Benjamin Sherman
95d16290f1
feat(ci): skip rebuilding unchanged akmods images ( #620 )
...
Every nightly rebuilds all 33 targets even when nothing changed. Each
rebuild is another chance to hit a mirror flake, and published images
record nothing about what they were built from.
Label each image with a fingerprint of its inputs: the kernel release,
the git objects that feed the build, the target config, and overrides.
The build job skips test, build, and push when the published image
matches, is signed, and is under AKMODS_MAX_AGE_DAYS old (default 7).
The manifest job likewise skips regenerating indexes that are already
current and signed, but attestation still runs every time. Any doubt
means build. PR runs and the new force input bypass the guard.
NVIDIA builds pin akmod-nvidia to the fingerprinted version, and the
userspace packages to the same driver version, so the label describes
what was actually built.
2026-10-25 05:21:52 +00:00
ubot-7274[bot]
5f6deac85e
chore(deps): update ghcr.io/ublue-os/devcontainer:latest docker digest to ec1046d ( #605 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-24 17:48:27 -05:00
ubot-7274[bot]
8de7add3b1
chore(deps): update ossf/scorecard-action action to v2.5.0 ( #606 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-24 14:09:01 -05:00
ubot-7274[bot]
f930eef772
chore(deps): update dependency sigstore/cosign to v3.1.4 ( #612 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-24 14:08:27 -05:00
ubot-7274[bot]
ff31ebb9d6
chore(deps): update github/codeql-action digest to 9b32540 ( #614 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-24 14:08:04 -05:00
ubot-7274[bot]
d3958bd6c1
chore(deps): update github/codeql-action digest to 6f2ac81 ( #609 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-15 14:57:24 +03:00
Robin?
d4bab83a0e
chore: remove centos and centos-kmodsig akmods support ( #608 )
...
* chore: remove centos and centos-kmodsig akmods support
CentOS Stream 10 builds are no longer needed. This change removes:
- The centos kernel flavor from images.yaml and its generated workflow
- The centos-kmodsig dead code from Justfile and fetch-kernel.sh
- All centos-specific branches in build scripts (prep, test, nvidia, dual-sign)
- The #ifndef CENTOS preprocessor guard in Containerfile.in
- CentOS references from README.md badges and examples
- CentOS from artifacthub package keywords
* docs: update akmods example version to 44
2026-10-13 19:24:35 +00:00
ubot-7274[bot]
cdb58c09b9
chore(deps): update github/codeql-action digest to 24c5418 ( #604 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-13 08:39:17 +03:00
ubot-7274[bot]
cc75e3b16d
chore(deps): update actions/upload-artifact action to v7.0.2 ( #603 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-08 04:03:56 +00:00
ubot-7274[bot]
dddf5adf14
chore(deps): update ghcr.io/ublue-os/devcontainer:latest docker digest to 94c59f2 ( #602 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-10-08 04:03:40 +00:00
Benjamin Sherman
21c5bae947
chore: drop Fedora 43 builds ( #600 )
...
* chore: drop Fedora 43 builds
Fedora 43 akmods are no longer needed by the maintained downstreams.
Retire their build matrix alongside the removal of GTS support in
ublue-os/main to stop producing unused kernel and module caches.
* fix: preserve Fedora 43 CoreOS stable builds
Bluefin LTS HWE and GDX still consume coreos-stable-43 akmods, so retain that flavor while dropping the other Fedora 43 builds.
2026-10-02 07:07:08 +00:00
ubot-7274[bot]
bf19f7b350
chore(deps): update ghcr.io/ublue-os/devcontainer:latest docker digest to ba4c0e5 ( #599 )
...
* chore(deps): update ghcr.io/ublue-os/devcontainer:latest docker digest to ba4c0e5
* fix(build): enable just list support
The refreshed devcontainer's just version requires list support for which(). Enable it so CI can evaluate build recipes.
---------
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: Benjamin Sherman <benjamin@holyarmy.org>
2026-09-30 12:01:32 -05:00
ubot-7274[bot]
37bc32a7c1
chore(deps): update github/codeql-action digest to 2892aa5 ( #586 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: Benjamin Sherman <benjamin@holyarmy.org>
2026-09-29 00:16:11 -05:00
Benjamin Sherman
f124aa59b7
ci: pin build pipeline runners to ubuntu-26.04 ( #598 )
...
ubuntu-latest will soon migrate to 26.04. Update in advance to verify
behavior. Pin every job in the build, cache, and publish path to 26.04
explicitly so the runner OS is deterministic there. Housekeeping
workflows (cleanup, scorecard) stay on ubuntu-latest.
2026-09-28 23:16:43 -05:00
Kyle Gospodnetich
1e4d10b9ac
feat: Add Fedora 45 support for OGC and OGC-LTS ( #597 )
...
* feat: Add Fedora 45 support for OGC and OGC-LTS
* fix: Drop a dependency and use skopeo
2026-09-24 22:34:59 -07:00
inffy
69c139b49b
feat: fedora 45 bringup ( #594 )
...
* bringup f45
* update the workflow
* do-not-test
* use dnf repo commands instead of sed
* gate openrazer on f45
* add notice for temp workaround for openrazer
2026-09-17 12:09:56 -05:00
Benjamin Sherman
c30e9467fe
fix: Preserve cron schedule across workflow regeneration ( #582 )
...
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-25 11:56:22 +03:00
ubot-7274[bot]
4403fec091
chore(deps): update github/codeql-action digest to db488dd ( #580 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-21 07:07:33 -07:00
Kyle Gospodnetich
afc983c624
feat: Add support for OGC LTS kernel ( #574 )
2026-08-17 01:06:26 -07:00
Kyle Gospodnetich
53c275d042
Revert "revertme: Disable Nvidia LTS on OGC for now ( #571 )" ( #572 )
...
This reverts commit 55a9b6d154
2026-08-14 17:13:54 -07:00
Kyle Gospodnetich
55a9b6d154
revertme: Disable Nvidia LTS on OGC for now ( #571 )
2026-08-13 23:46:25 -07:00
ubot-7274[bot]
d416a66ece
chore(deps): update github/codeql-action digest to ff2f1c6 ( #568 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-13 19:24:14 -05:00
Benjamin Sherman
f69eeb12ff
fix(ci): remove exact Cosign version gate ( #567 )
...
Verify published image signatures directly instead of requiring one
Cosign patch version.
2026-08-13 02:58:45 +00:00
ubot-7274[bot]
a8ce98d6e5
chore(deps): update github/codeql-action digest to 5595cca ( #562 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-11 14:33:35 -05:00
ubot-7274[bot]
b5e72521cf
chore(deps): update actions/attest-build-provenance digest to 4d10147 ( #564 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-11 14:33:24 -05:00
ubot-7274[bot]
01f5675bea
chore(deps): update dependency sigstore/cosign to v3.1.3 ( #563 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-08-11 14:33:08 -05:00
Benjamin Sherman
59a549d3eb
fix(workflows): validate cosign version from JSON ( #561 )
2026-08-01 22:22:11 -05:00
Benjamin Sherman
a88b8866c5
fix(workflows): separate provenance from image signature discovery ( #560 )
...
Store build provenance in GitHub's attestations API without attaching it to GHCR. Add post-publication verification for Podman signatures, containers/image policy enforcement, and manifest provenance.
2026-08-01 11:39:18 -05:00
ubot-7274[bot]
daab76ed60
chore(deps): update github/codeql-action digest to f205ea1 ( #558 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-07-30 08:35:33 -05:00
ubot-7274[bot]
6d6ef266b8
chore(deps): update github/codeql-action digest to e4fba86 ( #556 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-07-27 22:35:44 -05:00
ubot-7274[bot]
5107ed615a
chore(deps): update ossf/scorecard-action action to v2.4.4 ( #557 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-07-27 22:35:16 -05:00
ubot-7274[bot]
a9fd24fe20
chore(deps): update actions/attest-build-provenance digest to 0f67c3f ( #549 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-07-20 15:08:58 -05:00
ubot-7274[bot]
8ab9d80294
chore(deps): update dataaxiom/ghcr-cleanup-action action to v1.2.2 ( #542 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-07-20 15:06:14 -05:00
ubot-7274[bot]
3470785836
chore(deps): update github/codeql-action digest to 7188fc3 ( #552 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-07-20 15:05:07 -05:00
ubot-7274[bot]
e44afc1479
chore(deps): update actions/checkout action to v7 ( #545 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-07-20 15:03:30 -05:00
ubot-7274[bot]
ca15ceda40
chore(deps): update actions/cache action to v6 ( #547 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: Benjamin Sherman <benjamin@holyarmy.org>
2026-07-20 15:00:52 -05:00
ubot-7274[bot]
b47260b78b
chore(deps): update actions/checkout action to v6.1.0 ( #555 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-07-20 12:29:09 -05:00
ubot-7274[bot]
5d824d31cd
chore(deps): update github/codeql-action digest to 8aad20d ( #538 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-06-04 13:40:57 -07:00
ubot-7274[bot]
affb7e3e1a
chore(deps): update actions/checkout action to v6.0.3 ( #539 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-06-04 13:40:40 -07:00
ubot-7274[bot]
60841988b4
chore(deps): update dataaxiom/ghcr-cleanup-action action to v1.2.1 ( #533 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-05-30 23:10:41 -05:00
Benjamin Sherman
633b830284
feat: move longterm to F44 and update to 6.18 ( #532 )
...
chore: move longterm to F44 and update to 6.18
longterm-6.12 is not being built for F44, but our
coreos longterm builds are based on coreos stable, which is
now based on F44. So we need to bump the longterm-6.12
to longterm-6.18
Also, this removes coreos-testing from F43 since that is
not used by downstreams.
2026-05-23 15:24:05 +00:00
ubot-7274[bot]
3865bb5f4e
chore(deps): update ghcr.io/ublue-os/devcontainer:latest docker digest to 74af83a ( #521 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: Benjamin Sherman <benjamin@holyarmy.org>
2026-05-23 03:18:35 +00:00
ubot-7274[bot]
5f2c6f6c1a
chore(deps): update github/codeql-action digest to 7211b7c ( #526 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
Co-authored-by: Benjamin Sherman <benjamin@holyarmy.org>
2026-05-22 22:03:50 -05:00
ubot-7274[bot]
61e660c28c
chore(deps): update dataaxiom/ghcr-cleanup-action action to v1.2.0 ( #528 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-05-22 22:03:18 -05:00
Benjamin Sherman
3d987fa095
chore: disable dependabot ( #531 )
...
we use renovate, so dependabot is creating conflicting PRs
2026-05-22 21:59:36 -05:00
dependabot[bot]
8f71a7568e
chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 ( #527 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.4 to 4.35.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](68bde559de...9e0d7b8d25
2026-05-22 21:48:47 -05:00
Benjamin Sherman
e01194cebd
chore: update workflows removing F42 ( #529 )
...
This removes F42 from akmods builds, since F44 is now current
and F43 is current-1.
2026-05-22 21:47:42 -05:00
Benjamin Sherman
0a6ed31e33
fix: opt into spec-compliant yq merge anchors ( #530 )
2026-05-22 21:42:09 -05:00
inffy
0a02b808b5
chore: bump coreos-stable to f44 ( #520 )
...
* chore: bump coreos-stable to f44
* restore ogc check
* indent
2026-05-11 10:31:14 -07:00
ubot-7274[bot]
38b675e9be
chore(deps): update github/codeql-action digest to 68bde55 ( #517 )
...
Co-authored-by: ubot-7274[bot] <217212047+ubot-7274[bot]@users.noreply.github.com>
2026-05-07 21:08:32 -07:00
