Integrate owned blocking, shared cache and verified unsigned VRDS releases #344

Merged

Wuast94 merged 23 commits from fix/shared-s3-cache-unsigned-sbom into main 2026-10-12 00:45:44 +02:00

Conversation 0 Commits 23 Files changed 91 +3085 -1127

Wuast94 commented 2026-10-08 23:23:27 +02:00

Owner

• Copy link
• Copy Markdown

Native audio, payload processing and atomic filesystem commits use the published Common blocking owner, keeping HTTP and probes responsive. Cancellation retains actual jobs, locks and temporary resources through join; finite SDK initialization/session writes finish before SDK store close. The implemented integration and already approved main lockfile maintenance are preserved.

Release now executes the actual candidate before promotion: linux/amd64, its own UID/GID65532, read-only root, fresh owned volumes, HTTP/configuration processing and SIGTERM exit0. Unsigned SPDX remains digest-bound in the existing Harbor repository with subject/byte verification; only that accepted digest becomes version/latest. Shared Ceph S3 and Docker caches remain in use. No report artifacts or own processing/test deadlines.

Validation: complete local just gate exit0 (410 Rust executions including 363 library cases, real native audio/API/browser/PG-LID and optimized worker canary; deny/machete0). The new image acceptance passed on the released 3.6.10 digest both locally and on the Linux runner, with owned resource cleanup. CI1349 already accepted 8405a8c; required CI validates the additional release-check commit. All110 functions and historical image/data/restore/rollback evidence are retained. Production GitOps switching is separate; the optional live OpenCloud test requires its own account.

Native audio, payload processing and atomic filesystem commits use the published Common blocking owner, keeping HTTP and probes responsive. Cancellation retains actual jobs, locks and temporary resources through join; finite SDK initialization/session writes finish before SDK store close. The implemented integration and already approved main lockfile maintenance are preserved. Release now executes the actual candidate before promotion: linux/amd64, its own UID/GID65532, read-only root, fresh owned volumes, HTTP/configuration processing and SIGTERM exit0. Unsigned SPDX remains digest-bound in the existing Harbor repository with subject/byte verification; only that accepted digest becomes version/latest. Shared Ceph S3 and Docker caches remain in use. No report artifacts or own processing/test deadlines. Validation: complete local just gate exit0 (410 Rust executions including 363 library cases, real native audio/API/browser/PG-LID and optimized worker canary; deny/machete0). The new image acceptance passed on the released 3.6.10 digest both locally and on the Linux runner, with owned resource cleanup. CI1349 already accepted 8405a8c; required CI validates the additional release-check commit. All110 functions and historical image/data/restore/rollback evidence are retained. Production GitOps switching is separate; the optional live OpenCloud test requires its own account.

Wuast94 added 2 commits 2026-10-08 23:23:27 +02:00

fix(release): remove signing and verify unsigned Harbor SBOMs fd2ad0697b

perf(build): use shared S3 compiler cache across every build path 8e3dc577bf

Wuast94 scheduled this pull request to auto merge when all checks succeed 2026-10-08 23:27:54 +02:00

Wuast94 canceled auto merging this pull request when all checks succeed 2026-10-08 23:40:00 +02:00

Wuast94 added 3 commits 2026-10-09 09:09:37 +02:00

Merge remote-tracking branch 'origin/main' into fix/shared-s3-cache-unsigned-sbom 0c0916daf5

fix: retain S3 backend evidence across cache daemon restarts fe744e1fdf

test: observe SDK lifecycle and processing without wall-clock watchdogs dd7599f0d7

Wuast94 added 2 commits 2026-10-09 13:10:10 +02:00

fix(cache): keep owned compiler daemons alive until explicit cleanup 1e600bcecf

fix(ci): keep verification in job logs and make coverage explicit c8c6c92718

Wuast94 added 1 commit 2026-10-09 14:20:16 +02:00

fix(build): remove deleted native logger from container sources d7472edef2

Wuast94 added 1 commit 2026-10-09 23:29:39 +02:00

docs: record verified Updatarr Rust migration adc83037bb

Wuast94 added 1 commit 2026-10-10 00:15:01 +02:00

docs: skip verification for documentation-only changes [skip ci] b765fba699

Wuast94 added 2 commits 2026-10-11 14:34:48 +02:00

merge: retain already approved upstream dependency maintenance 53c746d765

fix(runtime): own native work and atomic persistence outside HTTP 8405a8ca21

Wuast94 changed title from Use shared S3 compilation cache and unsigned Harbor SBOMs to Align release, cache and blocking runtime with Rust standard 2026-10-11 14:36:20 +02:00

Wuast94 added 1 commit 2026-10-11 17:05:57 +02:00

fix(release): accept VRDS candidate runtime before promotion e86382ef51

Wuast94 changed title from Align release, cache and blocking runtime with Rust standard to Integrate owned blocking, shared cache and verified unsigned VRDS releases 2026-10-11 17:06:30 +02:00

Wuast94 added 1 commit 2026-10-11 17:12:51 +02:00

docs: register ongoing Deltamon Rust migration [skip ci] e58d66cdb3

Wuast94 added 1 commit 2026-10-11 17:20:04 +02:00

docs: register Intel GPU exporter migration [skip ci] 117881fe61

Wuast94 added 1 commit 2026-10-11 18:18:27 +02:00

docs: record verified Intel GPU exporter release [skip ci] 333ad06bb8

Wuast94 added 1 commit 2026-10-11 18:22:26 +02:00

docs: reconcile current VRDS completion evidence 67c10caa6c

Wuast94 added 1 commit 2026-10-11 18:31:59 +02:00

docs: record verified Checkrr Rust release [skip ci] f428579f0d

Wuast94 added 1 commit 2026-10-11 18:54:36 +02:00

docs: align final PR evidence and historical inventories 6830f18453

Wuast94 added 1 commit 2026-10-11 22:04:38 +02:00

chore: reconcile PR344 with merged main dependencies 0bd0c59f4e

Wuast94 added 1 commit 2026-10-11 22:25:33 +02:00

docs(standard): record Checkrr production migration [skip ci] 81040b528a

Wuast94 added 1 commit 2026-10-11 23:30:55 +02:00

docs: register pypypew Rust migration [skip ci] d82686189c

Wuast94 added 1 commit 2026-10-11 23:38:38 +02:00

docs: align PR344 acceptance with current gold reference 90f4bf6dca

Wuast94 merged commit 4d4cad939b into main 2026-10-12 00:45:44 +02:00

Wuast94 referenced this pull request from a commit 2026-10-12 00:45:45 +02:00

Merge pull request 'Integrate owned blocking, shared cache and verified unsigned VRDS releases' (#344) from fix/shared-s3-cache-unsigned-sbom into main

Wuast94 deleted branch fix/shared-s3-cache-unsigned-sbom 2026-10-12 00:45:55 +02:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

vault/vrds!344

No description provided.