Skip to content

Acceptance jobs fetch the sources an evicted cache no longer holds #216

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
DevomB merged 1 commit into from
Oct 5, 2026
Merged

Acceptance jobs fetch the sources an evicted cache no longer holds #216

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 7 additions & 4 deletions .github/actions/prepare/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ inputs:
description: Also let the runner start VMs (KVM, and virt-fw-vars for the variable stores).
default: 'false'
sources:
description: The upstream sources, cached by sources.lock. 'fetch' also fetches what the cache lacks and saves the set; 'restore' only restores it.
description: The upstream sources, cached by sources.lock. Either fetches what the cache lacks; 'fetch' also saves the set.
default: ''
runs:
using: composite
Expand Down Expand Up @@ -48,16 +48,19 @@ runs:
key: sources-v3-${{ hashFiles('sources.lock') }}
# A changed lock restores the previous set and fetches only what is
# new; every file is still hashed against the lock.
restore-keys: ${{ inputs.sources == 'fetch' && 'sources-' || '' }}
restore-keys: sources-

- if: inputs.sources == 'fetch' && steps.sources.outputs.cache-hit != 'true'
# A cache evicted since the build job is fetched again, not taken as gone.
- if: inputs.sources != '' && steps.sources.outputs.cache-hit != 'true'
shell: bash
env:
MODE: ${{ inputs.sources }}
run: |
make sources
./tools/prune-sources.sh
# The signatures too, so the set this job saves is the one CI's
# signature gate reads from disk; this pass is not the verdict.
./tools/verify-signatures.sh > /dev/null 2>&1 || true
[[ "$MODE" != fetch ]] || ./tools/verify-signatures.sh > /dev/null 2>&1 || true

# Saved as soon as the set is verified, not when the job ends: a job that
# fails later would otherwise fetch the lock's new files again next time.
Expand Down
Loading