fix(e2e): model portable Podman service activation

.github/workflows/portable-profile-e2e.yaml

@@ -20,6 +20,8 @@ on:
       - "src/lib/domain/sandbox/image-tag.ts"
       - "src/lib/sandbox/**"
       - "test/e2e/fixtures/availability-env.ts"
+      - "test/e2e/fixtures/portable-profile-systemctl-shim.sh"
+      - "test/e2e/fixtures/portable-profile-systemctl.ts"
       - "test/e2e/live/full-e2e.test.ts"
       - "test/e2e/live/launch-agent-turn.ts"
       - "test/e2e/live/portable-profile-gateway-proof.ts"
@@ -139,50 +141,14 @@ jobs:
 
           shim_dir="${RUNNER_TEMP}/nemoclaw-portable-bin"
           install -d -m 700 "$shim_dir"
-          cat >"$shim_dir/systemctl" <<'SHIM'
-          #!/usr/bin/env bash
-          set -euo pipefail
-          runtime_dir="${XDG_RUNTIME_DIR:?}"
-          service_dir="${runtime_dir}/podman"
-          socket_path="${service_dir}/podman.sock"
-          pid_file="${runtime_dir}/nemoclaw-podman-service.pid"
-          log_file="${runtime_dir}/nemoclaw-podman-service.log"
-          case "$*" in
-            "--user set-environment "*) exit 0 ;;
-            "--user try-restart podman.service")
-              if [[ -f "$pid_file" ]]; then
-                kill "$(<"$pid_file")" 2>/dev/null || true
-                rm -f "$pid_file" "$socket_path"
-              fi
-              ;;
-            "--user enable --now podman.socket")
-              install -d -m 755 "$service_dir"
-              nohup podman system service --time=0 "unix://$socket_path" >"$log_file" 2>&1 &
-              echo $! >"$pid_file"
-              for _ in $(seq 1 100); do
-                if [[ -S "$socket_path" ]]; then
-                  chmod 660 "$socket_path"
-                  exit 0
-                fi
-                sleep 0.1
-              done
-              cat "$log_file" >&2 || true
-              exit 1
-              ;;
-            *)
-              echo "unexpected user-service command: $*" >&2
-              exit 64
-              ;;
-          esac
-          SHIM
-          chmod 700 "$shim_dir/systemctl"
+          install -m 700 test/e2e/fixtures/portable-profile-systemctl-shim.sh "$shim_dir/systemctl"
 
           export PATH="$shim_dir:$PATH"
           export XDG_RUNTIME_DIR="$runtime_dir"
-          systemctl --user enable --now podman.socket
           printf '%s\n' "$shim_dir" >>"$GITHUB_PATH"
           printf 'XDG_RUNTIME_DIR=%s\n' "$runtime_dir" >>"$GITHUB_ENV"
           printf 'DOCKER_HOST=unix://%s/podman/podman.sock\n' "$runtime_dir" >>"$GITHUB_ENV"
+          systemctl --user start podman.socket
           podman --version
           docker --version
           docker --host "unix://$runtime_dir/podman/podman.sock" info
@@ -209,7 +175,7 @@ jobs:
         shell: bash
         run: |
           podman system reset --force || true
-          pid_file="${XDG_RUNTIME_DIR}/nemoclaw-podman-service.pid"
-          if [[ -f "$pid_file" ]]; then
-            kill "$(<"$pid_file")" 2>/dev/null || true
-          fi
+          runtime_dir="${XDG_RUNTIME_DIR:-/run/user/$(id -u)}"
+          node --experimental-strip-types --no-warnings --input-type=module \
+            --eval 'import { cleanupPortableProfileSystemctlFixture } from "./test/e2e/fixtures/portable-profile-systemctl.ts"; await cleanupPortableProfileSystemctlFixture(process.argv[1]);' \
+            "$runtime_dir"