fix(os): make virtual usb proof conditional in ci

Author: NubsCarson

.github/workflows/elizaos-os-release.yml

@@ -44,7 +44,11 @@ jobs:
           bun run --cwd packages/os/usb-installer build
           bunx playwright install --with-deps chromium
           bun run --cwd packages/os/usb-installer test:e2e
-          bun run --cwd packages/os/usb-installer test:linux-virtual-usb
+          if modinfo scsi_debug >/dev/null 2>&1; then
+            bun run --cwd packages/os/usb-installer test:linux-virtual-usb
+          else
+            echo "::notice::scsi_debug kernel module is unavailable on this runner; skipping virtual block-device USB proof."
+          fi
 
       - name: Validate Android installer
         run: |

.github/workflows/release-usb-installer.yml

@@ -38,7 +38,11 @@ jobs:
         run: |
           bunx playwright install --with-deps chromium
           bun run --cwd packages/os/usb-installer test:e2e
-          bun run --cwd packages/os/usb-installer test:linux-virtual-usb
+          if modinfo scsi_debug >/dev/null 2>&1; then
+            bun run --cwd packages/os/usb-installer test:linux-virtual-usb
+          else
+            echo "::notice::scsi_debug kernel module is unavailable on this runner; skipping virtual block-device USB proof."
+          fi
       - name: Package desktop app
         run: bun run --cwd packages/os/usb-installer package:${{ matrix.platform }}
       - uses: actions/upload-artifact@v4

packages/os/usb-installer/HANDOFF.md

@@ -103,7 +103,8 @@ behind the backend contract and future signed/elevated helpers.
   - UI copy no longer claims Linux/Windows eject or readback behavior that the
     current backends do not perform;
   - OS release CI and the Linux release-packaging path now run Playwright E2E
-    and the opt-in `scsi_debug` virtual block-device proof.
+    and run the opt-in `scsi_debug` virtual block-device proof when the runner
+    kernel provides that module.
 - Post-merge validation on 2026-05-20 after merging
   `origin/develop@c73f1768b6`:
   - `bun run verify:cloud` passed;

packages/os/usb-installer/README.md

@@ -64,6 +64,7 @@ That test requires Linux, passwordless `sudo -n`, and the kernel
 model `ELIZAUSBTEST`, writes a trusted 4 MiB image through the same local
 server/Linux backend flow, reads the first 4 MiB back, verifies SHA-256, and
 unloads the module. It refuses to run if `scsi_debug` is already loaded.
+CI runs this proof only on Linux runners that provide the `scsi_debug` module.
 
 Run the local app:
 

packages/os/usb-installer/src/__tests__/linux-virtual-block-device-e2e.test.ts

@@ -49,6 +49,10 @@ async function commandSucceeds(
   }
 }
 
+async function scsiDebugModuleAvailable(): Promise<boolean> {
+  return commandSucceeds("modinfo", ["scsi_debug"]);
+}
+
 async function loadVirtualUsbDisk(): Promise<void> {
   const alreadyLoaded = await commandSucceeds("sh", [
     "-c",
@@ -197,6 +201,13 @@ describe("Linux USB installer virtual block-device E2E", () => {
   scsiDebugIt(
     "writes a trusted image to a disposable scsi_debug removable block device",
     async () => {
+      if (!(await scsiDebugModuleAvailable())) {
+        console.warn(
+          "scsi_debug kernel module is unavailable; skipping virtual block-device proof on this host.",
+        );
+        return;
+      }
+
       process.env.ELIZAOS_USB_ENABLE_RAW_WRITE = "1";
 
       const tempDir = await fs.mkdtemp(