Fix CRI-O related runtime binary path

The binaries are now under `/usr/libexec/crio` instead of `crio-*`
prefixed. We now fix those paths to make the CI work again.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

Author: saschagrunert

hack/ci/Vagrantfile-fedora

@@ -57,7 +57,6 @@ gpgkey=https://pkgs.k8s.io/addons:/cri-o:/prerelease:/main/rpm/repodata/repomd.x
 EOF
 
       dnf install -y \
-        cri-o \
         conntrack \
         container-selinux \
         gcc \
@@ -72,6 +71,11 @@ EOF
         openssl \
         podman
 
+      # conmon installs to /usr/libexec/crio/conmon
+      # https://github.com/containers/conmon/issues/517
+      dnf download --repo cri-o --arch x86_64 cri-o
+      rpm -i --nodeps --force cri-o-*.rpm
+
       # Load the prebuilt container image
       podman load -i /vagrant/image.tar
 

hack/ci/e2e-seccomp.sh

@@ -27,6 +27,9 @@ record_seccomp_profiles() {
   k apply -f examples/profilerecording-seccomp-bpf.yaml
 
   RUNTIMES=(runc crun)
+  # Default location for CRI-O specific runtime binaries
+  export PATH="/usr/libexec/crio:$PATH"
+
   for RUNTIME in "${RUNTIMES[@]}"; do
     echo "For runtime $RUNTIME"
     BASEPROFILE=examples/baseprofile-$RUNTIME.yaml
@@ -88,7 +91,7 @@ EOT
     )" "$BASEPROFILE"
 
     echo "Getting runtime version"
-    VERSION=$(crio-"$RUNTIME" --version | grep "$RUNTIME version" | grep -oP '\d+.*')
+    VERSION=$("$RUNTIME" --version | grep "$RUNTIME version" | grep -oP '\d+.*')
     yq -i '.metadata.name = "'"$RUNTIME"'-v'"$VERSION"'"' "$BASEPROFILE"
 
     echo "Deleting seccomp profile"
@@ -100,7 +103,7 @@ EOT
 
   for RUNTIME in "${RUNTIMES[@]}"; do
     echo "Verifying that the profile for runtime $RUNTIME is available in the GitHub container registry"
-    VERSION=$(crio-"$RUNTIME" --version | grep "$RUNTIME version" | grep -oP '\d+.*')
+    VERSION=$("$RUNTIME" --version | grep "$RUNTIME version" | grep -oP '\d+.*')
     cosign verify --certificate-identity-regexp '.*' --certificate-oidc-issuer-regexp '.*' \
       "ghcr.io/security-profiles/$RUNTIME:v$VERSION"
   done