[deckhouse-cli] Re-land stronghold v1.18.6 on the debian builder image - #436
Merged
Conversation
Glitchy-Sheep
force-pushed
the
test/reland-stronghold-new-builder
branch
2 times, most recently
from
August 4, 2026 20:36
3a67d1f to
0b633ef
Compare
This reverts commit 399c8e5. Signed-off-by: Roman Berezkin <roman.berezkin@flant.com>
The golang-alt builder from #415 cannot work under trdl: non-root user and ALT userland. base-images v1.3.24 builders run as root, and the debian flavor keeps the existing apt/dpkg commands working. Command changes for the new image: - task is installed via go install: the image ships no curl, and the module checksum db replaces the manual sha256 pin - the libuv_a.a symlink workaround is dropped: debian 13 ships the static lib as libuv.a in the default linker path - zlib1g-dev + CGO_LDFLAGS=-lz: debian 13 builds libcrypto.a with zlib, so the static link needs -lz appended Signed-off-by: Roman Berezkin <roman.berezkin@flant.com>
Glitchy-Sheep
force-pushed
the
test/reland-stronghold-new-builder
branch
from
August 17, 2026 05:34
0b633ef to
595d39b
Compare
Glitchy-Sheep
changed the title
Glitchy-Sheep
marked this pull request as ready for review
August 17, 2026 05:41
ldmonster
approved these changes
Aug 18, 2026
4 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Brings back #415 (stronghold v1.18.6 + GOST Go toolchain), reverted in #433. The trdl release build now runs on
builder/golang-debian-1.26from base-images v1.3.24 instead ofbuilder/golang-alt.Why #415 broke the release
mkdir -p /resultas the image user;builder/golang-altruns as64535, so it failedtrdl.yamlare written for Debian (apt-get); the image is ALTWhat changed vs #415
Only
trdl.yaml. The rest is #415 as merged.container-factory@sha256:de392f69...=builder/golang-debian-1.26: root, Debian 13, same GOSTgo1.26.5asGO_IMAGEin CIzlib1g-dev+CGO_LDFLAGS=-lz: Debian 13 linkslibcrypto.awith zliblibuv_a.asymlink: Debian 13 installslibuv.awhere the linker looks for ittaskcomes fromgo install ...@v3.41.0: the image has no curl/wgetTests
Reproduce trdl release build(added in [deckhouse-cli] Revert "Bump stronghold to v1.18.6" and guard CI #433) is green: real trdl Dockerfile, real image digest, all 4 binaries in/resultd8 stronghold version= v1.18.6, kubectl and delivery-kit work