mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
kevinveenbirkenbachandClaude Opus 5
66be8f6a0a
A codename carries no ordering, so 'bookworm' and 'trixie' are two opaque strings and no updater can tell that one supersedes the other. A pin that names its Debian release that way is frozen on that release for as long as it stands, and the freeze is invisible because the tag keeps resolving. Numeric tags are comparable and stay inside the freshness pipeline, so the rule is worth holding for the whole repository rather than fixing case by case. The check reads two shapes, because a codename reaches the tree in two spellings. A 'name:tag' reference is recognised by the absence of a space after the colon, which is what separates 'debian:bookworm' from the YAML 'image: python' and covers Dockerfile FROM lines and heredocs without a second parser. A 'version:' value is read as a key, because '3.11-bookworm' carries no colon at all. False positives are kept out by two independent gates: a word-boundary prefilter, so 'residual' and 'inside' are not read as 'sid', and a split of the tag on '-', '.' and '_' that requires a whole component to be a codename. That is what lets 'cache buster', '.stretched-link', 'fa-bullseye' and a tags list containing 'stretch' through. Every codename occurrence in the repository was checked against the matcher by hand, and the check was negative-controlled in both shapes, including an untracked file. Four references had to move for the rule to hold. meta/distros.yml takes 'debian:13' rather than '13.6': at depth 1 the updater can raise it across a major, while depth 2 pins it inside the 13.x line forever. The whole 'make install' path was run in a debian:13 container to back that: all twenty-four Depends and Recommends resolve on trixie, the docker repository bootstrap derives the right suite and installs docker-ce-cli, and the package builds and installs. The workspace DiD probe moves to 'debian:13-slim'. An earlier version of this change carried a suppression claiming the probe had to follow the suite the apt proxy mirrors. That was wrong twice over: it cited a function that has nothing to do with the probe, and the coupling does not exist, because the cache frontend rewrites by path prefix and the suite never enters a routing decision. Replaying the probe verbatim against debian:13-slim fetches all three trixie suites through the bookworm-configured proxies, so the suppression is gone rather than reworded. The rule ships with an escape hatch and no uses of it. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
66 lines
2.4 KiB
YAML
66 lines
2.4 KiB
YAML
---
|
|
# Distribution SPOT.
|
|
#
|
|
# Every distribution Infinito.Nexus builds, tests and deploys on is declared
|
|
# here exactly once. Consumers read it through utils/distros.py; nothing may
|
|
# re-spell a distro list or an image reference locally.
|
|
#
|
|
# Read by a stdlib block reader on the bare bootstrap python, before PyYAML
|
|
# exists. Only plain block mappings and block lists of string scalars are
|
|
# supported here. An unquoted scalar must start with a letter, an underscore
|
|
# or a slash and must not be a boolean or null word; everything else MUST be
|
|
# double-quoted.
|
|
#
|
|
# images: reference templates rendered by utils/distros.py.
|
|
# {slug} comes from this file
|
|
# {owner} {repository} {tag} come from default.env, which stays the SPOT
|
|
# for registry owner and tags
|
|
#
|
|
# distros: the id used as INFINITO_DISTRO, carrying
|
|
# slug path segment inside the image reference
|
|
# family ansible_facts['os_family'] the distribution reports,
|
|
# consumed by the meta/packages.yml registry
|
|
# dev_runtime_image upstream base image the development-environment test
|
|
# matrix boots the distribution from. Not one of ours,
|
|
# so it carries its own registry and tag.
|
|
# galaxy_platform platform name Ansible Galaxy knows the distribution by,
|
|
# used to build the canonical galaxy_info.platforms list
|
|
# every role's meta/main.yml must carry. The versions
|
|
# qualifier attached to every such entry is
|
|
# galaxy_platform_versions below.
|
|
|
|
images:
|
|
pkgmgr: "ghcr.io/{owner}/pkgmgr-{slug}:{tag}"
|
|
pkgmgr_virgin: "ghcr.io/{owner}/pkgmgr-{slug}-virgin:{tag}"
|
|
environment: "ghcr.io/{owner}/{repository}/{slug}:{tag}"
|
|
|
|
galaxy_platform_versions:
|
|
- all
|
|
|
|
distros:
|
|
arch:
|
|
slug: arch
|
|
family: Archlinux
|
|
dev_runtime_image: manjarolinux/base
|
|
galaxy_platform: ArchLinux
|
|
debian:
|
|
slug: debian
|
|
family: Debian
|
|
dev_runtime_image: debian:13
|
|
galaxy_platform: Debian
|
|
ubuntu:
|
|
slug: ubuntu
|
|
family: Debian
|
|
dev_runtime_image: ubuntu:latest
|
|
galaxy_platform: Ubuntu
|
|
fedora:
|
|
slug: fedora
|
|
family: RedHat
|
|
dev_runtime_image: fedora:latest
|
|
galaxy_platform: Fedora
|
|
centos:
|
|
slug: centos
|
|
family: RedHat
|
|
dev_runtime_image: quay.io/centos/centos:latest
|
|
galaxy_platform: EL
|