Repository navigation
GPLv3; only a proven liboqs is kept or reused; :latest published one run at a time; 0.4.90 - #131
Merged
Merged
Conversation
… copy; 0.4.89 LICENSE is the FSF's text, unmodified. The updater, Fleet's provisioning payload, the Docker image and the zipapp all carry it, held by tests/test_license.py: a tree handed to another machine without its license is a distribution the GPL does not allow. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…; publishers of :latest run one at a time; 0.4.90 - build_liboqs.sh writes nmesh-liboqs.lock beside every build it proved. start.sh keeps, caches and adopts only a library carrying the current one, owned by this account or root and writable by nobody else. A library in the prefix without it is rebuilt beside the old one and swapped in once it loads; a node that cannot rebuild keeps what it has and says so (BUGSVULNS 93). The trust files are read from start.sh's own tree, never from the current directory. - base-image.yml and CI's docker job publish :latest in a concurrency group: two merges a minute apart let the older base build overwrite the newer, and every app build after it failed (BUGSVULNS 100). Verified end to end in a clean Debian container: fresh install, stamped restart, legacy library rebuilt and swapped, legacy library kept when nothing can be fetched, unstamped cache refused. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Two commits.
Licensed under the GNU GPL, version 3 (0.4.89) — the FSF's text, unmodified; the updater, Fleet's provisioning payload, the Docker image and the zipapp all carry it (
tests/test_license.py).pyproject.tomlsaysGPL-3.0-only.Only a proven liboqs is kept or reused (0.4.90)
start.sh keeps, caches and adopts only a library carrying the current
one, owned by this account or root and writable by nobody else. A library
in the prefix without it is rebuilt beside the old one and swapped in
once it loads; a node that cannot rebuild keeps what it has and says so
(BUGSVULNS 93). The trust files are read from start.sh's own tree, never
from the current directory.
group: two merges a minute apart let the older base build overwrite the
newer, and every app build after it failed (BUGSVULNS 100).
Verified end to end in a clean Debian container: fresh install, stamped
restart, legacy library rebuilt and swapped, legacy library kept when
nothing can be fetched, unstamped cache refused.
Stacked on #130. Unit 4605 passed / 21 skipped, integration 150 passed (
-n0), on Python 3.14.🤖 Generated with Claude Code