
+      GOPROXY: "https://proxy.golang.org|direct"
     container:
       image: registry.fedoraproject.org/fedora:latest
     steps: