sean/builder-images
Watch
1
0
Fork
You've already forked builder-images
 0
Code Issues Pull requests Projects Releases 10 Packages Wiki Activity

merge feat/node-base (3849d53318) #68

Merged
pipeline-bot merged 1 commit from feat/node-base into trunk 2026-07-29 19:40:12 +00:00
Conversation 0 Commits 1 Files changed 1 +141
pipeline-bot commented 2026-07-29 19:40:09 +00:00
Collaborator
Copy link
No description provided. 
node-bootc dnf-installs ~24 packages on every build, which puts the KERNEL ROLL
PATH — the one path that ships CVE-patched kernels — behind two external package
repos on every roll. Both broke it inside one day (2026-07-29): EPEL rotated its
repodata mid-build, and the hetzner eco's doubled origin_base 404'd hc-utils.
node-bootc had gone 24 days without a successful build, which is why the
v6.18.35-seanfarm26 release died at bake with a perfectly good kernel in hand.

This image is that package layer, built once on the same pinned AlmaLinux 10
bootc base. node-bootc will FROM it and install nothing, so a kernel-only roll
rebuilds only the kernel layer and reaches no package repo at all.

Only 2 of the 24 packages actually need EPEL (gdisk, bird); the rest are
AlmaLinux baseos/appstream. They stay together here because the goal is that
node-bootc fetches NOTHING, not that EPEL specifically is avoided.

Carries the EPEL retry and the corrected hetzner cache URL, and asserts the
layer is complete before publishing — node-bootc installs nothing, so a missing
package would otherwise surface as a broken node at boot rather than a failed
build. Repo files are snapshot/restored so no in-cluster pkg-cache baseurl
leaks into the published image, with a grep that fails the build if one does.

Immutable tag (:v1 -> :v2 on change) and pushed to codeberg, same discipline as
kernel-builder: rebuild wipes the in-cluster zot, and a moving tag would be
latched forever by zot's onDemand sync and Spegel.

Landed BEFORE the node-bootc FROM flip, which cannot reference node-base:v1
until it exists.
pipeline-bot deleted branch feat/node-base 2026-07-29 19:40:13 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/builder-images!68
No description provided.