test(e2e): run podman suite with tmachine

[elezar]

Summary

Migrate the portable Rust Podman E2E coverage from the legacy wrapper approach in #2982 to a dedicated tmachine test archive. Keep this coverage separate from the focused driver-podman user-namespace suite and schedule both under driver-specific integration tests.

Stack

1. test(cli): migrate gateway-free smoke coverage #3641 — gateway-free CLI smoke coverage
2. test(conformance): migrate file transfer coverage #3597 — file-transfer conformance coverage
3. test(e2e): run podman suite with tmachine #3637 — Podman E2E tmachine archive

Draft follow-up #3766 branches from #3597 for relay reconnect coverage.

Related Issue

No issue required: this is a focused test-infrastructure migration that supersedes draft PR #2982.

Merge after #3597, which replaces the removed e2e/rust/tests/sync.rs coverage with portable file-transfer conformance scenarios.

Changes

• Build an e2e-podman nextest archive from e2e/rust with the e2e-podman feature
• Add an independent tmachine e2e-podman testsuite and rootless Podman playbook
• Keep the existing driver-podman suite focused on default, auto, keep-id, and private UID-map equivalence
• Remove the superseded podman_userns E2E binary now covered by driver-podman
• Remove sync.rs after its file-transfer cases move to conformance in test(conformance): migrate file transfer coverage #3597
• Run both suites independently in the driver-specific integration matrix
• Exclude wrapper-coupled or locally failing test binaries through an explicit follow-up list
• Port the portable sparse-policy fixture and bounded Podman teardown changes from test(e2e): add rootless podman nix vm lane #2982
• Document local archive creation and tmachine execution

Testing

• mise run pre-commit passes
• nix run .#build-artifacts-test-archives
• nix run .#tmachine -- test fedora-podman-rootless binaries e2e-podman (43 passed, 2 skipped)
• nix run .#tmachine -- test fedora-podman-rootless binaries driver-podman (default, auto, keep-id, and private profiles passed)
• E2E tests added/updated

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)

[github-actions]

Label test:e2e applied for d209c3b. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway, sandbox, and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.

[SDAChess]

This looks good. Maybe as a follow-up we can consider cleaning up the testsuite running with a nextest role + renaming e2e to something more meaningful like podman-driver or something.

[elezar]

This looks good. Maybe as a follow-up we can consider cleaning up the testsuite running with a nextest role + renaming e2e to something more meaningful like podman-driver or something.

Yes. The e2e name is intentional as I wanted to add coverage and follow-up with a more focussed cleanup of the tests. The podman-specific tests should move to the existing podman-driver suite / crate.