V8.13.008.2025.08.22
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
@@ -10,6 +10,6 @@
|
||||
# SPDX-Security-Contact: security@coresecret.eu
|
||||
|
||||
build:
|
||||
counter: 1024
|
||||
counter: 1023
|
||||
version: V8.13.008.2025.08.22
|
||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
||||
|
||||
@@ -40,7 +40,7 @@ jobs:
|
||||
- name: 🛠️ Basic Image Setup.
|
||||
run: |
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
apt-get update -y
|
||||
apt-get update
|
||||
apt-get upgrade -y
|
||||
apt-get install -y --no-install-recommends \
|
||||
apt-utils \
|
||||
@@ -53,53 +53,22 @@ jobs:
|
||||
sudo \
|
||||
util-linux
|
||||
|
||||
- name: Verify /work mount & space
|
||||
run: |
|
||||
set -euxo pipefail
|
||||
command -v findmnt >/dev/null || { apt-get update -y && apt-get install -y --no-install-recommends util-linux; }
|
||||
findmnt -no SOURCE,TARGET /work || true
|
||||
df -h /work
|
||||
mountpoint -q /work && echo "OK: /work is a mount"
|
||||
|
||||
- name: 🔎 Show workspace & mounts
|
||||
run: |
|
||||
set -euo pipefail
|
||||
echo "GITHUB_WORKSPACE=$GITHUB_WORKSPACE"
|
||||
pwd
|
||||
ls -ld "$GITHUB_WORKSPACE"
|
||||
command -v findmnt >/dev/null || apt-get update && apt-get install -y findmnt || true
|
||||
findmnt -no SOURCE,TARGET "$GITHUB_WORKSPACE" || true
|
||||
df -h "$GITHUB_WORKSPACE"
|
||||
df -h .
|
||||
|
||||
- name: ⚙️ Space guards (workspace + LB_PARENTDIR)
|
||||
- name: ⚙️ Space guards (LB_PARENTDIR)
|
||||
env:
|
||||
LB_PARENTDIR: /work
|
||||
run: |
|
||||
set -euo pipefail
|
||||
need_mb=8192
|
||||
for p in "${GITHUB_WORKSPACE:?}" "${LB_PARENTDIR:?}"; do
|
||||
need_mb=16384
|
||||
for p in "${LB_PARENTDIR:?}"; do
|
||||
mkdir -p "$p"
|
||||
avail_mb=$(df -Pm "$p" | awk 'NR==2{print $4}')
|
||||
printf "[INFO] %s: %s MiB available (need %s MiB)\n" "$p" "$avail_mb" "$need_mb"
|
||||
printf "[\e[92mINFO\e[0m] Free space at: [%s] - [%s] MiB available > [%s] MiB needed. \n" "${p}" "${avail_mb}" "${need_mb}"
|
||||
if (( avail_mb < need_mb )); then
|
||||
printf "[\e[91mERROR\e[0m] Not enough free space at: [%s] - [%s] MiB available < [%s] MiB needed. \n" "${p}" "${avail_mb}" "${need_mb}"
|
||||
exit 1
|
||||
fi
|
||||
done
|
||||
|
||||
- name: ⚙️ Is there sufficient space available?
|
||||
run: |
|
||||
set -euo pipefail
|
||||
need_mb=8192
|
||||
avail_mb=$(df -Pm . | awk 'NR==2{print $4}')
|
||||
if [[ "${avail_mb}" -lt "${need_mb}" ]]; then
|
||||
printf "[\e[91mERROR\e[0m] Not enough free space in the working directory: [%s] MiB available < [%s] MiB needed \n " "${avail_mb}" "${need_mb}"
|
||||
exit 1
|
||||
else
|
||||
printf "[\e[92mINFO\e[0m] Free space in the working directory: [%s] MiB available > [%s] MiB needed \n " "${avail_mb}" "${need_mb}"
|
||||
fi
|
||||
|
||||
- name: ⚙️ Check GnuPG Version.
|
||||
run: |
|
||||
gpg --version
|
||||
@@ -176,8 +145,14 @@ jobs:
|
||||
echo "${{ secrets.CISS_DLB_ROOT_SSH_PUBKEY }}" >| /opt/config/authorized_keys
|
||||
|
||||
- name: 🛠️ Starting CISS.debian.live.builder. This may take a while ...
|
||||
env:
|
||||
LB_PARENTDIR: /work
|
||||
LB_CACHE_DIR: /work/.cache
|
||||
TMPDIR: /work/tmp
|
||||
XDG_CACHE_HOME: /work/.cache
|
||||
run: |
|
||||
set -euo pipefail
|
||||
mkdir -p "${LB_PARENTDIR}" "${LB_CACHE_DIR}" "${TMPDIR}"
|
||||
chmod 0755 ciss_live_builder.sh
|
||||
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
|
||||
### Change "--autobuild=" to the specific kernel version you need: '6.12.41+deb13-amd64'.
|
||||
|
||||
Reference in New Issue
Block a user