mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-20 06:00:06 +08:00
Florent BENOIT
c5a8c4d220
The libkrun and libkrunfw projects moved from the containers/ GitHub org to libkrun/. Update all clone URLs and version pins accordingly. libkrun v1.19.4 introduces krun_add_virtiofs4 with a permissions semantics parameter, enabling correct file ownership mapping on host-to-guest bind mounts — required for issue #2585. - libkrun: v1.17.4 → v1.19.4 (libkrun/libkrun) - libkrunfw: 463f717b → v5.6.1 (libkrun/libkrunfw) - Centralise LIBKRUN_REF in pins.env instead of hardcoding in each build script - Source pins.env in the macOS build script for consistency with the Linux build script - Remove the init/init make target step — since libkrun/libkrun@05c4eb7 the init blob moved into the init_blob crate and is built by cargo Ref: https://github.com/NVIDIA/OpenShell/issues/2585 Signed-off-by: Florent Benoit <fbenoit@redhat.com>
45 lines
2.6 KiB
Bash
45 lines
2.6 KiB
Bash
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
# Pinned dependency versions for the openshell-driver-vm runtime.
|
|
#
|
|
# This file is sourced by VM runtime packaging scripts. It centralises version
|
|
# pins and content-addressed digests so that builds are reproducible and
|
|
# auditable.
|
|
#
|
|
# Environment variables override these defaults — CI and local dev workflows
|
|
# can still set the runtime dependency versions below.
|
|
#
|
|
# To update a dependency:
|
|
# 1. Change the version/digest below.
|
|
# 2. Run the relevant build script to verify.
|
|
# 3. Commit pins.env alongside any script changes.
|
|
|
|
# ── Base Docker image (digest-pinned) ──────────────────────────────────
|
|
# Tag: nvcr.io/nvidia/base/ubuntu:noble-20251013
|
|
VM_BASE_IMAGE="${VM_BASE_IMAGE:-nvcr.io/nvidia/base/ubuntu@sha256:43fa5063e80fbbc533892af3ccca190868ce48db5a8928b19d7815c40436af8e}"
|
|
|
|
# ── Container images for rootfs pre-loading (digest-pinned) ────────────
|
|
# Tag: registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.1.0
|
|
AGENT_SANDBOX_IMAGE="${AGENT_SANDBOX_IMAGE:-registry.k8s.io/agent-sandbox/agent-sandbox-controller@sha256:ba71ea40ae0872791197badf2ab84f3f482df3902f1fce7ca9e076b1de9b57f6}"
|
|
# Tag: ghcr.io/nvidia/openshell-community/sandboxes/base:latest
|
|
COMMUNITY_SANDBOX_IMAGE="${COMMUNITY_SANDBOX_IMAGE:-ghcr.io/nvidia/openshell-community/sandboxes/base@sha256:d446c17105e7448e602238a8a5a4ddd0233c071082406522f81c31f8b1309525}"
|
|
|
|
# SERVER_IMAGE is intentionally NOT pinned here — it changes frequently
|
|
# during local development. Override via IMAGE_REPO_BASE and IMAGE_TAG
|
|
# environment variables (defaults: openshell/gateway:dev).
|
|
|
|
# ── umoci (guest OCI unpacker) ──────────────────────────────────────────
|
|
# Repo: https://github.com/opencontainers/umoci
|
|
UMOCI_VERSION="${UMOCI_VERSION:-v0.6.0}"
|
|
|
|
# ── libkrunfw upstream (commit-pinned) ─────────────────────────────────
|
|
# Repo: https://github.com/libkrun/libkrunfw
|
|
# Pinned: v5.6.1 (2026-09-16)
|
|
LIBKRUNFW_REF="${LIBKRUNFW_REF:-617938cf2ae9a3a0e5696d23a5d6252cd7a1ef4f}"
|
|
|
|
# ── libkrun upstream (commit-pinned) ──────────────────────────────────
|
|
# Repo: https://github.com/libkrun/libkrun
|
|
# Pinned: v1.19.4 (2026-09-16)
|
|
LIBKRUN_REF="${LIBKRUN_REF:-728df8125077d0db44265f6e997c72b81b65c015}"
|