logan/node-26
1
0
Fork 0
Code Issues 14 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Pin node images to the checked-out source tree — fix v1 code / :latest image skew (#19) #31

Merged
logan merged 3 commits from fix/19-image-tag-skew into main 2026-10-04 18:26:01 -04:00
Conversation 1 Commits 3 Files Changed 11
+338 -27
3 Commits
Author SHA1 Message Date
logan 085139e171 Merge branch 'main' into fix/19-image-tag-skew
CI / lint (push) Successful in 9s
Details
CI / test-op25 (push) Successful in 20s
Details
CI / lint (pull_request) Successful in 11s
Details
CI / test-op25 (pull_request) Successful in 23s
Details
CI / test (push) Successful in 56s
Details
CI / test (pull_request) Successful in 54s
Details
2026-10-04 18:22:43 -04:00
Logan CusanoandClaude Opus 5.5 e7b4aef142 Fix updater tests for image pinning; harden helper load (node-26#19)
CI / lint (push) Successful in 9s
Details
CI / lint (pull_request) Successful in 9s
Details
CI / test-op25 (push) Successful in 17s
Details
CI / test-op25 (pull_request) Successful in 18s
Details
CI / test (push) Successful in 56s
Details
CI / test (pull_request) Successful in 57s
Details 
- test_host_updater: stub git/docker now model cat-file/show/rev-parse
  --verify and compose config/image inspect. The two update-path tests
  were failing on Linux CI (skipped locally on macOS, no flock). Adds
  tests for pull-before-checkout + .env pins, a missing pinned image
  leaving the node unchanged, and a pre-pinning target still updating.
- drb-update.sh: load image-tags.sh via a variable + eval and confirm the
  functions exist; `source <(git show ...)` "succeeded" with nothing
  defined when git show failed, wedging every later update.
- install.sh: skip pinning (warn) when the checked-out ref predates
  scripts/image-tags.sh instead of dying on the missing file.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-04 18:17:22 -04:00
Logan CusanoandClaude Opus 5.5 6c8289f3f3 Pin node images to the checked-out source tree (node-26#19)
CI / lint (push) Successful in 10s
Details
CI / test-op25 (push) Successful in 16s
Details
CI / test (push) Failing after 49s
Details
CI / lint (pull_request) Successful in 8s
Details
CI / test-op25 (pull_request) Successful in 18s
Details
CI / test (pull_request) Failing after 46s
Details 
Nodes checked out v1 code but pulled :latest/:stable images built from main.
Each image is now tagged src-<git tree hash of its build directory>: CI adds
that tag in every build-*.yml, and scripts/image-tags.sh computes the same
value on the node and writes it into .env as DRB_TAG_*, which
docker-compose.yml uses (falls back to :latest/:stable for local dev).
Tree hashes stay exact even though each image only rebuilds when its own
directory changes.

- install.sh pins after checkout and fails loudly if a pinned image is
  missing (compose pull only warns for services with a build: section).
- drb-update.sh pulls the target commit's pinned images BEFORE checkout,
  using the target's own compose file, so a missing image changes nothing
  (uvicorn --reload would otherwise run new code on old images). It then
  checks out, writes the pins, recreates, and removes superseded src- tags.
- New "Release images" workflow (v* tags + manual dispatch) builds any
  src- image a release ref is missing; it skips ones already published.

The live v1 tag is not moved.

Refs #19

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-04 18:09:29 -04:00