Summary

Add end-to-end functional tests to verify RHSM secrets discovery works correctly during dependency resolution and manifest building with RHEL CDN repositories.

Prerequisites

• #2281 - Consolidate osbuild-mpp to use osbuild.solver module

Test Infrastructure

• Standalone pytest script in test/cases/ (similar to image-builder-cli tests)
• Runs on GitLab runner (GA RHEL-10 system)
• Uses SUBSCRIPTION_ORG and SUBSCRIPTION_ACTIVATION_KEY environment variables for subscription-manager registration

Test Scenarios

Depsolving (via osbuild-mpp)

Use a minimal mpp manifest with RHEL CDN repositories to depsolve a small package set.

• Manifests produced by DNF and DNF5 depsolvers should be identical.

Building (via osbuild)

Use the preprocessed manifest to build a filesystem tree.

Container RHSM Discovery

The RHSM secrets discovery has special handling for containers to pick up secrets from the host system. This must be explicitly verified—the container does not need its own subscription when running on a subscribed host.

Test Manifest

A minimal mpp manifest that:

• Uses RHEL CDN repositories requiring RHSM authentication
• Depsolves a small package set (e.g., filesystem or similar)
• Produces a simple filesystem tree (no build pipeline required)

Upstream issue: https://github.com/osbuild/osbuild/issues/2282