QNX8 QEMU x86_64 Integration tests

.bazelrc

@@ -1,5 +1,5 @@
 # *******************************************************************************
-# Copyright (c) 2025 Contributors to the Eclipse Foundation
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
 #
 # See the NOTICE file(s) distributed with this work for additional
 # information regarding copyright ownership.
@@ -16,7 +16,6 @@ build --java_language_version=17
 build --tool_java_language_version=17
 build --java_runtime_version=remotejdk_17
 build --tool_java_runtime_version=remotejdk_17
-
 # ============================================================================
 # Multi-Architecture Build Configuration
 # ============================================================================
@@ -49,19 +48,28 @@ common:aarch64-linux --config=_toolchain_common
 common:aarch64-linux --platforms=@score_bazel_platforms//:aarch64-linux-gcc_12.2.0-posix
 common:aarch64-linux --extra_toolchains=@score_gcc_aarch64_toolchain//:all
 common:aarch64-linux --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_aarch64_unknown_linux_gnu
+common:aarch64-linux --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_unknown_linux_gnu
 common:aarch64-linux --repo_env=TARGET_ARCH=aarch64
 
 common:x86_64-qnx --config=_toolchain_common
 common:x86_64-qnx --platforms=@score_bazel_platforms//:x86_64-qnx-sdp_8.0.0-posix
 common:x86_64-qnx --extra_toolchains=@score_qcc_x86_64_toolchain//:all
 common:x86_64-qnx --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_pc_nto_qnx800
+common:x86_64-qnx --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_unknown_linux_gnu
 common:x86_64-qnx --repo_env=TARGET_ARCH=x86_64
+common:x86_64-qnx --sandbox_writable_path=/var
+common:x86_64-qnx --action_env=QNX_TARGET_ARCH=x86_64
+test:x86_64-qnx --spawn_strategy=local   # Disable sandbox: bazel tests command need to be able to access the QEMU network
 
 common:aarch64-qnx --config=_toolchain_common
 common:aarch64-qnx --platforms=@score_bazel_platforms//:aarch64-qnx-sdp_8.0.0-posix
 common:aarch64-qnx --extra_toolchains=@score_qcc_aarch64_toolchain//:all
 common:aarch64-qnx --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_aarch64_unknown_nto_qnx800
+common:aarch64-qnx --extra_toolchains=@score_toolchains_rust//toolchains/ferrocene:ferrocene_x86_64_unknown_linux_gnu
 common:aarch64-qnx --repo_env=TARGET_ARCH=aarch64
+common:aarch64-qnx --sandbox_writable_path=/var/tmp
+common:aarch64-qnx --action_env=QNX_TARGET_ARCH=aarch64le
+test:aarch64-qnx --spawn_strategy=local  # Disable sandbox: bazel tests command need to be able to access the QEMU network
 
 common --credential_helper=*.qnx.com=%workspace%/.github/tools/qnx_credential_helper.py
 

.devcontainer/Dockerfile

@@ -14,6 +14,28 @@
 # Use Dockerfile to get dependabot version bumps after new image is released
 FROM ghcr.io/eclipse-score/devcontainer:v1.2.0
 
+# Set the value if a proxy is used: cntlm, Px, etc.Example: BUILD_PROXY = http://host.docker.internal:<port>
+ARG BUILD_PROXY=""
+
+# Install networking and QEMU tools (conditionally using proxy if provided)
+RUN if [ -n "$BUILD_PROXY" ]; then \
+        export http_proxy="${BUILD_PROXY}"; \
+        export https_proxy="${BUILD_PROXY}"; \
+    fi; \
+    apt-get update \
+    && apt-get install -y --no-install-recommends \
+        software-properties-common \
+    && add-apt-repository -y universe \
+    && apt-get update \
+    && apt-get install -y --no-install-recommends \
+        bridge-utils \
+        iproute2 \
+        iputils-ping \
+        iptables \
+        libcap2-bin \
+        qemu-system-x86 \
+        tcpdump
+
 # Build argument for dynamic username (defaults to 'vscode' if not provided)
 ARG USERNAME=vscode
 

.devcontainer/devcontainer.json

@@ -4,11 +4,16 @@
         "dockerfile": "Dockerfile",
         "args": {
             "USERNAME": "${localEnv:USER}"
-        }
+        },
+        "options": [
+            "--add-host=host.docker.internal:host-gateway"
+        ]
     },
     "remoteUser": "${localEnv:USER}",
     "runArgs": [
-        "--privileged"
+        "--privileged",
+        "--add-host=host.docker.internal:host-gateway",
+        "--device=/dev/kvm"
     ],
     "mounts": [
         {
@@ -35,5 +40,6 @@
                 "streetsidesoftware.code-spell-checker"
             ]
         }
-    }
+    },
+    "postStartCommand": "sudo chmod 666 /dev/kvm && sudo deployment/qemu/setup_bridge.sh"
 }

.github/workflows/build_and_test_qnx.yml

@@ -44,3 +44,57 @@ jobs:
       score-qnx-license: ${{ secrets.SCORE_QNX_LICENSE }}
       score-qnx-user: ${{ secrets.SCORE_QNX_USER }}
       score-qnx-password: ${{ secrets.SCORE_QNX_PASSWORD }}
+
+  # QEMU integration tests - runs built QNX binaries in QEMU
+  # Bridge networking required for x86_64-qnx SOME/IP communication between QEMU instances
+  qemu_integration_tests:
+    strategy:
+      fail-fast: false
+      matrix:
+        bazel-config: ["x86_64-qnx", "aarch64-qnx"]
+    runs-on: ubuntu-24.04
+    needs: build_and_test_qnx
+    permissions:
+      contents: read
+      pull-requests: read
+    env:
+      SCORE_QNX_USER: ${{ secrets.SCORE_QNX_USER }}
+      SCORE_QNX_PASSWORD: ${{ secrets.SCORE_QNX_PASSWORD }}
+      SCORE_QNX_LICENSE: ${{ secrets.SCORE_QNX_LICENSE }}
+    steps:
+      - uses: eclipse-score/more-disk-space@v1
+      - name: Checkout repository
+        uses: actions/checkout@v4.2.2
+      - name: Create Bazel output base directory
+        run: |
+          sudo mkdir -p /mnt/.bazel
+          sudo chown -R $USER:$USER /mnt/.bazel
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.18.0
+        with:
+          output-base: /mnt/.bazel
+          bazelisk-cache: true
+          disk-cache: ${{ github.workflow }}-${{ matrix.bazel-config }}-tests
+          repository-cache: true
+          external-cache: true
+      - name: Allow linux-sandbox
+        uses: ./.github/actions/unblock_user_namespace_for_linux_sandbox
+      - name: Install QEMU bridge prerequisites
+        if: matrix.bazel-config == 'x86_64-qnx'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y bridge-utils qemu-system-x86 iproute2 tcpdump libcap2-bin
+      - name: Enable KVM access
+        if: matrix.bazel-config == 'x86_64-qnx'
+        run: |
+          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm.rules
+          sudo udevadm control --reload-rules
+          sudo udevadm trigger --name-match=kvm
+          ls -la /dev/kvm
+      - name: Setup QEMU bridge network
+        if: matrix.bazel-config == 'x86_64-qnx'
+        run: |
+          sudo ./deployment/qemu/setup_bridge.sh setup
+      - name: Bazel test
+        run: |
+          bazel test --config ${{ matrix.bazel-config }} --test_output=all //tests/...

MODULE.bazel

@@ -1,5 +1,5 @@
 # *******************************************************************************
-# Copyright (c) 2025 Contributors to the Eclipse Foundation
+# Copyright (c) 2026 Contributors to the Eclipse Foundation
 #
 # See the NOTICE file(s) distributed with this work for additional
 # information regarding copyright ownership.
@@ -10,7 +10,6 @@
 #
 # SPDX-License-Identifier: Apache-2.0
 # *******************************************************************************
-
 module(
     name = "score_someip_gateway",
     version = "0.0.1",
@@ -56,6 +55,16 @@ use_repo(pip, "score_someip_gateway_pip")
 bazel_dep(name = "googletest", version = "1.17.0.bcr.2", dev_dependency = True)
 bazel_dep(name = "google_benchmark", version = "1.9.5", dev_dependency = True)
 
+# Opened problem report at: https://github.com/eclipse-score/itf/issues/60
+bazel_dep(name = "score_itf", version = "0.1.0")
+git_override(
+    module_name = "score_itf",
+    commit = "e994cb6",  # Main branch with simplified QEMU plugin
+    patch_strip = 1,
+    patches = ["//third_party:score_itf_oci_conflict.patch"],
+    remote = "https://github.com/eclipse-score/itf.git",
+)
+
 # ============================================================================
 # Build System Rules & Utilities
 # ============================================================================
@@ -67,6 +76,9 @@ bazel_dep(name = "rules_cc", version = "0.2.17")
 bazel_dep(name = "rules_pkg", version = "1.2.0")
 bazel_dep(name = "rules_rust", version = "0.69.0")
 
+# Required by score_rules_imagefs qnx_ifs rule for tar extraction
+bazel_dep(name = "tar.bzl", version = "0.7.0")
+
 # ============================================================================
 # Toolchains & Platform Configuration
 # ============================================================================
@@ -127,7 +139,42 @@ use_repo(
     "score_gcc_x86_64_toolchain",
     "score_qcc_aarch64_toolchain",
     "score_qcc_x86_64_toolchain",
+    "score_qcc_x86_64_toolchain_pkg",
+)
+
+register_toolchains(
+    "@score_gcc_x86_64_toolchain//:all",
+    "@score_gcc_aarch64_toolchain//:all",
+    "@score_qcc_x86_64_toolchain//:all",
+    "@score_qcc_aarch64_toolchain//:all",
+    "@imagefs_qnx_ifs//:all",
+    dev_dependency = True,
+)
+
+# ============================================================================
+# QNX IFS Image Toolchain (for building QEMU filesystem images via mkifs)
+# ============================================================================
+bazel_dep(name = "score_rules_imagefs", version = "0.0.1", dev_dependency = True)
+git_override(
+    module_name = "score_rules_imagefs",
+    commit = "38d5a1a5e5d83faa5d00e4d2f31c303db0d0f7de",
+    remote = "https://github.com/eclipse-score/rules_imagefs",
+)
+
+imagefs = use_extension(
+    "@score_rules_imagefs//extensions:imagefs.bzl",
+    "imagefs",
+    dev_dependency = True,
+)
+imagefs.toolchain(
+    name = "imagefs_qnx_ifs",
+    sdp_to_import = "@score_qcc_x86_64_toolchain_pkg",
+    sdp_version = "8.0.0",
+    target_cpu = "x86_64",
+    target_os = "qnx",
+    type = "ifs",
 )
+use_repo(imagefs, "imagefs_qnx_ifs")
 
 # ============================================================================
 # LLVM C/C++ Toolchain Configuration
@@ -158,7 +205,7 @@ register_toolchains(
 # ============================================================================
 # Tooling & Development
 # ============================================================================
-bazel_dep(name = "score_tooling", version = "1.0.4", dev_dependency = True)
+bazel_dep(name = "score_tooling", version = "1.1.2", dev_dependency = True)
 bazel_dep(name = "aspect_rules_lint", version = "2.3.0", dev_dependency = True)
 bazel_dep(name = "buildifier_prebuilt", version = "8.5.1", dev_dependency = True)
 

README.md

@@ -55,42 +55,40 @@ bazel run //examples/car_window_sim:car_window_controller
 If you type `open` or `close` the command will be sent via network.
 
 
-### Dockerized integration test POC
+### QEMU x86_64 - based integration test and unit tests
 
-For integration tests, a docker based approach was taken.
-As a proof of concept `docker compose` can be used to build, setup and run the containers.
-In the future a pytest based setup can be implemented to orchestrate the containers.
+For integration tests where the communication between two QEMU instances is required, a custom implementation is used to start and manage the QEMU instances within the test logic. This is because ITF does not support starting multiple QEMU instances in parallel yet.
 
-Build the docker containers:
+**Prerequisite: Network Setup**
+The network bridge and tap interfaces must be configured before running the tests.
+
+- **Dev container**: this is done automatically on container start via `deployment/qemu/setup_bridge.sh`.
+- **Host machine**: run the script manually with sudo privileges:
 
 ```sh
-docker compose --project-directory tests/integration/docker_setup/ build
+sudo deployment/qemu/setup_bridge.sh
 ```
 
-Start up the containers:
+It is recommended to run all tests with `--nocache_test_results` to ensure you are always running the latest version of the tests and not accidentally seeing cached results.
+
+To run all tests (will take around 2 minutes):
 
 ```sh
-docker compose --project-directory tests/integration/docker_setup/ up
+bazel test  //tests/...  --test_output=all --nocache_test_results --config=x86_64-qnx
 ```
 
-Those containers are pre-configured (IP adresses, multicast route, ...).
-The someipd-1 container already starts up the `gatewayd` and the `someipd`.
-
-In Wireshark the network traffic can be seen by capturing on `any` with `ip.addr== 192.168.87.2 || ip.addr ==192.168.87.3`.
-
-On the client side, start up the `sample_client` in another shell:
+For Integration SOMEIP Service Discovery tests:
 
 ```sh
-docker exec -it --env VSOMEIP_CONFIGURATION=/home/source/tests/integration/sample_client/vsomeip.json docker_setup-client-1 /home/source/bazel-bin/tests/integration/sample_client/sample_client
+bazel test //tests/integration/... --test_output=all --config=x86_64-qnx
 ```
 
-Finally start the benchmark on the someipd-1 container in a third shell:
+Run a specific integration test `test_negative_only_qemu1_with_services` for SOMEIP Service Discovery test suite:
 
 ```sh
-docker exec -it docker_setup-someipd-1 /home/source/bazel-bin/tests/performance_benchmarks/ipc_benchmarks
+bazel test //tests/integration:someip_integration_tests --test_output=all --config=x86_64-qnx --test_arg='-k' --test_arg='test_negative_only_qemu1_with_services'
 ```
 
-
 ## 📝 Configuration
 
 ### Gatewayd Config Schema Validation

REUSE.toml

@@ -48,7 +48,21 @@ path = [
     "tests/integration/sample_client/vsomeip.json",
     "tests/integration/vsomeip-local.json",
     "tests/integration/vsomeip.json",
+    "tests/integration/qemu_config.json",
     "tests/performance_benchmarks/config/benchmark_mw_com_config.json"
 ]
 SPDX-FileCopyrightText = "Copyright (c) 2026 Contributors to the Eclipse Foundation"
 SPDX-License-Identifier = "Apache-2.0"
+
+[[annotations]]
+path = [
+    "deployment/qemu/configs/group",
+    "deployment/qemu/configs/passwd",
+    "deployment/qemu/configs/pci_hw.cfg",
+    "deployment/qemu/configs/pci_server.cfg",
+    "deployment/qemu/configs/qcrypto.conf",
+    "deployment/qemu/configs/sshd_config",
+    "deployment/qemu/init_x86_64.build"
+]
+SPDX-FileCopyrightText = "Copyright (c) 2026 Contributors to the Eclipse Foundation"
+SPDX-License-Identifier = "Apache-2.0"