Prevent recursive ARM emulation on ARM workers #574

Merged
binjovi-bot merged 2 commits from codex/arm-binfmt-host-guard-20260910 into trunk 2026-09-10 14:47:47 +00:00
Owner

The binfmt DaemonSet registered qemu-aarch64 on the ARM canary. New native processes then failed with too many levels of symbolic links, including SSH and ZFS. Restrict this ARM emulator to AMD64 nodes and reject other host architectures before registration.

Validation: the shell manifest test failed before the selector change and passes after it. The canary required a reboot to clear the bad registration. The live selector was applied as a recovery action; this change makes it durable.

The binfmt DaemonSet registered qemu-aarch64 on the ARM canary. New native processes then failed with too many levels of symbolic links, including SSH and ZFS. Restrict this ARM emulator to AMD64 nodes and reject other host architectures before registration. Validation: the shell manifest test failed before the selector change and passes after it. The canary required a reboot to clear the bad registration. The live selector was applied as a recovery action; this change makes it durable.
Limit ARM emulator registration to AMD64 hosts
Some checks failed
binjovi/ci Binjovi failed the frozen plan
1495e4677e
Run the binfmt architecture guard in CI
All checks were successful
binjovi/ci Binjovi completed the frozen plan
dd4aede6fe
binjovi-bot deleted branch codex/arm-binfmt-host-guard-20260910 2026-09-10 14:47:47 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/seanfarm!574
No description provided.