Repository navigation
xtask: Fail packaging if the vendor archive has PCRE2 C sources - #17
Closed
cgwalters-bot wants to merge 2 commits into
Closed
cgwalters-bot wants to merge 2 commits into
cgwalters-bot wants to merge 2 commits into
Conversation
to-existing-root emptied the whole ESP, which can hold content bootc cannot recreate. On Asahi this includes m1n1/boot.bin, vendorfw/ and ubootefi.var; wiping them leaves the machine unbootable. Only remove EFI/ and loader/, which we reinstall. Factor out remove_dir_no_xdev() to share the recursive removal. Generated-by: AI Signed-off-by: Eric Curtin <eric.curtin@docker.com>
cgwalters
approved these changes
Oct 2, 2026
The vendor tarball excludes pcre2-sys's bundled sources via exclude-crate-paths, but that only matches a directory name. If a pcre2-sys update moved them, the exclusion would silently stop applying and we would be back to shipping (and possibly building) a second copy of PCRE2. Inspect the generated archive against a small denylist instead, so that shows up as a packaging failure. Longer term vendor-filterer itself should support an allowlist for C sources. Generated-by: AI Signed-off-by: Colin Walters <walters@verbum.org>
cgwalters-bot
force-pushed
the
bot/xtask-package-denylist
branch
from
October 2, 2026 15:01
f2af777 to
c125a9a
Compare
Collaborator
Author
|
Signed off 1 commit(s) with |
cgwalters-bot
force-pushed
the
bot/xtask-package-denylist
branch
from
October 2, 2026 15:01
c125a9a to
3448338
Compare
Collaborator
Author
|
Opened upstream as bootc-dev#2529. Closing this review draft. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Follow-up to bootc-dev#2495, and stacked on it: the first commit here is bootc-dev#2495's.
exclude-crate-pathsonly matches a directory name, so if a pcre2-sys update moved its bundled sources the exclusion would silently stop applying.cargo xtask packagenow reads the generated vendor tarball and fails if it contains any.c/.hfiles from pcre2-sys (a small denylist, easy to extend to other-syscrates).Testing, on a 16-core RHEL 10 devspace with stable Rust:
cargo test -p xtask(15 passed, including new table-driven tests) and the Makefile's clippy config are clean.cargo xtask packageproduces a vendor tarball with no pcre2-sys.c/.hfiles, andbootcbuilds from the source and vendor tarballs withcargo build --offline, linking the systemlibpcre2-8. With the bootc-dev#2495 exclusion reverted,cargo xtask packagefails listing the 76 bundled files.just packagebuilds the RPMs.Related: bootc-dev#2495 (comment)
Generated-by: https://github.com/cgwalters/#llms
Review draft in cgwalters-forge, not upstream yet. This section is removed when the PR is opened upstream.
bootc-dev/bootc, basemainPVTI_lADOE9oHIs4BlJLczg9kEcYTo review:
/promoteon a line of its own, to open it upstream, ready for review. Either covers only the commits pushed so far.Signed-off-by: Colin Walters <walters@verbum.org>to the commits lacking it (the bot's and yours; anyone else's only if you ask), with you as committer./draftline (in the same comment or before) to open it upstream as a draft (/readyundoes that).