Skip to content

fix: publish Linux asset in 1.1.15 release - #26

Merged
254808127 merged 6 commits into
mainfrom
fix/linux-release-validation
Aug 20, 2026
Merged

fix: publish Linux asset in 1.1.15 release#26
254808127 merged 6 commits into
mainfrom
fix/linux-release-validation

Conversation

@254808127

Copy link
Copy Markdown
Collaborator

Summary

  • allow the expected musl loader in Linux release validation
  • continue rejecting glibc (ld-linux) dependencies
  • bump CLI and bootstrap pin to 1.1.15

The previous v1.1.14 release built the Linux binary but rejected it because the validation treated the musl interpreter as an error.

Validation

  • Lightmount Rust cargo fmt --all -- --check
  • cargo test --all-targets --locked (14 passed)
  • cargo clippy --all-targets --locked -- -D warnings

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 16e8c23350

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/release.yml Outdated
chmod 755 "$asset"
if readelf --program-headers --wide "$asset" | grep -F 'Requesting program interpreter'; then
echo 'Linux release binary is dynamically linked' >&2
if readelf --program-headers --wide "$asset" | grep -E 'Requesting program interpreter: .*/ld-linux[^]]*'; then

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Reject binaries that require the musl loader

When the produced ELF contains the /lib/ld-musl-x86_64.so.1 interpreter that prompted this change, this predicate now publishes a dynamically loaded binary rather than the advertised static Linux asset. The subsequent "./$asset" version check passes only because this job installs musl-tools, which provides that loader; on a typical glibc-only Linux installation the kernel fails before the CLI starts because the interpreter is absent. Keep rejecting any PT_INTERP entry or adjust the build flags so the artifact is genuinely static.

Useful? React with 👍 / 👎.

@254808127

254808127 commented Aug 20, 2026

Copy link
Copy Markdown
Collaborator Author

Addressed the P1 concern in commit b9489b5: restored rejection of every ELF PT_INTERP entry and added explicit musl static-link flags (+crt-static and -static). Host fmt/test/clippy pass; the tag release workflow remains the authoritative cross-build verification.

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Something went wrong. Try again later by commenting “@codex review”.

Unknown error
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@254808127

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Keep them coming!

Reviewed commit: 40e43b0e4e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@254808127

Copy link
Copy Markdown
Collaborator Author

The P1 concern is now addressed with a locally reproduced and CI-verified fix:

  • keep rejecting every ELF PT_INTERP entry
  • install musl-tools only for native C/assembly dependencies such as ring
  • do not override Rust's final linker or inject manual static flags
  • build with the self-contained x86_64-unknown-linux-musl target
  • execute the resulting binary in the PR linux-release job

Local static-pie build and browser-cli version passed. The Ubuntu 22.04 linux-release CI job also passed.

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. What shall we delve into next?

Reviewed commit: 976908d047

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@254808127
254808127 merged commit 952a5e5 into main Aug 20, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant