trending/OpenShell
1
0
Fork 0
mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-10-19 05:50:41 +08:00
Code Issues Packages Projects Releases Wiki Activity
630 Commits 487 Branches 151 Tags
v0.0.38
Commit Graph
141 Commits
Author SHA1 Message Date
Drew Newberry 529be37fd4 chore(installer): promote package install script (#1261) 2026-05-08 17:04:15 -07:00
Drew Newberry daa2a362d5 fix(packaging): enable mTLS for local packages (#1271) 2026-05-08 13:02:12 -07:00
jtoelke2 31f03456a9 ci(os-132): remove obsolete shadow workflows (#1273) 
Signed-off-by: Jonas Toelke <jtoelke@nvidia.com>
 2026-05-08 14:45:22 -05:00
jtoelke2 3cfc915bfe ci(os-132): remove stale remote buildx mode (#1267) 
Signed-off-by: Jonas Toelke <jtoelke@nvidia.com>
 2026-05-08 12:20:42 -05:00
Drew Newberry 645b880513 feat(install): add rpm dev installer support (#1262) 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
 2026-05-08 09:45:30 -05:00
Drew Newberry 52097f2d4c ci(release): run package release canaries (#1256) 2026-05-07 21:57:55 -07:00
Drew Newberry 62619eefc7 fix(docker): use supervisor image entrypoint path (#1259) 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
 2026-05-07 17:39:44 -07:00
Taylor Mutch 909e9034aa ci(helm): add helm lint workflow and reorganize chart values under ci/ (#1223) 
* test(helm): Reorganize values under /ci, update mise helm:lint task loop

WIP

* ci: Add a helm lint job to validate helm linting passes on changes
 2026-05-07 10:36:27 -07:00
Drew Newberry 70a0f6c547 refactor(cli): remove gateway lifecycle management (#1221) 2026-05-07 09:54:13 -07:00
Drew Newberry 49e59b148e fix(ci): pin tag release reusable workflows (#1235) 2026-05-07 09:00:41 -07:00
Drew Newberry 5949b2fa34 feat(installer): support macOS dev installs (#1183) 2026-05-06 15:50:07 -07:00
dependabot[bot] 689835c1ba chore(deps): bump Swatinem/rust-cache from 2.8.2 to 2.9.1 (#1197) 
Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from 2.8.2 to 2.9.1.
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](https://github.com/swatinem/rust-cache/compare/779680da715d629ac1d338a641029a2f4372abb5...c19371144df3bb44fab255c43d04cbc2ab54d1c4)

---
updated-dependencies:
- dependency-name: Swatinem/rust-cache
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-06 15:07:51 -07:00
dependabot[bot] dd0dcffe7f chore(deps): bump mozilla-actions/sccache-action from 0.0.9 to 0.0.10 (#1199) 
Bumps [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) from 0.0.9 to 0.0.10.
- [Release notes](https://github.com/mozilla-actions/sccache-action/releases)
- [Commits](https://github.com/mozilla-actions/sccache-action/compare/7d986dd989559c6ecdb630a3fd2557667be217ad...9e7fa8a12102821edf02ca5dbea1acd0f89a2696)

---
updated-dependencies:
- dependency-name: mozilla-actions/sccache-action
  dependency-version: 0.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-06 15:07:13 -07:00
dependabot[bot] 1c37ba97b0 chore(deps): bump actions/github-script from 7 to 9 (#1198) 
Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 9.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v9)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-06 15:06:59 -07:00
dependabot[bot] 292fad8395 chore(deps): bump docker/login-action from 3 to 4 (#1200) 
Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-06 13:52:17 -07:00
dependabot[bot] 035a5a1286 chore(deps): bump actions/upload-artifact from 4 to 7 (#1201) 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-06 13:51:36 -07:00
Taylor Mutch 8fd574780c ci(helm): add OCI chart release workflow (#1196) 
* ci(helm): add OCI chart release workflow

Publishes the Helm chart to ghcr.io/nvidia/openshell/helm-chart via helm push on every tag (versioned + :latest) and main push (:0.0.0-dev overwrite + :0.0.0-dev.<sha> per-commit pin). Renames Chart.yaml name to helm-chart to match the target OCI path.

* ci(helm): use full sha in dev pinned chart version

The container images pushed by docker-build.yml are tagged with the
full $GITHUB_SHA, not a 7-char prefix. Match the chart's pinned
version (0.0.0-dev.<full-sha>) so the chart tag and the image tag
the chart resolves to are identical.

* docs(readme): add helm chart install instructions

Document the OCI chart at ghcr.io/nvidia/openshell/helm-chart with
examples for tagged, floating dev, and SHA-pinned dev installs, and
flag the Kubernetes deployment path as experimental.

* docs(helm): split chart details into chart README

Move the dev tag conventions and configuration pointers into a new
README under deploy/helm/openshell/ and shorten the top-level README
section to the install command (no --version, defaults to latest
tagged semver) plus a link to the chart README.
 2026-05-06 13:50:37 -07:00
Drew Newberry da26ed3212 fix(release): stabilize dev build packaging (#1213) 2026-05-06 13:00:44 -07:00
Drew Newberry 23ad858a4f test(e2e): add podman rust suite (#1185) 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
 2026-05-06 12:25:49 -07:00
John T. Myers 8ace316f8d fix(ci): allowlist dependabot for DCO (#1202) 
Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>
 2026-05-06 09:33:43 -07:00
jtoelke2 152d059400 ci(vm): remove remaining EKS release assumptions (#1195) 
Signed-off-by: Jonas Toelke <jtoelke@nvidia.com>
 2026-05-06 11:27:02 -05:00
Florencio CanoandCursor 9291eaf2d4 chore(ci): enable Dependabot for GitHub Actions with 48h cooldown (#1188) 
Signed-off-by: Florencio Cano Gabarda <fcanogab@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-06 09:16:14 -07:00
Drew Newberry 4d388d2677 ci(vm): cleanup vm build infra (#1186) 2026-05-06 08:58:02 -07:00
Drew Newberry 6ce988dce0 fix(ci): harden packit rpm source prep (#1182) 
* fix(ci): harden packit rpm source prep

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

* fix(ci): restrict packit version tag matching

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

* fix(ci): collect local packit rpm artifacts

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

---------

Signed-off-by: Drew Newberry <anewberry@nvidia.com>
 2026-05-06 08:55:25 -05:00
Adam Miller d8b84773ca feat(rpm): add RPM packaging with Packit/COPR and GHA release publishing (#1126) 2026-05-05 15:42:00 -07:00
Taylor Mutch 5b29189b1e chore: Simplify codeowners rules (#1178) 2026-05-05 14:42:13 -07:00
Drew Newberry e4b4e923ae test(e2e): run suites against docker gateway (#1153) 2026-05-05 13:28:08 -07:00
jtoelke2 8bfd3e1914 ci(os-49): fix release jobs on shared runners (#1172) 2026-05-05 10:46:14 -05:00
jtoelke2 e73a4eae53 ci(os-49): draft release runner cutover (#1164) 2026-05-05 10:18:29 -05:00
Drew Newberry 9efb3464e2 chore: add new core maintainers to OpenShell (#1167) 2026-05-05 07:29:32 -07:00
jtoelke2 9c53d1294a ci(os-49): remove obsolete shadow PR workflows (#1161) 2026-05-04 22:14:54 -05:00
John T. Myers 043bde279a feat(providers): add profile-backed policy composition (#1037) 
Foundation for providers v2. Add provider profiles and provider profile composition with user policies.
 2026-05-04 18:34:33 -07:00
jtoelke2 4803889cc7 ci: cut over non-release workflows to shared runners (#1131) 
Signed-off-by: Jonas Toelke <jtoelke@nvidia.com>
 2026-05-04 14:34:16 -05:00
Drew Newberry 2e0afeabe1 feat(vm): derive guest rootfs from sandbox images (#957) 2026-05-03 23:23:30 -07:00
John T. Myers 55f0e37127 chore(ci): label non-maintainer issues for triage (#1120) 
Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>
 2026-05-01 11:08:56 -07:00
John T. Myers 8e28209587 chore(ci): label maintainer issues by repo permission (#1116) 
Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>
 2026-05-01 09:09:30 -07:00
Drew Newberry 9751872b2d feat(release): add Debian package publishing (#1069) 2026-05-01 07:51:45 -07:00
John T. Myers b39af3da85 chore(ci): label mon maintainer issues for triage (#1102) 
Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>
 2026-05-01 07:18:49 -07:00
jtoelke2 dd98eb25ef ci: drop duplicate shadow e2e workflow (#1104) 
Signed-off-by: Jonas Toelke <jtoelke@nvidia.com>
 2026-04-30 22:31:03 -05:00
Drew Newberry 51351e4745 chore(ci): update checkout action to v6 (#1086) 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
 2026-04-30 13:22:47 -07:00
jtoelke2 5c77b06124 ci: add OS-49 phase 5 shadow workflows (#1075) 
Signed-off-by: Jonas Toelke <jtoelke@nvidia.com>
 2026-04-30 12:18:08 -05:00
jtoelke2 78f0b6fff7 ci(rust): keep sccache stats non-blocking 2026-04-29 21:20:43 -05:00
jtoelke2 a656ed7b91 ci(docker): use prebuilt Rust binaries by default (#1027) 
* ci(docker): use prebuilt Rust binaries by default

Flip Docker image builds to consume staged native Rust artifacts, remove in-Docker Rust build stages, and publish per-arch images with a manifest merge.

Add local staging support for prebuilt gateway and sandbox binaries so development image builds continue to work without CI artifacts.

Signed-off-by: Jonas Toelke <jtoelke@nvidia.com>

* ci(docker): address prebuilt build review feedback

* ci(rust): allow existing vfio complexity

* ci(rust): pin toolchain to 1.95

---------

Signed-off-by: Jonas Toelke <jtoelke@nvidia.com>
 2026-04-29 19:23:02 -05:00
jtoelke2 3e69c36f84 feat(ci): add shadow-rust-native-build workflow for OS-49 Phase 4 (PR 4a) (#973) 
Builds openshell-gateway and openshell-sandbox natively per-arch on the
nv-gha-runners shared CPU pool with a GHA-backed sccache, and uploads
the resulting binaries as artifacts shaped for Dockerfile.images'
BINARY_SOURCE=prebuilt path (added in #945).

Dispatch manually 4-5 times after merge to collect cold + warm numbers
and compare against the Rust portion of docker-build.yml's ARC baseline.
PR 4c will wire these artifacts into the real pipeline once numbers land.

Refs OS-128.

Signed-off-by: Jonas Toelke <jtoelke@nvidia.com>
 2026-04-28 15:32:55 -05:00
Piotr Mlocek c49ae09d5b fix(ci): grant actions:read and contents:read to E2E label helper (#995) 2026-04-28 10:16:27 -07:00
Piotr Mlocek b264cb83d8 chore(mise): add lockfile with multi-platform support and version pin (#946) 2026-04-27 16:07:15 -07:00
John T. Myers c890f0ee9e chore(ci): relax agent diagnostic gate (#1001) 
Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>
 2026-04-27 15:56:58 -07:00
Piotr Mlocek c4286648bb ci(e2e): replace label dispatcher with comment-only helper (#990) 2026-04-27 11:11:52 -07:00
Piotr Mlocek e703b597cd ci(e2e): add label dispatcher and contributor CI docs (#975) 2026-04-27 09:49:01 -07:00
jtoelke2 55b0266ed5 fix(ci): make buildkitd-config opt-in for setup-buildx (#970) 
#966 hard-coded `buildkitd-config: /etc/buildkit/buildkitd.toml` inside
the `driver: local` branch of the setup-buildx composite action. The only
caller using that driver is shadow-docker-build.yml, which runs inside
the ghcr.io/nvidia/openshell/ci:latest container — so the host-side
buildkitd.toml was invisible to docker/setup-buildx-action and every
matrix job failed at "Set up buildx".

Revert the hard-coded path and expose it as an opt-in input on the
action (empty default, passed through to both the remote and local
branches). Wire shadow-docker-build.yml to bind-mount /etc/buildkit
into the ci container and pass the path explicitly, so the action can
read the file from inside the container. Remote-driver callers are
unaffected (empty input is a no-op).

Signed-off-by: Jonas Toelke <jtoelke@nvidia.com>
 2026-04-24 16:35:14 -05:00