sean/builder-images
Watch
1
0
Fork
You've already forked builder-images
 0
Code Issues Pull requests Projects Releases 9 Packages Wiki Activity

merge fix/kernel-btf-assert (d3aa3108fb) #60

Merged
pipeline-bot merged 1 commit from fix/kernel-btf-assert into trunk 2026-07-29 18:53:51 +00:00
Conversation 0 Commits 1 Files changed 1 +66 -6
pipeline-bot commented 2026-07-29 18:53:48 +00:00
Collaborator
Copy link
No description provided. 
`make <defconfig>` drops a symbol whose Kconfig dependencies are unmet and
the build still SUCCEEDS, shipping a kernel quietly missing the feature. That
is the defconfig-drift trap that previously cost us nvmet, and
CONFIG_DEBUG_INFO_BTF is its sharpest instance: it depends on PAHOLE_VERSION,
probed from the toolchain at configure time. Lose pahole from kernel-builder
and BTF vanishes with no error -- you would bake, cosign-sign and roll the
whole fleet only to find Tetragon cannot attach, since CO-RE needs
/sys/kernel/btf/vmlinux.

- Hard-gate, immediately after configure (seconds, not after a ~35 min
  compile): every runtime-sensor-critical symbol the defconfig requests as =y
  must survive into .config, and pahole must exist at all. Failure names the
  symbol and the likely cause.
- Advisory drift report for every other requested =y, so the general form of
  the bug is visible without risking a wedge of the kernel chain on
  pre-existing benign drift. Promote to fatal once reports run clean.
- Ship /.kernel-config.gz + /.kernel-btf in the artifact. binrpm-pkg puts no
  /boot/config-<rel> in the RPM, so the built config was previously
  unrecoverable from the image and the release gate had nothing to assert
  against. The gz shape matches the node's /proc/config.gz
  (CONFIG_IKCONFIG_PROC=y), so a post-roll check can diff node vs artifact.

The metadata step reports BTF but does NOT require it, so a rollback bake of a
pre-BTF commit still builds.

Verified with fixtures: green passes with BTF present; a .config missing BTF
and a builder missing pahole each fail with the intended message.
pipeline-bot deleted branch fix/kernel-btf-assert 2026-07-29 18:53:51 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/builder-images!60
No description provided.