runtests: Add parallel mode

.github/workflows/ci.yml

@@ -19,6 +19,7 @@ concurrency:
 
 env:
   DEBIAN_FRONTEND: noninteractive
+  RUNTEST_JOBS: 8
 
 jobs:
 
@@ -56,7 +57,7 @@ jobs:
     - name: Test
       run: |
         set -x
-        scripts/rip-environment runtests -p -d
+        scripts/rip-environment runtests -j $RUNTEST_JOBS -p -d
     - name: Upload UI smoke screenshots
       if: always()
       uses: actions/upload-artifact@v7
@@ -120,7 +121,7 @@ jobs:
     - name: Test
       run: |
         set -x
-        scripts/rip-environment runtests -p ./tests
+        scripts/rip-environment runtests -j $RUNTEST_JOBS -p ./tests
     - name: Verify no untracked or modified files after test
       run: |
         .github/scripts/verify-clean-repo.sh
@@ -188,7 +189,7 @@ jobs:
     - name: Test
       run: |
         set -x
-        scripts/rip-environment runtests -p -d
+        scripts/rip-environment runtests -j $RUNTEST_JOBS -p -d
     - name: Upload UI smoke screenshots
       if: always()
       uses: actions/upload-artifact@v7
@@ -300,7 +301,7 @@ jobs:
     timeout-minutes: 75
     strategy:
       matrix:
-        runner: ["ubuntu-24.04", "ubuntu-24.04-arm"]
+        runner: ["ubuntu-26.04", "ubuntu-26.04-arm"]
         image: ["debian:bookworm", "debian:trixie", "debian:sid"]
         include:
           - allow_fail: False
@@ -313,7 +314,19 @@ jobs:
       image: ${{ matrix.image }}
       # IPC_OWNER is needed for shmget IPC_CREAT
       # SYS_ADMIN is needed for shmctl IPC_SET
-      options: --cap-add=IPC_OWNER --cap-add=SYS_ADMIN
+      # needed for bwrap parallel tests:
+      #   --security-opt apparmor=unconfined
+      #   --security-opt seccomp=unconfined
+      #   --security-opt systempaths=unconfined
+      # needed for parallel tests due to an overlay is mounted in /tmp and overlay over overlay fails:
+      #   --tmpfs /tmp:rw
+      options: >-
+        --cap-add=IPC_OWNER
+        --cap-add=SYS_ADMIN
+        --security-opt apparmor=unconfined
+        --security-opt seccomp=unconfined
+        --security-opt systempaths=unconfined
+        --tmpfs /tmp:rw
     continue-on-error: ${{ matrix.allow_fail }}
     steps:
     - name: Dump GitHub context
@@ -359,8 +372,8 @@ jobs:
       run: |
         set -x
         adduser --disabled-password --gecos "" testrunner
-        chmod 0777 $(find tests/ -type d) # make test dirs world-writable for the testrunner
-        su -c "./scripts/runtests -p -d ./tests" testrunner
+        chown -R testrunner:testrunner tests # make test dirs owned by testrunner for parallel execution
+        su -c "./scripts/runtests -j $RUNTEST_JOBS -p -d ./tests" testrunner
     - name: Verify no untracked or modified files after test
       run: |
         .github/scripts/verify-clean-repo.sh ':(exclude)VERSION' ':(exclude)debian/changelog'
@@ -388,7 +401,7 @@ jobs:
         if-no-files-found: error
 
   package-indep:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 75
     strategy:
       matrix:

debian/control.top.in

@@ -19,6 +19,8 @@ Build-Depends:
     autoconf,
     automake,
     bwidget (>= 1.7),
+    bubblewrap,
+    parallel,
     desktop-file-utils,
     intltool,
     libboost-python-dev,