Skip to content

Enable hermetic buildroot - #169

Merged
Jakob-Naucke merged 1 commit into
confidential-clusters:mainfrom
Jakob-Naucke:hermetic-buildroot
Sep 2, 2026
Merged

Enable hermetic buildroot#169
Jakob-Naucke merged 1 commit into
confidential-clusters:mainfrom
Jakob-Naucke:hermetic-buildroot

Conversation

@Jakob-Naucke

Copy link
Copy Markdown
Contributor

Activate network isolation for buildroot, which is already required for releasing a new buildroot, so that we can merge #168.

  • .tekton: set hermetic=true and prefetch-input on buildroot
  • rpm prefetch: add per-component lockfiles: .konflux/buildroot/rpms.{in,lock}.yaml (rust toolchain, base ubi9/go-toolset)

Changes selectively taken from #166.

@Jakob-Naucke
Jakob-Naucke force-pushed the hermetic-buildroot branch 2 times, most recently from 874bac9 to 024662b Compare September 1, 2026 14:14
Activate network isolation for buildroot, which is already required
for releasing a new buildroot, so that we can merge confidential-clusters#168.

- .tekton: set hermetic=true and prefetch-input on buildroot
- rpm prefetch: add per-component lockfiles:
    .konflux/buildroot/rpms.{in,lock}.yaml (rust toolchain, base ubi9/go-toolset)

Most changes selectively taken from confidential-clusters#166, then expanded with perl-core
in the buildroot.

Assisted-By: Claude Opus 4.8
Signed-off-by: Jakob Naucke <jnaucke@redhat.com>
Co-authored-by: Uri Lublin <uril@redhat.com>
Comment thread .konflux/buildroot/rpms.in.yaml
@Jakob-Naucke
Jakob-Naucke merged commit 369b620 into confidential-clusters:main Sep 2, 2026
2 checks passed
@Jakob-Naucke
Jakob-Naucke deleted the hermetic-buildroot branch September 3, 2026 07:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants