From a319e855477802eb02ef92a9021d28074c631e50 Mon Sep 17 00:00:00 2001
From: Nick Anderson <nick@cmdln.org>
Date: Mon, 1 Jun 2026 14:37:19 -0500
Subject: [PATCH] Moved build host provisioning scripts to testing-pr

Ticket: ENT-11586
Changelog: None
---
 ci/fix-buildhost.sh | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/ci/fix-buildhost.sh b/ci/fix-buildhost.sh
index 4ab265887..b861cbf62 100755
--- a/ci/fix-buildhost.sh
+++ b/ci/fix-buildhost.sh
@@ -43,3 +43,12 @@ fi
 if command -v yum >/dev/null 2>/dev/null; then
   sudo yum erase -y openssl-devel || true
 fi
+
+# ENT-11586: provision the build host here, in the testing-pr job, instead of in
+# the Amazon EC2 init script, so failures are visible in the build log and fail
+# the build. Run on every build (setup is idempotent) so a PR can change build
+# host setup and a later build reverts it. setup-cfengine-build-host.sh is
+# Linux-only and must run as root; exotic hosts are provisioned out-of-band.
+if [ "$(uname)" = "Linux" ]; then
+  sudo "$my_dir"/setup-cfengine-build-host.sh
+fi