V8.13.008.2025.08.22
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
@@ -10,6 +10,6 @@
|
|||||||
# SPDX-Security-Contact: security@coresecret.eu
|
# SPDX-Security-Contact: security@coresecret.eu
|
||||||
|
|
||||||
build:
|
build:
|
||||||
counter: 1024
|
counter: 1023
|
||||||
version: V8.13.008.2025.08.22
|
version: V8.13.008.2025.08.22
|
||||||
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=yaml
|
||||||
|
|||||||
@@ -40,7 +40,7 @@ jobs:
|
|||||||
- name: 🛠️ Basic Image Setup.
|
- name: 🛠️ Basic Image Setup.
|
||||||
run: |
|
run: |
|
||||||
export DEBIAN_FRONTEND=noninteractive
|
export DEBIAN_FRONTEND=noninteractive
|
||||||
apt-get update -y
|
apt-get update
|
||||||
apt-get upgrade -y
|
apt-get upgrade -y
|
||||||
apt-get install -y --no-install-recommends \
|
apt-get install -y --no-install-recommends \
|
||||||
apt-utils \
|
apt-utils \
|
||||||
@@ -53,53 +53,22 @@ jobs:
|
|||||||
sudo \
|
sudo \
|
||||||
util-linux
|
util-linux
|
||||||
|
|
||||||
- name: Verify /work mount & space
|
- name: ⚙️ Space guards (LB_PARENTDIR)
|
||||||
run: |
|
|
||||||
set -euxo pipefail
|
|
||||||
command -v findmnt >/dev/null || { apt-get update -y && apt-get install -y --no-install-recommends util-linux; }
|
|
||||||
findmnt -no SOURCE,TARGET /work || true
|
|
||||||
df -h /work
|
|
||||||
mountpoint -q /work && echo "OK: /work is a mount"
|
|
||||||
|
|
||||||
- name: 🔎 Show workspace & mounts
|
|
||||||
run: |
|
|
||||||
set -euo pipefail
|
|
||||||
echo "GITHUB_WORKSPACE=$GITHUB_WORKSPACE"
|
|
||||||
pwd
|
|
||||||
ls -ld "$GITHUB_WORKSPACE"
|
|
||||||
command -v findmnt >/dev/null || apt-get update && apt-get install -y findmnt || true
|
|
||||||
findmnt -no SOURCE,TARGET "$GITHUB_WORKSPACE" || true
|
|
||||||
df -h "$GITHUB_WORKSPACE"
|
|
||||||
df -h .
|
|
||||||
|
|
||||||
- name: ⚙️ Space guards (workspace + LB_PARENTDIR)
|
|
||||||
env:
|
env:
|
||||||
LB_PARENTDIR: /work
|
LB_PARENTDIR: /work
|
||||||
run: |
|
run: |
|
||||||
set -euo pipefail
|
set -euo pipefail
|
||||||
need_mb=8192
|
need_mb=16384
|
||||||
for p in "${GITHUB_WORKSPACE:?}" "${LB_PARENTDIR:?}"; do
|
for p in "${LB_PARENTDIR:?}"; do
|
||||||
mkdir -p "$p"
|
mkdir -p "$p"
|
||||||
avail_mb=$(df -Pm "$p" | awk 'NR==2{print $4}')
|
avail_mb=$(df -Pm "$p" | awk 'NR==2{print $4}')
|
||||||
printf "[INFO] %s: %s MiB available (need %s MiB)\n" "$p" "$avail_mb" "$need_mb"
|
printf "[\e[92mINFO\e[0m] Free space at: [%s] - [%s] MiB available > [%s] MiB needed. \n" "${p}" "${avail_mb}" "${need_mb}"
|
||||||
if (( avail_mb < need_mb )); then
|
if (( avail_mb < need_mb )); then
|
||||||
printf "[\e[91mERROR\e[0m] Not enough free space at: [%s] - [%s] MiB available < [%s] MiB needed. \n" "${p}" "${avail_mb}" "${need_mb}"
|
printf "[\e[91mERROR\e[0m] Not enough free space at: [%s] - [%s] MiB available < [%s] MiB needed. \n" "${p}" "${avail_mb}" "${need_mb}"
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
done
|
done
|
||||||
|
|
||||||
- name: ⚙️ Is there sufficient space available?
|
|
||||||
run: |
|
|
||||||
set -euo pipefail
|
|
||||||
need_mb=8192
|
|
||||||
avail_mb=$(df -Pm . | awk 'NR==2{print $4}')
|
|
||||||
if [[ "${avail_mb}" -lt "${need_mb}" ]]; then
|
|
||||||
printf "[\e[91mERROR\e[0m] Not enough free space in the working directory: [%s] MiB available < [%s] MiB needed \n " "${avail_mb}" "${need_mb}"
|
|
||||||
exit 1
|
|
||||||
else
|
|
||||||
printf "[\e[92mINFO\e[0m] Free space in the working directory: [%s] MiB available > [%s] MiB needed \n " "${avail_mb}" "${need_mb}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
- name: ⚙️ Check GnuPG Version.
|
- name: ⚙️ Check GnuPG Version.
|
||||||
run: |
|
run: |
|
||||||
gpg --version
|
gpg --version
|
||||||
@@ -176,8 +145,14 @@ jobs:
|
|||||||
echo "${{ secrets.CISS_DLB_ROOT_SSH_PUBKEY }}" >| /opt/config/authorized_keys
|
echo "${{ secrets.CISS_DLB_ROOT_SSH_PUBKEY }}" >| /opt/config/authorized_keys
|
||||||
|
|
||||||
- name: 🛠️ Starting CISS.debian.live.builder. This may take a while ...
|
- name: 🛠️ Starting CISS.debian.live.builder. This may take a while ...
|
||||||
|
env:
|
||||||
|
LB_PARENTDIR: /work
|
||||||
|
LB_CACHE_DIR: /work/.cache
|
||||||
|
TMPDIR: /work/tmp
|
||||||
|
XDG_CACHE_HOME: /work/.cache
|
||||||
run: |
|
run: |
|
||||||
set -euo pipefail
|
set -euo pipefail
|
||||||
|
mkdir -p "${LB_PARENTDIR}" "${LB_CACHE_DIR}" "${TMPDIR}"
|
||||||
chmod 0755 ciss_live_builder.sh
|
chmod 0755 ciss_live_builder.sh
|
||||||
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
|
timestamp=$(date -u +"%Y_%m_%dT%H_%M_%SZ")
|
||||||
### Change "--autobuild=" to the specific kernel version you need: '6.12.41+deb13-amd64'.
|
### Change "--autobuild=" to the specific kernel version you need: '6.12.41+deb13-amd64'.
|
||||||
|
|||||||
Reference in New Issue
Block a user