coulomb/rein-aharness
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(ci): pin musl-compatible Python bootstrap
All checks were successful
Governed runtime contract / contract (push) Successful in 12s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06ba0-10aa-7ea0-b20a-4f3fac39efe9
This commit is contained in:
tegwick 2026-09-04 21:20:43 +02:00
parent eb5b0d910a
commit 2be37e77aa
1 changed files with 2 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

20
.forgejo/workflows/runtime-contract.yaml
View file

@ -17,8 +17,8 @@ jobs:
FORGE_BASE: ${{ github.server_url }} FORGE_BASE: ${{ github.server_url }}
REPO_NAME: ${{ github.repository }} REPO_NAME: ${{ github.repository }}
REPO_SHA: ${{ github.sha }} REPO_SHA: ${{ github.sha }}
UV_VERSION: "0.8.0" UV_VERSION: "0.12.9"
UV_X86_64_SHA256: "0208cbcb3850bfc69277c9a16c2b0399218b075dc923aca7e4b576ee4228c570" UV_X86_64_SHA256: "aa4b1f8770910f7c7c543c7acc980e4270e52e70750c996acef813ea1c7c2912"
run: | run: |
set -eu set -eu
work_dir="$(mktemp -d /tmp/rein-contract.XXXXXX)" work_dir="$(mktemp -d /tmp/rein-contract.XXXXXX)"
@ -50,18 +50,6 @@ jobs:
export UV_PYTHON_INSTALL_DIR="${work_dir}/uv-python" export UV_PYTHON_INSTALL_DIR="${work_dir}/uv-python"
"${uv_bin}" python install 3.12 "${uv_bin}" python install 3.12
python_bin="$("${uv_bin}" python find 3.12)" python_bin="$("${uv_bin}" python find 3.12)"
if ! "${python_bin}" -c 'import ctypes; ctypes.CDLL("libgcc_s.so.1")' >/dev/null 2>&1; then
if command -v apk >/dev/null 2>&1; then
apk add --no-cache libgcc
elif command -v apt-get >/dev/null 2>&1; then
apt-get update
apt-get install -y libgcc-s1
else
echo "managed Python requires libgcc_s.so.1, but no supported package manager is available" >&2
exit 1
fi
fi
"${python_bin}" -c 'import ctypes; ctypes.CDLL("libgcc_s.so.1")'
git clone "${FORGE_BASE}/${REPO_NAME}.git" "${work_dir}/rein-aharness" git clone "${FORGE_BASE}/${REPO_NAME}.git" "${work_dir}/rein-aharness"
git -C "${work_dir}/rein-aharness" checkout --detach "${REPO_SHA}" git -C "${work_dir}/rein-aharness" checkout --detach "${REPO_SHA}"
@ -79,11 +67,7 @@ jobs:
git -C "${work_dir}/sand-boxer" checkout --detach "${sandbox_sha}" git -C "${work_dir}/sand-boxer" checkout --detach "${sandbox_sha}"
cd "${work_dir}/rein-aharness" cd "${work_dir}/rein-aharness"
# uv itself is a static musl bootstrap binary so it can execute on
# the NixOS runner. The managed CPython ABI is GNU/Linux, which must
# be explicit or native wheels are selected for the bootstrap ABI.
"${uv_bin}" sync \ "${uv_bin}" sync \
--python "${python_bin}" \ --python "${python_bin}" \
--python-platform x86_64-unknown-linux-gnu \
--frozen --no-editable --extra glas --extra llm --extra dev --frozen --no-editable --extra glas --extra llm --extra dev
./scripts/verify-runtime-contracts.sh ./scripts/verify-runtime-contracts.sh