Evan Lezar
2263685cf3
test(tmachine): migrate Keycloak provider refresh coverage ( #3404 )
...
* test(tmachine): add Keycloak provider refresh suite
Signed-off-by: Evan Lezar <elezar@nvidia.com >
* refactor(tmachine): share container runtime detection
Signed-off-by: Evan Lezar <elezar@nvidia.com >
* ci(tmachine): run feature suites in GitHub Actions
Signed-off-by: Evan Lezar <elezar@nvidia.com >
* ci(tmachine): run conformance with Podman tests
Signed-off-by: Evan Lezar <elezar@nvidia.com >
* ci(tmachine): cover provider refresh with Podman
Signed-off-by: Evan Lezar <elezar@nvidia.com >
* ci(integration): split input preparation from runners
Signed-off-by: Evan Lezar <elezar@nvidia.com >
---------
Signed-off-by: Evan Lezar <elezar@nvidia.com >
2026-09-18 13:56:07 +02:00
Simon Scatton
0a0a563dd3
ci(conformance): run tmachine suites in release dev ( #3382 )
...
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
2026-09-17 17:13:56 +02:00
Evan Lezar
292559c41c
test(tmachine): run smoke tests from nextest archives ( #3372 )
...
* test(conformance): package CLI smoke test archive
Signed-off-by: Evan Lezar <elezar@nvidia.com >
* test(tmachine): execute nextest archives in guests
Signed-off-by: Evan Lezar <elezar@nvidia.com >
---------
Signed-off-by: Evan Lezar <elezar@nvidia.com >
2026-09-16 12:49:55 +00:00
Simon Scatton and Evan Lezar
9b52b43b39
test(tmachine): add portable VM-based container runtime testing ( #3371 )
...
* test(tmachine): add Docker VM scenario
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* test(tmachine): add portable container scenarios
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* chore(tmachine): isolate downloaded Ansible roles
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* test(tmachine): increase VM resources
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* test(tmachine): improve artifact builds and diagnostics
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(nix): pin tmachine runtime on macOS
Signed-off-by: Evan Lezar <elezar@nvidia.com >
* feat(tests): enable tty and fix supervisor image path
* fix(nix): isolate testing tools from default shell
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(tmachine): initialize test runner working directory
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(tmachine): include Ansible sources in layer cache keys
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(tmachine): build and load separate runtime images
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(tmachine): use local runtime images for Docker
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
---------
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
Signed-off-by: Evan Lezar <elezar@nvidia.com >
Co-authored-by: Evan Lezar <elezar@nvidia.com >
2026-09-16 11:54:28 +00:00
Jesse Jaggars and Drew Newberry
02b664bb0d
refactor(config): normalize and enforce gateway schema v2 ( #2814 )
...
* refactor(config): normalize compute driver field names
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* refactor(config): introduce canonical gateway fields
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* refactor(config): enforce gateway schema version 2
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(config): preserve compute driver runtime guarantees
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(config): address schema v2 review regressions
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(config): complete schema v2 migration safeguards
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(config): expand schema v2 regression coverage
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(config): add schema v2 parity manifest
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(config): correct parity manifest inventory
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* docs(config): record schema v2 intentional changes
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* docs(config): disposition schema v2 parity gaps
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): add dual schema parity harness
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): establish compute lifecycle parity baseline
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(config): preserve gateway option compatibility
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): record gateway option parity
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* docs(config): close gateway-wide parity gaps
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(podman): apply configured pids limit
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): validate Podman option parity
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): add Kubernetes option parity harness
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): record Kubernetes option parity
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): disposition VM parity lanes
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): add external driver parity lane
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(e2e): preserve external driver pull policy
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): attest parity artifacts and launches
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): require clean parity build sources
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): bind parity runtime artifacts
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(e2e): use isolated supervisor tags
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(e2e): qualify parity image tags
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(e2e): serve parity supervisor locally
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): isolate parity podman services
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): harden parity evidence provenance
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): pin parity sandbox artifacts
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): attest parity runtime inputs
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): bind parity runtime evidence
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): record compute boundary parity
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(e2e): disposition cross-cutting parity lanes
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(packaging): preflight gateway config upgrades
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(config): preserve rebase integration guarantees
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(ci): isolate temporary git signing config
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(config): update remaining schema v2 consumers
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(ci): provide e2fs tools to VM tests
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(config): align preflight with gateway startup
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(vm): preserve rootfs tar configuration
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* chore(config): adopt duration unit constructors
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(packaging): preflight RPM gateway config
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(config): address driver review findings
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(e2e): require fresh semantic parity evidence
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* fix(docker): update tests for renamed sandbox label
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
* test(gateway): preserve selective driver coverage after rebase
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
---------
Signed-off-by: Jesse Jaggars <jjaggars@redhat.com >
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
Co-authored-by: Drew Newberry <anewberry@nvidia.com >
2026-09-11 05:00:24 +00:00
Simon Scatton
bcf96e4900
chore(nix): unify Linux cross-compilation toolchains ( #3242 )
...
* chore(nix): unify native and cross-compilation toolchains
Replace the separate GNU and musl development shells with one shell that
provides explicit toolchains for x86_64 and aarch64 Linux, plus native
Darwin on macOS. Cargo selects the compiler, assembler, archiver, and
linker through target-specific environment variables.
Build GNU targets against a glibc 2.28 sysroot with static GCC runtimes
and use the musl toolchains for static Linux executables. Build Z3 and
AWS-LC with each target's stdenv and expose AWS-LC libraries and Rust
bindings through its target-specific system directory.
Keep Darwin system libraries on the unprocessed Apple SDK and prevent
the Rust toolchain from propagating replacement libraries into the shell.
Include the compiler and libc fixes needed for Darwin-to-Linux builds.
Share dependency and environment wiring through mkToolchain, keep compiler
wrappers in the Linux and Darwin modules, and group the pinned GNU build
environment under glibc-2.28. Document the toolchain boundaries in the build
architecture overview.
Validation: actionlint and nix fmt pass. The toolchain refactor preserves
the shell derivations for x86_64 Linux, aarch64 Linux, and aarch64 Darwin.
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci(nix): use the default shell for binary builds
Remove the dev-shell input and its matrix and workflow plumbing.
Use the host default shell for builds and cache hashing.
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci(nix): build release binaries with explicit Cargo targets
Use target-specific artifact paths and rely on the Nix toolchains for
linkage. Remove post-link rewriting, platform linkage checks, and the
unused interpreter input. Update the build architecture documentation.
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* refactor(nix): reuse glibc and GCC build recipes
Use a pinned historical Nixpkgs recipe for glibc 2.28 and rebuild GCC 15
against it instead of maintaining separate runtime builds. Keep only
compatibility adjustments needed by the current build tools.
Assemble the sysroot from glibc outputs and static native libraries. Use
standard ELF interpreters and resolve Rust's explicit gcc_s dependency
through the static GCC archives.
Allow 90 minutes for Rust branch checks to accommodate cold toolchain
builds. Validate the Linux release matrix locally; Darwin remains for CI.
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(nix): disable obsolete RPC tools in glibc
Avoid building rpcgen against the Darwin SDK, which does not expose stat64.
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
---------
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
2026-09-10 14:27:12 +00:00
alangou
3693b32841
ci(trivy): add artifact and PR configuration scans ( #3185 )
...
* ci(trivy): add artifact and PR configuration scans
Signed-off-by: Adrien Langou <alangou@nvidia.com >
* fix(ci): harden Trivy gate detection and finding diff
Signed-off-by: Adrien Langou <alangou@nvidia.com >
* feat(ci): scan released artifacts in release pipelines
Signed-off-by: Adrien Langou <alangou@nvidia.com >
* fix(ci): harden and simplify Trivy scans
Signed-off-by: Adrien Langou <alangou@nvidia.com >
* fix(ci): consolidate Trivy reports and prevent collisions
Signed-off-by: Adrien Langou <alangou@nvidia.com >
---------
Signed-off-by: Adrien Langou <alangou@nvidia.com >
2026-09-09 13:58:06 +00:00
Simon Scatton
981606d2f8
ci: build release binaries with Nix ( #2977 )
...
* ci: build release binaries with Nix
Refs #1683
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: build VM artifacts with Nix
Refs #1683
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: build images from Nix artifacts
Refs #1683
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(nix): prevent host header leakage
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: parallelize artifact builds
Refs #1683
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: build external driver test artifacts
Refs #1683
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(nix): disable mold in musl shells
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: key Rust cache by Nix shell derivation
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: refactor end-to-end workflows
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: split platform binary workflows
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: remove obsolete native build workflows
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: replace disallowed mise action
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: fix refactored e2e lanes
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: check out local result action
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: cache mise installations
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: run docker builds on host runners
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci: disable unstable kubernetes e2e lanes
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(ci): scope binary builds to cargo packages
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(ci): address zizmor template injection findings
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* fix(ci): resolve remaining zizmor annotations
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
---------
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
2026-08-27 17:25:06 +00:00
alangou
5f90c8579c
ci(security): add informational security checks ( #2930 )
...
Signed-off-by: Adrien Langou <alangou@nvidia.com >
2026-08-27 13:32:16 +00:00
Simon Scatton
8d16a59ea3
ci(branch-checks): run Rust checks in Nix shells ( #2876 )
...
* ci(branch-checks): run Rust checks in Nix shells
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci(branch-checks): run Rust tests with nextest
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci(branch-checks): cache Rust workspace artifacts
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
* ci(branch-checks): run cargo-deny in Nix shell
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
---------
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
2026-08-26 13:09:00 +00:00
Evan Lezar
e2ca9cb890
fix(test-guest): pin HVF runtime dependencies ( #2924 )
...
Signed-off-by: Evan Lezar <elezar@nvidia.com >
2026-08-25 14:01:29 +00:00
Simon Scatton
455883905a
fix(python): remove CLI from wheel ( #2321 )
...
The Maturin-based wheel packaging was a historical remnant from when the local gateway launch path and OpenShell CLI were coupled in one binary. The gateway and CLI now ship as standalone artifacts, so the Python distribution should contain only the SDK.
Build a single platform-independent setuptools wheel, verify that it cannot contain native code or an openshell entry point, and simplify the release jobs and documentation for SDK-only PyPI installs.
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
2026-08-25 13:20:42 +00:00
Simon Scatton
905e99aa2a
feat(build): add Nix-native Linux toolchains ( #2875 )
...
* feat(nix): add glibc 2.28 development shell
* feat(nix): add musl development shell
* feat(build): use mold in musl development shell
* feat(flake): add nix remote cache
* feat(build): use mold in default development shell
2026-08-24 12:16:00 +00:00
Simon Scatton
9505ca5ed1
chore: remove Bazel build support ( #2840 )
...
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
2026-08-20 15:08:09 +00:00
Piotr Mlocek
44bf0df485
feat(middleware): inspect WebSocket text messages ( #2477 )
...
* feat(middleware): inspect websocket text messages
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): address websocket review feedback
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(network): bound websocket message assembly
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(network): harden websocket upgrade lifecycle
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* refactor(middleware): unify in-process and remote transports
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* feat(middleware): support regex websocket redaction
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): bound persistent streaming sessions
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): accept websocket sequence gaps
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* refactor(middleware): refine websocket introspection contract
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): clarify websocket preflight lifecycle
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): clarify websocket coverage semantics
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(network): type websocket frame failures
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(network): return 503 when middleware admission is exhausted
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): align streaming API contract
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): clarify WebSocket event result scope
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* docs(rfc): simplify middleware revision history
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* feat(examples): add WebSocket content guard support
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): unify binding payload limits
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* refactor(middleware): align payload limit terminology
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): address websocket review feedback
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(network): address websocket review findings
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* test(network): allow Linux handler setup in preflight regression
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(network): harden websocket relay finalization
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(network): inspect compressed websocket messages
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* test(network): stabilize compressed websocket regressions
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(go-sdk): regenerate middleware protobuf binding
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): clarify websocket skip lifecycle
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
* fix(middleware): address WebSocket review feedback
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
---------
Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com >
2026-08-14 21:51:42 +00:00
Simon Scatton
1959ea19be
build(bazel): establish RFC 0012 Rust reference graph ( #2414 )
...
Establish the Phase 1 reference implementation proposed by RFC 0012
while retaining the existing Cargo and Mise workflows during evaluation.
- pin Bazel 9.1.1 and configure Bzlmod, rules_rs, LLVM, protobuf, and
Rust 1.95 toolchains
- import third-party crates from Cargo metadata and propagate the
workspace version into Bazel targets
- add library, binary, proc-macro, unit-test, and integration-test
targets across the supported Rust workspace crates and drivers
- generate protobuf Rust sources and descriptor sets under Bazel while
preserving Cargo-compatible generated-code imports
- annotate aws-lc-sys and zstd-sys native dependencies, build Z3 4.15.2
from source, and generate z3-sys bindings
- make CLI and procfs test fixtures available as explicit Bazel inputs
without relying on fixed host binary paths
- define optimized release targets for Linux x86_64 and aarch64 CLI,
sandbox, and gateway binaries, plus macOS aarch64 artifacts
- add Bazel, buildifier, and lcov to the Nix development environment
RFC: 0012 (rfc12 branch)
Refs: #2491
Signed-off-by: Simon Scatton <sscatton@nvidia.com >
2026-08-03 09:05:40 +00:00
Drew Newberry
1cbfc0d510
test(e2e): add reusable QEMU infrastructure for E2E tests ( #2471 )
...
* test(vm): add composable QEMU test guests
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* docs(vm): describe test VM directory structure
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* refactor(vm): replace shell catalog functions
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* test(vm): add Fedora release guest support
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* test(vm): enable rootless Podman socket
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* feat(test-guest): add OCI-backed image caching
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* perf(test-guest): accelerate cached guest startup
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* fix(test-guest): address review feedback
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* fix(test-guest): verify OCI cache provenance
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* fix(test-guest): harden cached guest reuse
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* fix(test-guest): refresh runtime setup state
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* feat(test-guest): support E2E runner inputs
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* fix(test-guest): harden runner and OCI reuse
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* feat(test-guest): prepare Podman E2E artifacts
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* fix(test-guest): address review findings
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* revert(test-guest): remove recent Podman artifact changes
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* fix(test-guest): canonicalize scp source paths
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* refactor(test-guest): provision artifacts with Ansible
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* feat(test-guest): populate missing caches on startup
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
---------
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
2026-07-29 23:41:29 +00:00
Simon Scatton
7873f611de
feat(flake): add Nix development shell ( #1592 )
...
* feat(build): add simple nix flake with formatter for nix code
* feat(flake): setup rust toolchain, able to build and run unit tests
* feat(flake): add support for arm linux and macos
* feat(toolchain): add rust-src and rust-analyzer to the toolchain
2026-05-28 21:06:30 -07:00