logger.info("Creating fresh container for test %s", request.node.name)
    container = create_container_with_exec(
        image_path,
        workdir,
        container_name=None,  # auto-generate a unique name per test
        image_name=image_name,
    )

@pytest.mark.require_capability("container")
@pytest.mark.require_capability("runtime-package-management")
@pytest.mark.requires_pkg("curl")
def test_bvt_sustained_http_fetch(container_exec) -> None:
    """BVT: Sustained external HTTP — 50 sequential fetches, ≥90% success.

    Ports the legacy "Core Networking Test" (50-iteration page fetch).
    """
    iterations = 50
    url = "http://httpbin.org/get"
    # One bash loop is far cheaper than 50 podman exec invocations.
    cmd = (
        f"i=0; ok=0; while [ $i -lt {iterations} ]; do "
        f"curl -s -o /dev/null -w '%{{http_code}}\\n' "
        f"--connect-timeout 5 --max-time 10 {url} | "
        f"grep -q '^2' && ok=$((ok+1)); i=$((i+1)); done; echo $ok"
    )
    ok, out = _cmd_ok(container_exec, cmd, timeout=iterations * 12)
    assert ok, f"Sustained fetch loop failed: {out!r}"
    success = int(out.strip().splitlines()[-1])
    success_rate = success / iterations
    print(f"Sustained HTTP fetch: {success}/{iterations} succeeded ({success_rate:.0%})")
    assert success_rate >= 0.9, \
        f"HTTP success rate {success_rate:.0%} below 90% threshold ({success}/{iterations})"

    """Execute a shell command in the running container via ``podman exec``.

    Returns a callable ``(command: str, timeout: int = 60) ->
    subprocess.CompletedProcess[str]``. The framework does **not** install
    packages or mutate the container in any way — tests see the image as
    shipped. If a test needs a binary that the image does not ship, it
    must declare the dependency itself (and either skip or fail loudly).
    """

def pytest_runtest_setup(item: pytest.Item) -> None:
    """Skip tests whose marks are not satisfied."""
    # require_capability: skip if image doesn't have the required capability.
    # Each marker takes exactly one capability name; stack the decorator
    # multiple times to require several capabilities on a single test.
    caps = parse_capabilities(item.config.getoption("--capabilities", default=None))
    for marker in item.iter_markers("require_capability"):
        required = marker.args[0] if marker.args else None
        if required and required not in caps:
            pytest.skip(f"requires capability '{required}' (not in: {sorted(caps)})")