Repository navigation
Conversation
added 10 commits
November 11, 2026 21:03
…-045) Use the Build-owned verified-image launcher only for Linux native packages. Remove nightly host APT/AppImage provisioning while preserving the six-platform graph, output identities and every downstream proof gate. Unpublished integration checkpoint: the parent must supply the actual verified EMULEBB_LINUX_PREPARED_IMAGE value and merged Build producer pin before delivery. No guessed image reference is added. Refs #302
Skip redundant host Rust, Node and npm setup on Linux while retaining Python control, source policy and image verification. Windows and macOS keep their existing toolchain setup. Refs #302
Pass the Build-owned mirror selector to musl and OCI packaging. Make only Alpine's unpack stage selectable, retaining the original digest as its default and preserving the final LinuxServer runtime base. Unpublished integration checkpoint: production activation still requires the parent-owned merged Build pin and verified public image graph. Refs #302
…oof (RUST-CI-047)
…(RUST-CI-045) Adopt Builder766 and the verified multiarch image together. Producer43091764360 passed native probes, exact material checks, public reads and GitHub attestation.
itlezy
added
the
parallel-approved
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Native Linux packaging currently provisions APT and AppImage tooling on each host runner. Route it through the verified native compiler image instead, retaining the Windows/macOS host recipe, package lifecycle checks and release inventory. Linux inputs use exact mirrored upstream digests; an invalid image never falls back to host provisioning.
Pin Builder
7664330e9381e6ac4f10a72d39f293a4b886b5b9together withghcr.io/emulebb/emulebb-build-ci/ubuntu-rust@sha256:e006429d3a240a6f4e43b1d8f05581bcd963ca681059e2661465ebb359f9118e. Host verification checks the image's GitHub attestation, producer source, recipe/material hashes, tested native CPU descriptors and runtime probe before packaging. The Alpine change affects its build-only unpack input; the runtime base remains immutable.Preserve the current source/channel/architecture identity checks, Windows/Linux profile-ownership proof, both workspace-root inputs and shell-independent channel argument. Retain prepared execution receipts and package logs even when packaging fails. Full and reduced platform profiles share the existing native recipes and artifact graph.
Validation:
https://github.com/emulebb/emulebb-build/actions/runs/43091764360/attempts/1. Evidence:reports/packaging-identity/prepared-43091764360/prepared-image-verification.json.reports/local-check/emulebb-rust/20261111T201027Z-6f8de4b2and20261111T201050Z-b1c48e23.Parent-coordinated parallel consolidation alongside #320: this lane owns prepared release execution and its workflow tests; #320 owns inventory-derived download guidance. The parent coordinates shared Git state, dependency rebases and integration order under
parallel-approved. Original authored commits are preserved; the bounded host-provisioning prerequisite is already integrated by #318. Final main advancement still requires fresh applicable checks.Refs #302 / RUST-CI-045; related #306. No Beta3 promotion or APK/signing change.