chore: Add preflight to check job and workflow cancel on failure

Author: alisonlhart

.github/workflows/ci.yaml

@@ -49,6 +49,8 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         MISE_TRUSTED_CONFIG_PATHS: /
+        SKIP_PODMAN: 1
+        SKIP_DOCKER: 1
     continue-on-error: false
     outputs:
       commit_context: ${{ steps.extract_context.outputs.context }}
@@ -103,6 +105,11 @@ jobs:
         run: |
           task build
 
+      - name: task package
+        timeout-minutes: 3
+        run: |
+          task package
+
       - name: Run context-specific command
         if: >-
           steps.extract_context.outputs.context != '' &&
@@ -120,10 +127,13 @@ jobs:
         run: |
           task docs
 
-      - name: task package
-        timeout-minutes: 2
+      - name: Cancel workflow on preflight failure
+        if: failure()
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          task package
+          echo "Preflight failed - cancelling workflow"
+          gh api repos/${{ github.repository }}/actions/runs/${{ github.run_id }}/cancel -X POST
 
   build:
     name: ${{ matrix.name }}
@@ -472,6 +482,7 @@ jobs:
   check: # This job does nothing and is only used for the branch protection
     needs:
       - build
+      - preflight
 
     permissions:
       checks: read # codecov

Containerfile

@@ -15,8 +15,37 @@ WORKDIR /context
 # install ansible-dev-tools specific packages and dependencies while avoiding
 # adding multiple layers to the image.
 # cspell:disable-next-line
-RUN apt-get update && apt-get install -q -y golang-github-go-enry-go-oniguruma-dev curl file git git-lfs sudo
-RUN --mount=type=bind,target=. ls /context
+RUN apt-get update && apt-get install -q -y \
+curl \
+file \
+git \
+git-lfs \
+golang-github-go-enry-go-oniguruma-dev \
+libasound2 \
+libatk-bridge2.0-0 \
+libatk1.0-0 \
+libatspi2.0-0 \
+libcairo2 \
+libcups2 \
+libdbus-1-3 \
+libdrm2 \
+libgbm1 \
+libgdk-pixbuf-2.0-0 \
+libgtk-3-0 \
+libnspr4 \
+libnss3 \
+libpango-1.0-0 \
+libpangocairo-1.0-0 \
+libxcb1 \
+libxcomposite1 \
+libxdamage1 \
+libxfixes3 \
+libxkbcommon0 \
+libxrandr2 \
+libxshmfence1 \
+lsof \
+sudo \
+xvfb
 RUN --mount=type=bind,target=. \
 --mount=type=cache,target=/root/.local/share/mise,sharing=locked \
 --mount=type=cache,target=/root/.cache/mise,sharing=locked \