feat: Use more generic ITF QEMU plugin

.devcontainer/Dockerfile

@@ -28,7 +28,8 @@ RUN if [ "$USERNAME" != "vscode" ]; then \
         && chmod 0440 /etc/sudoers.d/${USERNAME}; \
     fi
 
-RUN apt-get update && apt-get install -y qemu-system-x86 iputils-ping tcpdump cloud-image-utils
+RUN apt-get update && apt-get install -y qemu-system-x86 iputils-ping tcpdump cloud-image-utils libguestfs-tools linux-image-$(uname -r) \
+    && chmod o+r /boot/vmlinuz-*
 
 # Set the default user for the container
 USER ${USERNAME}

.github/workflows/build_and_test_host.yml

@@ -67,7 +67,7 @@ jobs:
       - name: Install tools needed for ITF tests
         run: |
           sudo apt-get update
-          sudo apt-get install -y qemu-system-x86 iputils-ping tcpdump cloud-image-utils
+          sudo apt-get install -y qemu-system-x86 qemu-system-arm iputils-ping tcpdump cloud-image-utils libguestfs-tools
       - name: Allow linux-sandbox
         uses: eclipse-score/cicd-actions/unblock-user-namespace-for-linux-sandbox@8fe1bc8925f83e856b204932c9278a1fa874e604
       - run: df -h
@@ -76,8 +76,16 @@ jobs:
           echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
           sudo udevadm control --reload-rules
           sudo udevadm trigger --name-match=kvm
+      - name: Allow unprivileged user namespaces
+        run: |
+          sudo sysctl kernel.apparmor_restrict_unprivileged_userns=0
+      - name: Allow supermin to read kernel
+        run: |
+          sudo chmod a+r /boot/vmlinuz-$(uname -r)
       - name: Run Linux QEMU integration tests
         run: |
-          bazel test --config=qemu-integration //quality/... //tests/integration_test/...
+          bazel test \
+            --config=qemu-integration \
+            //quality/... //tests/integration_test/...
       - run: df -h
         if: always()

MODULE.bazel

@@ -282,8 +282,24 @@ http_archive(
 bazel_dep(name = "score_itf", version = "0.5.0", dev_dependency = True)
 bazel_dep(name = "score_rules_imagefs", version = "0.0.4", dev_dependency = True)
 
+git_override(
+    module_name = "score_itf",
+    commit = "a90575b5c2c491652d2d715d624774509c6a13c2",
+    patch_strip = 1,
+    patches = ["//:third_party/score_itf-qemu-ping-timeout.patch"],
+    remote = "https://github.com/elektrobit-contrib/eclipse-score_itf.git",
+)
+
 http_file = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "http_file")
 
+# EB Linux (EBcLfSA) fastdev image for aarch64 QEMU
+http_file(
+    name = "eb_corbos_toolkit_fastdev_archive",
+    downloaded_file_path = "fastdev-ubuntu-ebclfsa-ebcl-qemuarm64.tar.gz",
+    sha256 = "9ca3891b27e4b7bbf6c519d8924283e89c03b62513a988f751a3ee3d10c293e4",
+    urls = ["https://github.com/elektrobit/eb_corbos_toolkit/releases/download/v2.0.0-beta1/fastdev-ubuntu-ebclfsa-ebcl-qemuarm64.tar.gz"],
+)
+
 http_file(
     name = "ubuntu_24_04_cloudimg",
     downloaded_file_path = "noble-minimal-cloudimg-amd64.img",

REUSE.toml

@@ -51,7 +51,8 @@ path = [
     "tests/integration_test/vsomeip.json",
     "tests/benchmarks/config/benchmark_mw_com_config.json",
     "quality/integration_testing/environments/qnx8_qemu/qemu_config.json",
-    "quality/integration_testing/environments/ubuntu24_04_qemu/*"
+    "quality/integration_testing/environments/ubuntu24_04_qemu/*",
+    "quality/integration_testing/environments/ebclfsa_aarch64_qemu/*"
 ]
 SPDX-FileCopyrightText = "Copyright (c) 2026 Contributors to the Eclipse Foundation"
 SPDX-License-Identifier = "Apache-2.0"

quality/README.md

@@ -52,13 +52,13 @@ Integration tests are enabled only for QEMU-backed runs:
 
 ### filesystem tar
 
-The tests and their data are packaged into a filesystem tar and either build into (Docker) the image or uploaded after image startup.
+The tests and their data are packaged into a filesystem tar and overlaid onto the QEMU rootfs image before test execution.
 
 ### What Runs in QEMU
 
 #### Linux QEMU
 
-If QEMU is selected, the custom plugin [`linux_qemu`](integration_testing/plugins/linux_qemu/README.md) is used.
+If QEMU is selected, the upstream ITF QEMU plugin is used.
 
 #### QNX QEMU
 

quality/integration_testing/environments/ebclfsa_aarch64_qemu/BUILD

@@ -0,0 +1,41 @@
+# *******************************************************************************
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+
+exports_files(
+    [
+        "qemu_config.json",
+    ],
+    visibility = ["//:__subpackages__"],
+)
+
+filegroup(
+    name = "qemu_config",
+    srcs = ["qemu_config.json"],
+    visibility = ["//:__subpackages__"],
+)
+
+# Convenience alias for accessing the image
+alias(
+    name = "image",
+    actual = "//quality/integration_testing/images/ebclfsa_aarch64:image",
+    tags = ["manual"],
+    visibility = ["//visibility:public"],
+)
+
+# Convenience alias for accessing the kernel image
+alias(
+    name = "kernel",
+    actual = "//quality/integration_testing/images/ebclfsa_aarch64:kernel",
+    tags = ["manual"],
+    visibility = ["//visibility:public"],
+)

quality/integration_testing/environments/ebclfsa_aarch64_qemu/qemu_config.json

@@ -0,0 +1,14 @@
+{
+    "networks": [
+        {
+            "name": "tap0",
+            "ip_address": "169.254.158.190",
+            "gateway": "169.254.21.88"
+        }
+    ],
+    "ssh_port": 22,
+    "qemu_num_cores": 2,
+    "qemu_ram_size": "1G",
+    "qemu_machine": "virt-aarch64",
+    "qemu_kernel_cmdline": "root=/dev/vda1 sdk_enable lisa_syscall_whitelist=2026 rw sharedmem.enable_sharedmem=0 init=/usr/bin/ebclfsa-cflinit"
+}

quality/integration_testing/environments/ubuntu24_04_qemu/BUILD

@@ -16,7 +16,6 @@ exports_files(
         "qemu_config.json",
         "user-data",
         "meta-data",
-        "prepare_image.sh",
     ],
     visibility = ["//:__subpackages__"],
 )
@@ -27,78 +26,36 @@ filegroup(
     visibility = ["//:__subpackages__"],
 )
 
-# Network config for cloud-init
-# Tagged "manual" so it is only built when explicitly needed (linux_qemu tests).
-genrule(
-    name = "network_config",
-    srcs = ["qemu_config.json"],
-    outs = ["network-config.yaml"],
-    cmd = """
-set -euo pipefail
-
-python3 - <<'PY' "$(location qemu_config.json)" "$@"
-import json
-import sys
-
-config_path, output_path = sys.argv[1:3]
-
-with open(config_path, "r", encoding="utf-8") as config_file:
-    config = json.load(config_file)
-
-networks = config.get("networks", [])
-if not networks:
-    raise ValueError("qemu_config.json must define at least one network")
-
-network = networks[0]
-
-with open(output_path, "w", encoding="utf-8") as network_config:
-    network_config.write("version: 2\\n")
-    network_config.write("ethernets:\\n")
-    network_config.write("  testnic0:\\n")
-    network_config.write("    match:\\n")
-    network_config.write('      name: "en*"\\n')
-    network_config.write("    dhcp4: false\\n")
-    network_config.write("    dhcp6: false\\n")
-    network_config.write("    optional: true\\n")
-    network_config.write("    link-local: []\\n")
-    network_config.write("    addresses:\\n")
-    network_config.write(f"      - {network['ip_address']}/16\\n")
-    network_config.write("    routes:\\n")
-    network_config.write("      - to: default\\n")
-    network_config.write("        on-link: true\\n")
-    network_config.write(f"        via: {network['gateway']}\\n")
-PY
-""",
-    tags = ["manual"],
-    visibility = ["//:__subpackages__"],
-)
-
-# Cloud-init seed image generation to configure the Ubuntu 24.04 QEMU image on boot.
-# Tagged "manual" so it is only built when explicitly needed (linux_qemu tests).
+# Build a persistent Ubuntu base image with tools needed by integration tests.
+# It boots once with internet access and applies the cloud-init customization.
 genrule(
-    name = "seed_iso",
+    name = "prepared_image",
     srcs = [
-        ":network_config",
+        "@ubuntu_24_04_cloudimg//file",
+        "@score_itf//scripts:build_ubuntu_x86_64_image.sh",
+        "@score_itf//scripts:render_user_data.py",
         "user-data",
         "meta-data",
+        "qemu_config.json",
     ],
-    outs = ["seed.img"],
-    cmd = "cloud-localds -N $(location :network_config) $@ $(location user-data) $(location meta-data)",
-    tags = ["manual"],
-    visibility = ["//:__subpackages__"],
-)
-
-# Build a persistent Ubuntu base image with tools needed by integration tests.
-# It boots once with internet access and installs iputils-ping into the base image.
-genrule(
-    name = "prepared_image",
-    srcs = ["@ubuntu_24_04_cloudimg//file"],
     outs = ["ubuntu24_04_prepared.qcow2"],
-    cmd = "bash $(location prepare_image.sh) $(location @ubuntu_24_04_cloudimg//file) $@",
+    cmd = """
+        bash $(location @score_itf//scripts:build_ubuntu_x86_64_image.sh) \
+            $(RULEDIR) \
+            $(location @ubuntu_24_04_cloudimg//file) \
+            $@ \
+            $(location user-data) \
+            $(location meta-data) \
+            $(location qemu_config.json) \
+            $(location @score_itf//scripts:render_user_data.py)
+    """,
     tags = [
         "manual",
         "requires-network",
     ],
-    tools = ["prepare_image.sh"],
+    tools = [
+        "@score_itf//scripts:build_ubuntu_x86_64_image.sh",
+        "@score_itf//scripts:render_user_data.py",
+    ],
     visibility = ["//:__subpackages__"],
 )

quality/integration_testing/environments/ubuntu24_04_qemu/qemu_config.json

@@ -9,5 +9,5 @@
     "ssh_port": 22,
     "qemu_num_cores": 2,
     "qemu_ram_size": "2G",
-    "boot_mode": "disk"
+    "qemu_machine": "pc-x86_64"
 }