ci: qualify Ubuntu branch installs with DEB packages

Signed-off-by: Evan Lezar <elezar@nvidia.com>

Author: elezar

.github/workflows/branch-e2e.yml

@@ -89,6 +89,7 @@ jobs:
     timeout-minutes: 5
     outputs:
       cargo: ${{ steps.version.outputs.cargo }}
+      deb_version: ${{ steps.version.outputs.deb_version }}
       rpm_version: ${{ steps.version.outputs.rpm_version }}
       rpm_release: ${{ steps.version.outputs.rpm_release }}
     steps:
@@ -101,10 +102,12 @@ jobs:
         id: version
         run: |
           cargo="$(python3 tasks/scripts/release.py get-version --cargo)"
+          deb_version="$(python3 tasks/scripts/release.py get-version --dev --deb)"
           rpm_version="$(python3 tasks/scripts/release.py get-version --dev --rpm-version)"
           rpm_release="$(python3 tasks/scripts/release.py get-version --dev --rpm-release)"
           {
             echo "cargo=$cargo"
+            echo "deb_version=$deb_version"
             echo "rpm_version=$rpm_version"
             echo "rpm_release=$rpm_release"
           } >> "$GITHUB_OUTPUT"
@@ -208,6 +211,18 @@ jobs:
       packages: write
     uses: ./.github/workflows/build-images.yml
 
+  build-deb:
+    name: Build Debian packages
+    needs: [pr_metadata, version, build-binaries, build-vm-driver]
+    if: needs.pr_metadata.outputs.run_integration == 'true'
+    permissions:
+      contents: read
+      packages: read
+    uses: ./.github/workflows/deb-package.yml
+    with:
+      checkout-ref: ${{ github.sha }}
+      deb-version: ${{ needs.version.outputs.deb_version }}
+
   build-rpm:
     name: Build RPM packages
     needs: [pr_metadata, version, build-binaries]
@@ -223,14 +238,15 @@ jobs:
       cargo-version: ${{ needs.version.outputs.cargo }}
 
   prepare-integration:
-    needs: [pr_metadata, build-binaries, build-images, build-rpm]
+    needs: [pr_metadata, build-binaries, build-images, build-deb, build-rpm]
     if: needs.pr_metadata.outputs.run_integration == 'true'
     permissions:
       actions: read
       contents: read
       packages: read
     uses: ./.github/workflows/prepare-integration-inputs.yml
     with:
+      deb-artifact-name: deb-linux-amd64
       rpm-artifact-name: rpm-linux-x86_64
 
   # Run driver-independent conformance tests.
@@ -247,7 +263,7 @@ jobs:
       integration-inputs-artifact-id: ${{ needs.prepare-integration.outputs.integration_inputs_artifact_id }}
       test-matrix: >-
         [
-          {"environment":"ubuntu-docker-rootful","installer":"binaries","testsuite":"conformance"},
+          {"environment":"ubuntu-docker-rootful","installer":"deb","testsuite":"conformance"},
           {"environment":"ubuntu-k3s","installer":"k3s","testsuite":"conformance"},
           {"environment":"fedora-podman-rootful","installer":"rpm","testsuite":"conformance"},
           {"environment":"fedora-podman-rootless","installer":"rpm","testsuite":"conformance"}

CI.md

@@ -24,9 +24,10 @@ Main and manual runs also build release binaries, with `continue-on-error: true`
 so Windows failures do not fail the workflow.
 
 Every approved `Branch E2E Checks` run builds the RPM packages, including
-runs without optional E2E labels. Core integration qualification installs the
-CLI and gateway RPMs on Fedora with rootful and rootless Podman and runs conformance using
-the matching runtime images. Release Dev and Release Tag run the same RPM lane.
+runs without optional E2E labels. Core integration qualification builds and installs
+the DEB on Ubuntu with Docker and installs the CLI and gateway RPMs on Fedora with
+rootful and rootless Podman. These lanes run conformance using the matching runtime
+images. Release Dev and Release Tag use the same package installers.
 
 Three opt-in labels enable the long-running E2E suites: