feat: Use more generic ITF QEMU plugin

.devcontainer/Dockerfile

@@ -28,7 +28,8 @@ RUN if [ "$USERNAME" != "vscode" ]; then \
         && chmod 0440 /etc/sudoers.d/${USERNAME}; \
     fi
 
-RUN apt-get update && apt-get install -y qemu-system-x86 iputils-ping tcpdump cloud-image-utils
+RUN apt-get update && apt-get install -y qemu-system-x86 iputils-ping tcpdump cloud-image-utils libguestfs-tools linux-image-$(uname -r) \
+    && chmod o+r /boot/vmlinuz-*
 
 # Set the default user for the container
 USER ${USERNAME}

.github/workflows/build_and_test_host.yml

@@ -67,7 +67,7 @@ jobs:
       - name: Install tools needed for ITF tests
         run: |
           sudo apt-get update
-          sudo apt-get install -y qemu-system-x86 iputils-ping tcpdump cloud-image-utils
+          sudo apt-get install -y qemu-system-x86 qemu-system-arm iputils-ping tcpdump cloud-image-utils libguestfs-tools
       - name: Allow linux-sandbox
         uses: eclipse-score/cicd-actions/unblock-user-namespace-for-linux-sandbox@212bbf86267e9381da9d2daf962d12f6feafbc90 # v0.0.2
       - run: df -h
@@ -76,8 +76,16 @@ jobs:
           echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
           sudo udevadm control --reload-rules
           sudo udevadm trigger --name-match=kvm
+      - name: Allow unprivileged user namespaces
+        run: |
+          sudo sysctl kernel.apparmor_restrict_unprivileged_userns=0
+      - name: Allow supermin to read kernel
+        run: |
+          sudo chmod a+r /boot/vmlinuz-$(uname -r)
       - name: Run Linux QEMU integration tests
         run: |
-          bazel test --config=qemu-integration //quality/... //tests/integration_test/...
+          bazel test \
+            --config=qemu-integration \
+            //quality/... //tests/integration_test/...
       - run: df -h
         if: always()

MODULE.bazel

@@ -263,16 +263,22 @@ http_archive(
 # ============================================================================
 # Integration Testing
 # ============================================================================
+bazel_dep(name = "os_images", version = "1.0", dev_dependency = True)
 bazel_dep(name = "score_itf", version = "0.5.0", dev_dependency = True)
 bazel_dep(name = "score_rules_imagefs", version = "0.0.4", dev_dependency = True)
 
-http_file = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "http_file")
+git_override(
+    module_name = "score_itf",
+    commit = "15891e79da565fa6b038fbf22074b86fd9bc55a1",
+    patch_strip = 1,
+    patches = ["//:third_party/score_itf-qemu-ping-timeout.patch"],
+    remote = "https://github.com/elektrobit-contrib/eclipse-score_itf.git",
+)
 
-http_file(
-    name = "ubuntu_24_04_cloudimg",
-    downloaded_file_path = "noble-minimal-cloudimg-amd64.img",
-    integrity = "sha256-vZAj5xt7tb3tFOT7DJmODZPXFJ6QVsPmi0b/kJfdF9U=",
-    url = "https://cloud-images.ubuntu.com/minimal/releases/noble/release-20260626/ubuntu-24.04-minimal-cloudimg-amd64.img",
+git_override(
+    module_name = "os_images",
+    commit = "a024787e2ddb4ceed6ac6fe63b3847ab937c0b5d",
+    remote = "https://github.com/eclipse-score/os_images.git",
 )
 
 imagefs = use_extension("@score_rules_imagefs//extensions:imagefs.bzl", "imagefs", dev_dependency = True)

REUSE.toml

@@ -51,8 +51,7 @@ path = [
     "tests/integration_test/vsomeip.json",
     "tests/benchmarks/config/benchmark_mw_com_config.json",
     "tests/tc8_conformance/**/*.json",
-    "quality/integration_testing/environments/qnx8_qemu/qemu_config.json",
-    "quality/integration_testing/environments/ubuntu24_04_qemu/*"
+    "quality/integration_testing/environments/qnx8_qemu/qemu_config.json"
 ]
 SPDX-FileCopyrightText = "Copyright (c) 2026 Contributors to the Eclipse Foundation"
 SPDX-License-Identifier = "Apache-2.0"

quality/README.md

@@ -52,13 +52,13 @@ Integration tests are enabled only for QEMU-backed runs:
 
 ### filesystem tar
 
-The tests and their data are packaged into a filesystem tar and either build into (Docker) the image or uploaded after image startup.
+The tests and their data are packaged into a filesystem tar and overlaid onto the QEMU rootfs image before test execution.
 
 ### What Runs in QEMU
 
 #### Linux QEMU
 
-If QEMU is selected, the custom plugin [`linux_qemu`](integration_testing/plugins/linux_qemu/README.md) is used.
+If QEMU is selected, the upstream ITF QEMU plugin is used.
 
 #### QNX QEMU
 

quality/integration_testing/integration_testing.bzl

@@ -14,7 +14,7 @@
 """Integration test macro with QEMU-only backends."""
 
 load("@rules_pkg//pkg:tar.bzl", "pkg_tar")
-load("@score_itf//:defs.bzl", "py_itf_test")
+load("@score_itf//:defs.bzl", "copy_files_onto_image", "py_itf_test")
 load("@score_rules_imagefs//rules/qnx:ifs.bzl", "qnx_ifs")
 
 def _extend_list_in_kwargs(kwargs, key, values):
@@ -54,11 +54,19 @@ def integration_test(name, srcs, filesystem, **kwargs):
     pkg_tar(
         name = filesystem_tar,
         srcs = [filesystem],
+        tags = ["manual"],
     )
 
-    linux_qemu_config = Label("//quality/integration_testing/environments/ubuntu24_04_qemu:qemu_config")
-    linux_qemu_image = Label("//quality/integration_testing/environments/ubuntu24_04_qemu:prepared_image")
-    linux_qemu_seed_iso = Label("//quality/integration_testing/environments/ubuntu24_04_qemu:seed_iso")
+    linux_qemu_config = Label("@os_images//ubuntu_x86_64:qemu_config")
+    linux_qemu_image = Label("@os_images//ubuntu_x86_64:image")
+
+    filesystem_rootfs_overlay = "_qemu_rootfs_overlay_{}".format(name)
+    copy_files_onto_image(
+        name = filesystem_rootfs_overlay,
+        image = linux_qemu_image,
+        srcs = [filesystem_tar],
+        tags = ["manual"],
+    )
 
     # --- QNX QEMU artifacts ---
     QNX_TARGET_COMPATIBLE_WITH = [
@@ -81,10 +89,9 @@ def integration_test(name, srcs, filesystem, **kwargs):
     _extend_list_in_kwargs(kwargs, "data", select({
         "@platforms//os:qnx": [qemu_image, qnx_qemu_config],
         "//quality/integration_testing/flags:linux_qemu": [
-            filesystem_tar,
+            filesystem_rootfs_overlay,
             linux_qemu_config,
-            linux_qemu_image,
-            linux_qemu_seed_iso,
+            linux_qemu_image,  # backing file must be accessible at runtime
         ],
         "//conditions:default": [],
     }))
@@ -95,14 +102,12 @@ def integration_test(name, srcs, filesystem, **kwargs):
             "@platforms//os:qnx": [
                 "--log-cli-level=DEBUG",
                 "--qemu-config=$(location {})".format(qnx_qemu_config),
-                "--qemu-image=$(location {})".format(qemu_image),
+                "--qemu-kernel=$(location {})".format(qemu_image),
             ],
             "//quality/integration_testing/flags:linux_qemu": [
                 "--log-cli-level=DEBUG",
                 "--qemu-config=$(location {})".format(linux_qemu_config),
-                "--qemu-image=$(location {})".format(linux_qemu_image),
-                "--qemu-seed-iso=$(location {})".format(linux_qemu_seed_iso),
-                "--qemu-filesystem-tar=$(location {})".format(filesystem_tar),
+                "--qemu-rootfs=$(location {})".format(filesystem_rootfs_overlay),
             ],
             "//conditions:default": [],
         }),
@@ -147,7 +152,7 @@ def integration_test(name, srcs, filesystem, **kwargs):
                 "@score_itf//score/itf/plugins:qemu_plugin",
             ],
             "//quality/integration_testing/flags:linux_qemu": [
-                "//quality/integration_testing/plugins/linux_qemu:linux_qemu_plugin",
+                "@score_itf//score/itf/plugins:qemu_plugin",
             ],
             "//conditions:default": [],
         }),