mirror-ublue-os-akmods/images.yaml
Benjamin Sherman c30f343b72
fix(zfs): backport upstream 7.1 and mmap fixes into 2.4.3 (#566)
coreos-stable ZFS builds have failed since CoreOS moved to kernel 7.1,
holding back kernel CVE fixes and nvidia driver updates from ucore and
other downstream consumers.

The 7.1 code compat (openzfs/zfs#18471) already shipped in 2.4.3 — only
META's Linux-Maximum gates it. Raising that ceiling (openzfs/zfs#18682)
unblocks the build without --enable-linux-experimental, which would
otherwise flood dmesg with EXPERIMENTAL warnings and mask real errors.

Also carry openzfs/zfs#18715, which replaces a compiled-out ASSERT3U in
zfs_fillpage() with a real bounds check. Without it an mmap read racing a
truncate underflows io_len and zero-fills forward across physical memory.
This is not 7.1-specific and already affects the 7.0.x builds we ship.

Neither commit is on zfs-2.4-release, so patching is gated to exactly
2.4.3 and stops once upstream ships a release carrying them.

coreos-testing no longer needs the experimental switch now that META
covers 7.1.
2026-08-10 13:12:53 +00:00

174 lines
3.6 KiB
YAML

---
defaults:
kernel_flavor: main
version: 44
akmods_target: common
# ZFS defaults can be overridden per kernel flavor without affecting the build matrix.
zfs:
default:
minor_version: "2.4"
linux_experimental: false
coreos-testing:
minor_version: "2.4"
linux_experimental: false
arch-arm-x86: &arch-arm-x86
architecture:
- aarch64
- x86_64
arch-only-x86: &arch-only-x86
architecture:
- x86_64
akmods-base: &akmods-base
org: ublue-os
registry: ghcr.io
repo: akmods
transport: docker://
akmods-common: &akmods-common
name: akmods
description: "A caching layer for pre-built akmod RPMs"
akmods-nvidia-lts: &akmods-nvidia-lts
name: akmods-nvidia-lts
description: "A caching layer for the pre-built nvidia-lts akmod RPMs"
akmods-nvidia-open: &akmods-nvidia-open
name: akmods-nvidia-open
description: "A caching layer for the pre-built nvidia-open akmod RPMs"
akmods-zfs: &akmods-zfs
name: akmods-zfs
description: "A caching layer for the pre-built zfs akmod RPMs"
akmods-extra: &akmods-extra
name: akmods-extra
description: "A caching layer for pre-built extra akmod RPMs"
desktop-build-group-only-x86: &desktop-build-group-only-x86
common:
!!merge <<:
- *akmods-base
- *akmods-common
- *arch-only-x86
nvidia-lts:
!!merge <<:
- *akmods-base
- *akmods-nvidia-lts
- *arch-only-x86
nvidia-open:
!!merge <<:
- *akmods-base
- *akmods-nvidia-open
- *arch-only-x86
ogc-desktop-build-group-only-x86: &ogc-desktop-build-group-only-x86
common:
!!merge <<:
- *akmods-base
- *akmods-common
- *arch-only-x86
extra:
!!merge <<:
- *akmods-base
- *akmods-extra
- *arch-only-x86
nvidia-lts:
!!merge <<:
- *akmods-base
- *akmods-nvidia-lts
- *arch-only-x86
nvidia-open:
!!merge <<:
- *akmods-base
- *akmods-nvidia-open
- *arch-only-x86
desktop-build-group: &desktop-build-group
common:
!!merge <<:
- *akmods-base
- *akmods-common
- *arch-arm-x86
nvidia-lts:
!!merge <<:
- *akmods-base
- *akmods-nvidia-lts
- *arch-arm-x86
nvidia-open:
!!merge <<:
- *akmods-base
- *akmods-nvidia-open
- *arch-arm-x86
server-build-group-only-x86: &server-build-group-only-x86
nvidia-lts:
!!merge <<:
- *akmods-base
- *akmods-nvidia-lts
- *arch-only-x86
nvidia-open:
!!merge <<:
- *akmods-base
- *akmods-nvidia-open
- *arch-only-x86
zfs:
!!merge <<:
- *akmods-base
- *akmods-zfs
- *arch-only-x86
server-build-group: &server-build-group
nvidia-lts:
!!merge <<:
- *akmods-base
- *akmods-nvidia-lts
- *arch-arm-x86
nvidia-open:
!!merge <<:
- *akmods-base
- *akmods-nvidia-open
- *arch-arm-x86
zfs:
!!merge <<:
- *akmods-base
- *akmods-zfs
- *arch-arm-x86
images:
10:
centos:
!!merge <<:
- *server-build-group
43:
main:
!!merge <<:
- *desktop-build-group-only-x86
ogc:
!!merge <<:
- *ogc-desktop-build-group-only-x86
coreos-stable:
!!merge <<:
- *desktop-build-group
- *server-build-group
44:
main:
!!merge <<:
- *desktop-build-group-only-x86
ogc:
!!merge <<:
- *ogc-desktop-build-group-only-x86
coreos-stable:
!!merge <<:
- *desktop-build-group
- *server-build-group
coreos-testing:
!!merge <<:
- *desktop-build-group
- *server-build-group
"longterm-6.18":
!!merge <<:
- *server-build-group