feat(node-base): bake jq and yq into the node package layer

sean commented

2026-09-10 18:48:30 +00:00

Owner

The node OS image installs python3 on purpose and carries no other way to read structured text, which is why the kernel artifact check and the boot image check are Python. jq comes from AppStream in the existing dnf install. yq is the Go implementation, for the one TOML file on the node (/usr/lib/bootc/kargs.d/01-seanfarm.toml, which the boot image check reads) -- EL10's yq is python3-yq, a jq wrapper that would put an interpreter back on this path, so the Go build is pinned by version and digest and sha-checked, the shape pipeline-tools uses. Both land in the PACKAGE layer, so a kernel roll still reaches no package repo. Both architectures; both completeness assertions name the new binaries. node-bootc moves to node-base:v2 and node-base-arm64 to VERSION 2. https://claude.ai/code/session_01KZoQin34jeyt6nDGqvJA76

sean added 1 commit

2026-09-10 18:48:30 +00:00

feat(node-base): bake jq and yq into the node package layer

binjovi/ci Binjovi failed the frozen plan

Details

35f1c25ba0

The node OS image installs `python3` on purpose and carries no other
way to read structured text. That is why the two gates that run inside
it -- the kernel artifact check and the boot image check -- are Python.

`jq` comes from AppStream, in the same `dnf install` that already
delivers the other twenty-four packages. `yq` is the Go implementation,
for the one file on this node that is TOML:
`/usr/lib/bootc/kargs.d/01-seanfarm.toml`, which the boot image check
reads. EL10 has no such package -- its `yq` is `python3-yq`, a wrapper
around jq, which would put an interpreter back on the path this layer
exists to keep short. So it is pinned by version AND by digest, fetched
cache-first on amd64, and checked before it is made executable: the
shape `pipeline-tools` already uses.

Both land in the PACKAGE layer, which is the whole point of the split
made on 2026-07-29. A kernel roll rebuilds node-bootc, which installs
nothing, so the roll path still reaches no package repo.

Both architectures, and both completeness assertions name the new
binaries so a missing one fails the build rather than a node at boot.

`node-bootc` moves to `node-base:v2` and `node-base-arm64` to VERSION 2,
under the immutable-tag rule.

Claude-Session: https://claude.ai/code/session_01KZoQin34jeyt6nDGqvJA76

sean added 1 commit

2026-09-10 19:04:24 +00:00

chore: rebuild on the enlarged ARM buildkit cache

binjovi/ci Binjovi completed the frozen plan

Details

f25344df37

The previous build died on the ARM buildkit worker with `disk quota
exceeded` at 10Gi. seanfarm 2f57e3a25f21 raised that claim to 100Gi and
it expanded in place. Nothing in the tree changed.

Claude-Session: https://claude.ai/code/session_01KZoQin34jeyt6nDGqvJA76

binjovi-bot merged commit f25344df37 into trunk

2026-09-10 19:16:32 +00:00

Rows
Columns

feat(node-base): bake jq and yq into the node package layer #281