Add CI workflow and test script as evidence the Ollama .tar.zst fix works

.github/workflows/test-ollama-download.yml

@@ -0,0 +1,91 @@
+name: Test Ollama Download Fix
+
+on:
+  push:
+    branches: ["main", "copilot/**"]
+    paths:
+      - "Dockerfile"
+      - "scripts/test_ollama_download.sh"
+      - ".github/workflows/test-ollama-download.yml"
+  pull_request:
+    branches: ["main"]
+    paths:
+      - "Dockerfile"
+      - "scripts/test_ollama_download.sh"
+  workflow_dispatch:
+
+jobs:
+  verify-ollama-url:
+    name: Verify Ollama v0.17.5 download URL and extraction
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install zstd
+        run: sudo apt-get install -y zstd
+
+      - name: Confirm broken URL returns 404
+        run: |
+          STATUS=$(curl -o /dev/null -s -w "%{http_code}" \
+            "https://github.com/ollama/ollama/releases/download/v0.17.5/ollama-linux-amd64")
+          echo "Old bare-binary URL returned: HTTP $STATUS"
+          if [ "$STATUS" = "404" ]; then
+            echo "PASS: old URL is confirmed broken (HTTP 404) — this was the root cause"
+          else
+            echo "WARNING: old URL returned HTTP $STATUS (expected 404)"
+          fi
+
+      - name: Confirm fixed URL resolves
+        run: |
+          STATUS=$(curl -o /dev/null -s -w "%{http_code}" --location \
+            "https://github.com/ollama/ollama/releases/download/v0.17.5/ollama-linux-amd64.tar.zst")
+          echo "New .tar.zst URL returned: HTTP $STATUS"
+          if [ "$STATUS" != "200" ]; then
+            echo "FAIL: new URL returned HTTP $STATUS (expected 200)"
+            exit 1
+          fi
+          echo "PASS: new URL resolves (HTTP $STATUS)"
+
+      - name: Dockerfile uses .tar.zst URL (not bare binary)
+        run: |
+          if grep -q "ollama-linux-amd64.tar.zst" Dockerfile; then
+            echo "PASS: Dockerfile uses .tar.zst URL"
+            grep "ollama-linux-amd64" Dockerfile
+          else
+            echo "FAIL: Dockerfile does NOT use .tar.zst URL"
+            grep "ollama-linux-amd64" Dockerfile || true
+            exit 1
+          fi
+
+      - name: Dockerfile does NOT use the broken bare-binary URL
+        run: |
+          # The bare binary URL ends exactly with "ollama-linux-amd64" (no extension)
+          if grep -P "ollama-linux-amd64\"" Dockerfile; then
+            echo "FAIL: Dockerfile still references the broken bare-binary URL"
+            exit 1
+          fi
+          echo "PASS: Dockerfile does not contain broken bare-binary URL"
+
+      - name: Dockerfile has zstd in apt packages
+        run: |
+          if grep -q "zstd" Dockerfile; then
+            echo "PASS: zstd is installed in Dockerfile"
+          else
+            echo "FAIL: zstd is missing from Dockerfile apt packages"
+            exit 1
+          fi
+
+      - name: Dockerfile uses tar extraction
+        run: |
+          if grep -q "tar -I zstd -xf" Dockerfile; then
+            echo "PASS: Dockerfile extracts archive with 'tar -I zstd -xf'"
+          else
+            echo "FAIL: Dockerfile is missing tar extraction step"
+            exit 1
+          fi
+
+      - name: Run full download and extraction test
+        run: |
+          chmod +x scripts/test_ollama_download.sh
+          scripts/test_ollama_download.sh

scripts/test_ollama_download.sh

@@ -0,0 +1,109 @@
+#!/usr/bin/env bash
+# test_ollama_download.sh
+# Evidence script: proves the Ollama v0.17.5 .tar.zst download and extraction works.
+# Run this script to verify the fix before/after any Dockerfile change.
+# Exit 0 = PASS, Exit 1 = FAIL.
+
+set -euo pipefail
+
+OLLAMA_VERSION="v0.17.5"
+OLLAMA_URL="https://github.com/ollama/ollama/releases/download/${OLLAMA_VERSION}/ollama-linux-amd64.tar.zst"
+OLD_URL="https://github.com/ollama/ollama/releases/download/${OLLAMA_VERSION}/ollama-linux-amd64"
+WORK_DIR="$(mktemp -d)"
+ARCHIVE="${WORK_DIR}/ollama-linux-amd64.tar.zst"
+EXTRACT_DIR="${WORK_DIR}/extracted"
+
+cleanup() { rm -rf "${WORK_DIR}"; }
+trap cleanup EXIT
+
+echo "========================================================"
+echo "  Ollama ${OLLAMA_VERSION} download/extraction evidence"
+echo "========================================================"
+
+# --- Test 1: old bare-binary URL must return 404 ---
+echo ""
+echo "TEST 1: Old bare-binary URL returns 404 (root cause confirmed)"
+HTTP_STATUS=$(curl -o /dev/null -s -w "%{http_code}" \
+    --max-time 15 \
+    "${OLD_URL}")
+if [ "${HTTP_STATUS}" = "404" ]; then
+    echo "  PASS: ${OLD_URL}"
+    echo "        → HTTP ${HTTP_STATUS} (confirms old URL is broken)"
+else
+    echo "  UNEXPECTED: old URL returned HTTP ${HTTP_STATUS} (expected 404)"
+fi
+
+# --- Test 2: new .tar.zst URL must resolve (not 404) ---
+echo ""
+echo "TEST 2: New .tar.zst URL resolves"
+HTTP_STATUS=$(curl -o /dev/null -s -w "%{http_code}" \
+    --max-time 15 --location \
+    "${OLLAMA_URL}")
+if [ "${HTTP_STATUS}" = "200" ]; then
+    echo "  PASS: ${OLLAMA_URL}"
+    echo "        → HTTP ${HTTP_STATUS}"
+else
+    echo "  FAIL: ${OLLAMA_URL}"
+    echo "        → HTTP ${HTTP_STATUS} (expected 200)"
+    exit 1
+fi
+
+# --- Test 3: download the archive ---
+echo ""
+echo "TEST 3: Downloading archive (this may take a while)..."
+curl -fSL --retry 3 --retry-delay 5 --max-time 600 \
+    "${OLLAMA_URL}" -o "${ARCHIVE}"
+ARCHIVE_SIZE=$(stat -c%s "${ARCHIVE}")
+echo "  PASS: Downloaded ${ARCHIVE_SIZE} bytes"
+if [ "${ARCHIVE_SIZE}" -lt 1000000 ]; then
+    echo "  FAIL: Archive too small — expected >1MB"
+    exit 1
+fi
+
+# --- Test 4: extract with zstd ---
+echo ""
+echo "TEST 4: Extracting .tar.zst with zstd..."
+mkdir -p "${EXTRACT_DIR}"
+tar -I zstd -xf "${ARCHIVE}" -C "${EXTRACT_DIR}"
+echo "  PASS: Extraction succeeded"
+
+# --- Test 5: binary exists at expected path ---
+echo ""
+echo "TEST 5: Binary exists at bin/ollama after extraction"
+BINARY="${EXTRACT_DIR}/bin/ollama"
+if [ ! -f "${BINARY}" ]; then
+    echo "  FAIL: ${BINARY} not found after extraction"
+    echo "  Files extracted:"
+    find "${EXTRACT_DIR}" -type f | head -20
+    exit 1
+fi
+echo "  PASS: ${BINARY} exists"
+
+# --- Test 6: binary is ELF ---
+echo ""
+echo "TEST 6: Binary is an ELF executable"
+FILE_OUTPUT=$(file "${BINARY}")
+echo "  file output: ${FILE_OUTPUT}"
+if echo "${FILE_OUTPUT}" | grep -q "ELF"; then
+    echo "  PASS: ELF confirmed"
+else
+    echo "  FAIL: Not an ELF binary"
+    exit 1
+fi
+
+# --- Test 7: binary size sanity check ---
+echo ""
+echo "TEST 7: Binary size > 1MB"
+BINARY_SIZE=$(stat -c%s "${BINARY}")
+echo "  Size: ${BINARY_SIZE} bytes"
+if [ "${BINARY_SIZE}" -gt 1000000 ]; then
+    echo "  PASS: ${BINARY_SIZE} bytes (> 1MB)"
+else
+    echo "  FAIL: Binary too small (${BINARY_SIZE} bytes)"
+    exit 1
+fi
+
+echo ""
+echo "========================================================"
+echo "  ALL TESTS PASSED - fix is verified"
+echo "========================================================"