Repository navigation

Orchestration - #143

Open

pbuncic wants to merge 182 commits into

mainfrom

Open

Orchestration#143
pbuncic wants to merge 182 commits into
mainfrom
orchestration

Commits on Oct 11, 2026
Commits on Oct 12, 2026
- Orchestrator M4: certification in shadow, the outside audit copy
  pbuncic
  committed
  e786319
- Orchestrator M5: the certified set
  pbuncic
  committed
  faf4be5
- Orchestrator M6: GitLab and the store through the credentials proxy
  pbuncic
  committed
  3be79fa
- credentials-proxy: the services' secrets in a second security proxy
  pbuncic
  committed
  c6c4a3d
- console-backend: declare requests and boto3
  pbuncic
  committed
  46fba5f
- credproxy: encode path segments once more for the proxy
  pbuncic
  committed
  8699c1a
- orch: read a public store with no credentials
  pbuncic
  committed
  0194bcb
- orch: replay each CI certification as the worker would certify it (M8a)
  pbuncic
  committed
  9860ce5
- orch: the replay checks the store through the digest cache
  pbuncic
  committed
  49a945a
Commits on Oct 13, 2026
Commits on Oct 14, 2026
Commits on Oct 15, 2026
- sandbox: on macOS a build writes only its own files
  pbuncic
  committed
  85539a5
Commits on Oct 16, 2026
Commits on Oct 17, 2026
- ci: upload coverage to Codecov on bitsorg
  pbuncic
  committed
  4c79391
- docs: builds on --reuse-from need the reused CVMFS paths
  pbuncic
  committed
  dd7ec74
- cvmfs publish: a view's setup.sh sets what the release's modules set
  pbuncic
  committed
  2237b07
- cvmfs publish: a release's top-level module points to its complete view
  pbuncic
  committed
  4070e42
- bits setenv/enter/load: a release with a complete view sources its setup.sh
  pbuncic
  committed
  e34dc04
- bits: read a bits use profile only when this directory has one
  pbuncic
  committed
  dcd0701
- bits: pick the environment commands' architecture without Python
  pbuncic
  committed
  4b40051
- bits q/enter/load/setenv: no work dir needed for CVMFS modules alone
  pbuncic
  committed
  565e46c
- bits --community NAME: $BITS_COMMUNITY on the command line
  pbuncic
  committed
  39aeaa1
- Remove bitsenv
  pbuncic
  committed
  d7b5ecd
- bits q/enter/load/setenv: CVMFS trees by install dir, and --archive
  pbuncic
  committed
  491fa89
Commits on Oct 18, 2026
Commits on Oct 19, 2026
Commits on Oct 20, 2026
Commits on Oct 21, 2026
- Keep no-op package progress at debug level and split agent guidance
  jmcarcell
  committed
  e29ee8b
Commits on Oct 22, 2026
Commits on Oct 23, 2026
Commits on Oct 24, 2026
Commits on Oct 25, 2026
Commits on Oct 26, 2026
- Build queue: no build on a host whose runner is offline
  pbuncic
  committed
  7093eaf
- SBOM: host tools and build-only system packages not counted
  pbuncic
  committed
  9cc8a51
- SBOM scans: what only host tools use is not counted either
  pbuncic
  committed
  5c8ff01
- Build queue: a host's runner found by its tag, not its description
  pbuncic
  committed
  4c694c7
- Build queue: jobs traced to hosts by runner id; the pause in /ops/queue
  pbuncic
  committed
  1da63d0
- Triage: a rule for every vulnerability of a package (vuln_id *)
  pbuncic
  committed
  258b087
- Orchestrator: builds certified once in the store, not after CVMFS
  pbuncic
  committed
  5e534a7
- Build plan: certified store listings cached; changed hashes listed in rounds
  pbuncic
  committed
  9d69c82
- printing the built version in the enter command (#142)
  m-fol
  authored
  5e707ad
- bits build: the enter hint names the family's latest alias too; docs
  pbuncic
  committed
  d380ac1
- Merge pull request #134 from jmcarcell/feat/build-stage-progress
  pbuncic
  committed
  d3fc337
- CHANGELOG: build stage progress (#134), by @jmcarcell
  pbuncic
  committed
  0c3ef2b
- Document development and build validation guidance for agents (#138)
  jmcarcell
  authored
  84834a1
- AGENTS.md: the project's rules for changes and builds
  pbuncic
  committed
  2b9dd83
- Add opt-in symlinks for deployed packages
  
  akritkbehera
  authored and
  pbuncic
  committed
  340e456
- Fix shared-package dependency paths in symlink stages
  
  akritkbehera
  authored and
  pbuncic
  committed
  6d0f288
- Do not follow symlinks when listing files to relocate
  
  akritkbehera
  authored and
  pbuncic
  committed
  cfa3bbe
- Symlink only certified packages in strict mode
  pbuncic
  committed
  c9f89e9
- Relocate references with BSD grep and xargs too
  pbuncic
  committed
  98d6430
- Plan: do not list symlinked packages in the store ahead
  pbuncic
  committed
  a676122
- Record symlinked packages' source in the build manifest
  pbuncic
  committed
  19d3a7d
- Move SCRAM staging of symlinked packages to a recipe hook
  pbuncic
  committed
  d2b79b7
- Docs: when to use --reuse-from and --symlink-packages-from
  pbuncic
  committed
  c8d08c2
- Do not prefetch packages the plan links from a deployment
  pbuncic
  committed
  c646783
Commits on Oct 27, 2026
- CHANGELOG and docs for the orchestration branch
  pbuncic
  committed
  577f092
- Install relocate-references.sh with bits
  pbuncic
  committed
  63338f2
- tests: the bits status --docker test names its architecture
  pbuncic
  committed
  42b6779
- Close the files and sockets that tests reported as left open
  pbuncic
  committed
  5476949
- ci: no tox-gh-actions on macOS
  pbuncic
  committed
  e840d2f
- tests: the help tests' python3 runs the test's own venv
  pbuncic
  committed
  2af41be
- bits q: note the other build type with bash 3.2 too
  pbuncic
  committed
  e82fd6b
- Relocate references with grep in the C locale
  pbuncic
  committed
  d5da6cf
- tests: copy a namespace without Python 3.13's SimpleNamespace(mapping)
  pbuncic
  committed
  f00f10a
- bits build: every package line starts with ==>, aligned with the stages
  pbuncic
  committed
  64b458a
- SBOM: system package versions also without /etc/os-release
  pbuncic
  committed
  5bc2109
- tests: relocation tests work in physical temp paths
  pbuncic
  committed
  ae461ed
- certify, compliance: the console URL from the site configuration too
  pbuncic
  committed
  fd09ce5
- certify: say why there is no QR code when qrcode is missing
  pbuncic
  committed
  ed9e522
- docs: where defaults come from, the site configuration
  pbuncic
  committed
  82f5954
- orchestrator: record certified CLI builds, so they are scanned
  pbuncic
  committed
  55eaaf0
- orchestrator: each release's risk over time, for the console's chart
  pbuncic
  committed
  32e5e59
Commits on Oct 28, 2026