sean/builder-images
Watch
1
0
Fork
You've already forked builder-images
 0
Code Issues Pull requests Projects Releases 144 Packages Wiki Activity

release builder-images c0f98d6830 #94

Merged
pipeline-bot merged 12 commits from _promote/c0f98d6830df into main 2026-08-15 11:33:41 +00:00
Conversation 0 Commits 12 Files changed 32 +1152 -793
pipeline-bot commented 2026-08-15 11:33:40 +00:00
Contributor
Copy link
No description provided.
docs: rewrite documentation to ASD-STE100
All checks were successful
pipeline/ci CI green @ fc693e6c9635
Details
fc693e6c96
 
Rewrite README.md, add AGENTS.md + CLAUDE.md symlink with the ASD-STE100 directive, and rewrite substantial WHY-comment blocks in Containerfiles/Dockerfiles and lint scripts. Reconciled scripts/lint-no-runtime-fetch.sh against the newer upstream commit e985181 (preserve literal vendor host regexes) so this branch carries both the real bugfix and the comment rewrite.
feat(seanfarm33): gate the forensics symbols, add ramoops/watchdog/lockdown kargs
All checks were successful
pipeline/ci CI green @ 39e7a8f23a50
Details
39e7a8f23a
 
Companions to sean/linux PR #19 (the seanfarm33 config audit).

linux-kernel: the defconfig hard gate grows a second row —
SECURITY_LOCKDOWN_LSM, PSTORE_RAM, PSI, LRU_GEN, SOFTLOCKUP_DETECTOR.
The drift trap silently drops dep-unsatisfied options; a kernel that
ships without pstore or the lockup detectors defeats the
panic-and-self-heal posture while looking green.

node-bootc: kargs gain reserve_mem=2M:4096:oops + ramoops.mem_name
(the kernel places the region itself — no hand-picked memmap address
to collide with the initrd), delayacct, and lockdown=integrity. New
systemd drop-in pets /dev/watchdog0 (softdog): a wedge that stops the
pets hard-resets the node. Every arg is inert on an older kernel, so
karg and kernel changes need no ordering.
The 2026-08-07 docs rewrite (fc693e6, unreleased on trunk since) edited
comments inside ten onboarded Dockerfiles without VERSION bumps. The
:vN discipline gate has failed every release attempt since — comment
changes still change the image digest, so the gate is right and the
bumps are owed. Old :vN pins stay valid (tags are immutable); consumers
adopt vN+1 when they choose.
The registry-package-prune policy defect (sha CI tags crowd :vN tags
out of keep-2) deleted pipeline-tools v6 from codeberg, and v6 was
never in zot — the digest is unrestorable. v8 is restored to codeberg
from zot's cache (6560ba95, the original v8 push; the fleet's
d5eb0e51 re-push lives only in node containerd stores and gets
re-pinned to this round's v9 in the follow-up). The prune policy fix
itself lands in seanfarm before the cron's next 05:17 run.
In-cluster first (Sean, repeatedly): builds resolve from
registry.sean.farm; codeberg is a passive backup that nothing in the
executing path depends on. Same digest (6560ba95), served by zot.
fix(lint): recognize registry.sean.farm as the in-house image host
Some checks failed
pipeline/ci CI failed @ dcbc672f90b8
Details
dcbc672f90
 
In-cluster first: FROMs resolve from zot now. codeberg.org stays
recognized for refs that predate the retarget.
# Conflicts:
#	images/linux-kernel/Containerfile
#	images/node-bootc/Containerfile
Merge remote-tracking branch 'forgejo/fix/version-bumps-asd' into seanfarm33-train
All checks were successful
pipeline/ci CI green @ 9cff4bdb196e
Details
9cff4bdb19
 
# Conflicts:
#	images/pipelines-ci/Dockerfile
pipeline-bot deleted branch _promote/c0f98d6830df 2026-08-15 11:33:41 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/builder-images!94
No description provided.