feat(buildkit): register OCI step processes with the profile canary #474

Merged

binjovi-bot merged 1 commit from codex/buildkit-process-bridge-20260909 into trunk

2026-09-09 10:54:52 +00:00

sean commented

2026-09-09 10:49:24 +00:00

Owner

The helper and the private collector socket are read-only in the rootless BuildKit container. The worker gets no Kubernetes token or host runtime socket. Existing registry mirrors, cache, and concurrency settings are preserved. BuildKit contracts, the Binjovi infrastructure contract, and Kubernetes server dry-run pass. The kernel and process discovery checks passed on the canary node before this change.

Use the verified Binjovi v0.1.527 runtime wrapper to attach each BuildKit step to its process trace. The wrapper calls the existing stock runc binary and uses a bounded, optional registration hook. A missing collector does not stop a build. The helper and the private collector socket are read-only in the rootless BuildKit container. The worker gets no Kubernetes token or host runtime socket. Existing registry mirrors, cache, and concurrency settings are preserved. BuildKit contracts, the Binjovi infrastructure contract, and Kubernetes server dry-run pass. The kernel and process discovery checks passed on the canary node before this change.

sean added 1 commit

2026-09-09 10:49:25 +00:00