From eabbea5508222ceba66f8800e5ef47fa2aa23b61 Mon Sep 17 00:00:00 2001
From: Lukasz Raczylo <lukasz@raczylo.com>
Date: Mon, 17 Aug 2026 10:55:48 +0100
Subject: [PATCH] fix(tests): pull the docker base image before layer
 inspection

BuildKit caches base layers outside the image store, so the inspect
step failed on CI runners with no cached alpine image. The test now
pulls explicitly and skips when the pull cannot succeed.
---
 internal/tests/delivery_containers_test.go | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/internal/tests/delivery_containers_test.go b/internal/tests/delivery_containers_test.go
index f4e8fec..46b5f00 100644
--- a/internal/tests/delivery_containers_test.go
+++ b/internal/tests/delivery_containers_test.go
@@ -387,6 +387,15 @@ func TestDelDockerLayerCountWant_GroundTruth(t *testing.T) {
 		t.Fatalf("write app: %v", err)
 	}
 
+	// BuildKit keeps base layers in its own cache, so alpine:3.20 is not
+	// guaranteed to be in the local image store even after a successful
+	// build below. Pull it explicitly, and treat a pull failure (offline
+	// host, registry rate limit) as an environment limitation rather than
+	// a ground-truth failure.
+	if out, err := exec.Command("docker", "pull", "alpine:3.20").CombinedOutput(); err != nil {
+		t.Skipf("docker pull alpine:3.20 unavailable: %v\n%s", err, out)
+	}
+
 	const tag = "llmtestbench-layercount-groundtruth:test"
 	// #nosec G204 -- tag is a fixed literal and dir is a t.TempDir() path,
 	// never external/user-controlled input.