release builder-images 8a31f295c9 #61

Merged

pipeline-bot merged 2 commits from _promote/8a31f295c9bc into main 2026-07-29 18:54:52 +00:00

Conversation 0 Commits 2 Files changed 1 +66 -6

pipeline-bot commented 2026-07-29 18:54:52 +00:00

Collaborator

Copy link

No description provided.

pipeline-bot added 2 commits 2026-07-29 18:54:52 +00:00

fix(linux-kernel): hard-gate silently-dropped defconfig symbols; ship the built .config ... d3aa3108fb

`make <defconfig>` drops a symbol whose Kconfig dependencies are unmet and
the build still SUCCEEDS, shipping a kernel quietly missing the feature. That
is the defconfig-drift trap that previously cost us nvmet, and
CONFIG_DEBUG_INFO_BTF is its sharpest instance: it depends on PAHOLE_VERSION,
probed from the toolchain at configure time. Lose pahole from kernel-builder
and BTF vanishes with no error -- you would bake, cosign-sign and roll the
whole fleet only to find Tetragon cannot attach, since CO-RE needs
/sys/kernel/btf/vmlinux.

- Hard-gate, immediately after configure (seconds, not after a ~35 min
  compile): every runtime-sensor-critical symbol the defconfig requests as =y
  must survive into .config, and pahole must exist at all. Failure names the
  symbol and the likely cause.
- Advisory drift report for every other requested =y, so the general form of
  the bug is visible without risking a wedge of the kernel chain on
  pre-existing benign drift. Promote to fatal once reports run clean.
- Ship /.kernel-config.gz + /.kernel-btf in the artifact. binrpm-pkg puts no
  /boot/config-<rel> in the RPM, so the built config was previously
  unrecoverable from the image and the release gate had nothing to assert
  against. The gz shape matches the node's /proc/config.gz
  (CONFIG_IKCONFIG_PROC=y), so a post-roll check can diff node vs artifact.

The metadata step reports BTF but does NOT require it, so a rollback bake of a
pre-BTF commit still builds.

Verified with fixtures: green passes with BTF present; a .config missing BTF
and a builder missing pahole each fail with the intended message.

Merge pull request 'merge fix/kernel-btf-assert (d3aa3108fb)' (#60) from fix/kernel-btf-assert into trunk 8a31f295c9

pipeline-bot merged commit 8a31f295c9 into main 2026-07-29 18:54:52 +00:00

pipeline-bot deleted branch _promote/8a31f295c9bc 2026-07-29 18:54:52 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/builder-images!61

No description provided.