test(conformance): run driver suites with cargo

Signed-off-by: Evan Lezar <elezar@nvidia.com>

Author: elezar

.github/actions/setup-e2e-cli/action.yml

@@ -1,12 +1,6 @@
 name: Setup E2E CLI
 description: Download architecture-matched prebuilt OpenShell host CLIs for E2E tests
 
-inputs:
-  conformance-artifact-prefix:
-    description: Optional conformance CLI artifact name prefix; linux-<arch> is appended automatically
-    required: false
-    default: ""
-
 runs:
   using: composite
   steps:
@@ -23,27 +17,3 @@ runs:
         chmod +x "$cli"
         "$cli" --version
         echo "OPENSHELL_BIN=$cli" >> "$GITHUB_ENV"
-
-    - name: Download prebuilt conformance CLI
-      if: inputs.conformance-artifact-prefix != ''
-      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
-      with:
-        name: ${{ format('{0}-{1}', inputs.conformance-artifact-prefix, runner.arch == 'X64' && 'x86_64-unknown-linux-musl' || 'aarch64-unknown-linux-musl') }}
-        path: .e2e/prebuilt-conformance
-
-    - name: Configure prebuilt conformance CLI
-      if: inputs.conformance-artifact-prefix != ''
-      shell: bash
-      run: | # zizmor: ignore[github-env] validated filename under the trusted workspace path
-        set -euo pipefail
-        conformance="$GITHUB_WORKSPACE/.e2e/prebuilt-conformance/openshell-conformance"
-        if [[ ! -f "$conformance" ]]; then
-          echo "downloaded artifact is missing $conformance" >&2
-          exit 1
-        fi
-        # TODO: Remove this temporary mode diagnostic after CI confirms artifact permission handling.
-        echo "conformance binary mode before chmod: $(ls -l "$conformance")"
-        chmod +x "$conformance"
-        echo "conformance binary mode after chmod: $(ls -l "$conformance")"
-        "$conformance" list --output json >/dev/null
-        echo "OPENSHELL_CONFORMANCE_BIN=$conformance" >> "$GITHUB_ENV"

.github/workflows/branch-e2e.yml

@@ -276,7 +276,6 @@ jobs:
     with:
       image-tag: ${{ github.sha }}
       runner: linux-arm64-cpu8
-      conformance-artifact-prefix: openshell-conformance
 
   podman-e2e:
     needs: [pr_metadata, build-binaries, build-images]
@@ -288,7 +287,6 @@ jobs:
     uses: ./.github/workflows/e2e-podman-test.yml
     with:
       image-tag: ${{ github.sha }}
-      conformance-artifact-prefix: openshell-conformance
       suite-matrix: >-
         [{"suite":"ci","runner":"ubuntu-26.04","podman_major":"5","podman_package_version":"5.7.0+ds2-3build1","conmon_package_version":"2.1.13+ds1-2","cmd":"mise run --no-deps --skip-deps e2e:podman:ci"}]
 
@@ -300,8 +298,6 @@ jobs:
       contents: read
       packages: read
     uses: ./.github/workflows/e2e-vm-test.yml
-    with:
-      conformance-artifact-prefix: openshell-conformance
 
   docker-external-driver-e2e:
     needs: [pr_metadata, build-binaries, build-gateway-plain, build-external-drivers, build-images]
@@ -316,7 +312,6 @@ jobs:
       runner: linux-arm64-cpu8
       gateway-artifact: openshell-gateway-plain-aarch64-unknown-linux-gnu
       external-driver-binary: openshell-driver-docker
-      conformance-artifact-prefix: openshell-conformance
       suite-matrix: >-
         [{"suite":"external-driver","cmd":"mise run --no-deps --skip-deps e2e:docker:external-driver","apt_packages":"openssh-client","python_proto":false,"mcp":false}]
 
@@ -332,7 +327,6 @@ jobs:
       image-tag: ${{ github.sha }}
       gateway-artifact: openshell-gateway-plain-x86_64-unknown-linux-gnu
       external-driver-binary: openshell-driver-podman
-      conformance-artifact-prefix: openshell-conformance
       suite-matrix: >-
         [{"suite":"external-driver","runner":"ubuntu-26.04","podman_major":"5","podman_package_version":"5.7.0+ds2-3build1","conmon_package_version":"2.1.13+ds1-2","cmd":"mise run --no-deps --skip-deps e2e:podman:external-driver"}]
 
@@ -348,7 +342,6 @@ jobs:
       gateway-artifact: openshell-gateway-plain-x86_64-unknown-linux-gnu
       suite-name: external-driver
       e2e-task: e2e:vm:external-driver
-      conformance-artifact-prefix: openshell-conformance
 
   gpu-e2e:
     needs: [pr_metadata, build-binaries, build-images]
@@ -360,7 +353,6 @@ jobs:
     uses: ./.github/workflows/e2e-gpu-test.yaml
     with:
       image-tag: ${{ github.sha }}
-      conformance-artifact-prefix: openshell-conformance
 
   kubernetes-e2e:
     needs: [pr_metadata, build-binaries, build-images]
@@ -382,7 +374,6 @@ jobs:
       image-tag: ${{ github.sha }}
       job-name: Kubernetes E2E (Rust smoke, Agent Sandbox ${{ matrix.agent_sandbox_api }})
       agent-sandbox-version: ${{ matrix.agent_sandbox_version }}
-      conformance-artifact-prefix: openshell-conformance
 
   kubernetes-workspace-managed-e2e:
     needs: [pr_metadata, build-binaries, build-images]
@@ -396,7 +387,6 @@ jobs:
       image-tag: ${{ github.sha }}
       job-name: Kubernetes E2E (workspace managed mode)
       e2e-task: e2e:kubernetes:workspace-managed
-      conformance-artifact-prefix: openshell-conformance
 
   kubernetes-external-driver-e2e:
     needs: [pr_metadata, build-binaries, build-gateway-plain, build-external-drivers, build-images]
@@ -413,7 +403,6 @@ jobs:
       gateway-artifact: openshell-gateway-plain-x86_64-unknown-linux-gnu
       external-driver-binary: openshell-driver-kubernetes
       cluster-images: sandbox supervisor
-      conformance-artifact-prefix: openshell-conformance
 
   kubernetes-workspace-operator-e2e:
     needs: [pr_metadata, build-binaries, build-images]
@@ -427,7 +416,6 @@ jobs:
       image-tag: ${{ github.sha }}
       job-name: Kubernetes E2E (workspace operator mode)
       e2e-task: e2e:kubernetes:workspace-operator
-      conformance-artifact-prefix: openshell-conformance
 
   kubernetes-ha-e2e:
     needs: [pr_metadata, build-binaries, build-images]
@@ -445,7 +433,6 @@ jobs:
       test-name: kubernetes_ha_rebalancing
       kubernetes-features: e2e,e2e-host-gateway,e2e-kubernetes,e2e-kubernetes-ha
       use-envoy-gateway: true
-      conformance-artifact-prefix: openshell-conformance
 
   kubernetes-credential-drivers-e2e:
     needs: [pr_metadata, build-binaries, build-images]
@@ -459,7 +446,6 @@ jobs:
       image-tag: ${{ github.sha }}
       job-name: Kubernetes Credential Drivers E2E
       e2e-task: e2e:kubernetes:credential-drivers
-      conformance-artifact-prefix: openshell-conformance
 
   core-e2e-result:
     name: Core E2E result

.github/workflows/build-binaries.yml

@@ -61,22 +61,6 @@ jobs:
           supervisor-image-tag: ${{ inputs.supervisor-image-tag }}
           extra-cargo-flags: ${{ env.EXTRA_CARGO_FLAGS }}
 
-  conformance:
-    name: openshell-conformance (${{ matrix.triple }})
-    env:
-      PACKAGE: openshell-conformance-cli
-      BINARY: openshell-conformance
-    strategy:
-      matrix:
-        include:
-          - triple: x86_64-unknown-linux-musl
-            runner: linux-amd64-cpu8
-          - triple: aarch64-unknown-linux-musl
-            runner: linux-arm64-cpu8
-    runs-on: ${{ matrix.runner }}
-    timeout-minutes: 60
-    steps: *build_steps
-
   prover:
     name: openshell-prover (${{ matrix.triple }})
     env:

.github/workflows/e2e-docker-test.yml

@@ -25,10 +25,6 @@ on:
         required: false
         type: string
         default: ""
-      conformance-artifact-prefix:
-        required: false
-        type: string
-        default: ""
       suite-matrix:
         required: false
         type: string
@@ -71,8 +67,6 @@ jobs:
           persist-credentials: false
 
       - uses: ./.github/actions/setup-e2e-cli
-        with:
-          conformance-artifact-prefix: ${{ inputs.conformance-artifact-prefix }}
 
       - uses: ./.github/actions/setup-e2e-gateway
         with:

.github/workflows/e2e-gpu-test.yaml

@@ -7,11 +7,6 @@ on:
         description: "Image tag to test (typically the commit SHA)"
         required: true
         type: string
-      conformance-artifact-prefix:
-        description: "Optional prebuilt conformance CLI artifact prefix (artifact suffix is <triple>)"
-        required: false
-        type: string
-        default: ""
 
 permissions:
   actions: read
@@ -66,8 +61,6 @@ jobs:
 
       - name: Use prebuilt OpenShell CLI
         uses: ./.github/actions/setup-e2e-cli
-        with:
-          conformance-artifact-prefix: ${{ inputs.conformance-artifact-prefix }}
 
       - name: Use prebuilt OpenShell gateway
         uses: ./.github/actions/setup-e2e-gateway

.github/workflows/e2e-kubernetes-test.yml

@@ -67,11 +67,6 @@ on:
         required: false
         type: string
         default: ""
-      conformance-artifact-prefix:
-        description: "Optional prebuilt conformance CLI artifact prefix (artifact suffix is <triple>)"
-        required: false
-        type: string
-        default: ""
       external-driver-binary:
         description: "Optional standalone compute driver binary used to compose a local test image"
         required: false
@@ -112,8 +107,6 @@ jobs:
 
       - name: Use prebuilt OpenShell CLI
         uses: ./.github/actions/setup-e2e-cli
-        with:
-          conformance-artifact-prefix: ${{ inputs.conformance-artifact-prefix }}
 
       - name: Use prebuilt OpenShell gateway
         if: inputs.gateway-artifact != ''

.github/workflows/e2e-podman-test.yml

@@ -21,10 +21,6 @@ on:
         required: false
         type: string
         default: ""
-      conformance-artifact-prefix:
-        required: false
-        type: string
-        default: ""
       suite-matrix:
         required: true
         type: string
@@ -56,8 +52,6 @@ jobs:
           persist-credentials: false
 
       - uses: ./.github/actions/setup-e2e-cli
-        with:
-          conformance-artifact-prefix: ${{ inputs.conformance-artifact-prefix }}
 
       - uses: ./.github/actions/setup-e2e-gateway
         with:

.github/workflows/e2e-vm-test.yml

@@ -22,10 +22,6 @@ on:
         required: false
         type: string
         default: e2e:vm
-      conformance-artifact-prefix:
-        required: false
-        type: string
-        default: ""
 
 permissions:
   actions: read
@@ -47,8 +43,6 @@ jobs:
           persist-credentials: false
 
       - uses: ./.github/actions/setup-e2e-cli
-        with:
-          conformance-artifact-prefix: ${{ inputs.conformance-artifact-prefix }}
 
       - uses: ./.github/actions/setup-e2e-gateway
         with:

.github/workflows/release-dev.yml

@@ -151,7 +151,6 @@ jobs:
       image-tag: ${{ github.sha }}
       checkout-ref: ${{ github.sha }}
       runner: linux-arm64-cpu8
-      conformance-artifact-prefix: openshell-conformance
 
   vm-e2e:
     needs: [build-binaries, build-vm-driver]
@@ -162,7 +161,6 @@ jobs:
     uses: ./.github/workflows/e2e-vm-test.yml
     with:
       checkout-ref: ${{ github.sha }}
-      conformance-artifact-prefix: openshell-conformance
 
   tag-ghcr-dev:
     name: Tag GHCR Images as Dev

.github/workflows/release-tag.yml

@@ -201,7 +201,6 @@ jobs:
       image-tag: ${{ needs.compute-versions.outputs.source_sha }}
       checkout-ref: ${{ needs.compute-versions.outputs.source_sha }}
       runner: linux-arm64-cpu8
-      conformance-artifact-prefix: openshell-conformance
 
   vm-e2e:
     needs: [compute-versions, build-binaries, build-vm-driver]
@@ -212,7 +211,6 @@ jobs:
     uses: ./.github/workflows/e2e-vm-test.yml
     with:
       checkout-ref: ${{ needs.compute-versions.outputs.source_sha }}
-      conformance-artifact-prefix: openshell-conformance
 
   qualification-result:
     name: Release Qualification