From 16d34322ef050b322331d1bcfe15b18e00e376ba Mon Sep 17 00:00:00 2001
From: okcleary <oliver.cleary@lumonus.com>
Date: Thu, 13 Aug 2026 09:47:40 +1000
Subject: [PATCH] Upgrade to sysbox 0.7.1

Fixes nestybox/sysbox#998, a deadlock in sysbox-fs's zombie reaper
that can occur when many Docker containers are started/stopped
concurrently inside a Sysbox container. The FUSE handler and the
reaper goroutine could each hold the other's lock indefinitely,
wedging the affected container and any other Sysbox container on
the same host. Fixed upstream via nestybox/sysbox-fs#119 and #121.

SHA256 checksums for the v0.7.1 .deb packages were downloaded from
https://downloads.nestybox.com/sysbox/releases/v0.7.1/ and verified
against the published release notes before being applied here.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .github/workflows/release.yaml | 4 ++--
 deploy/Dockerfile              | 2 +-
 scripts/sysbox_sha.sh          | 4 ++--
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 61b7069..2ff10f8 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -31,11 +31,11 @@ jobs:
         include:
           - os: ubuntu-22.04
             arch: linux/amd64
-            sha: eeff273671467b8fa351ab3d40709759462dc03d9f7b50a1b207b37982ce40a9
+            sha: 9d6d5484f980d0a17f86c492c1262015c2afb66280bdb97215b79fde6a0261c5
             arch-suffix: amd64
           - os: depot-ubuntu-22.04-arm
             arch: linux/arm64
-            sha: eae9c0e91ddd39bd1826d6a7a313a73d42a8449ef5113e9d6d118b559cb809ba
+            sha: 04ca894ae0b53f0fa54eaacc173ce40363c9a95ea5450f773716a84ef650a69b
             arch-suffix: arm64
     runs-on: ${{ matrix.os }}
     steps:
diff --git a/deploy/Dockerfile b/deploy/Dockerfile
index 56e6354..901f38b 100644
--- a/deploy/Dockerfile
+++ b/deploy/Dockerfile
@@ -6,7 +6,7 @@ ARG TARGETARCH
 # We don't hardcode it here because we have to be able to build both
 # amd and arm
 ARG SYSBOX_SHA
-ARG SYSBOX_VERSION="0.7.0"
+ARG SYSBOX_VERSION="0.7.1"
 ARG SYSBOX_DEB="sysbox-ce_$SYSBOX_VERSION-0.linux_$TARGETARCH.deb"
 
 # Copy configuration files to appropriate locations
diff --git a/scripts/sysbox_sha.sh b/scripts/sysbox_sha.sh
index a66dc7f..10217b8 100755
--- a/scripts/sysbox_sha.sh
+++ b/scripts/sysbox_sha.sh
@@ -3,10 +3,10 @@ set -euo pipefail
 
 case "${1:-linux/$(go env GOARCH)}" in
 	linux/amd64)
-		printf '%s\n' 'eeff273671467b8fa351ab3d40709759462dc03d9f7b50a1b207b37982ce40a9'
+		printf '%s\n' '9d6d5484f980d0a17f86c492c1262015c2afb66280bdb97215b79fde6a0261c5'
 		;;
 	linux/arm64)
-		printf '%s\n' 'eae9c0e91ddd39bd1826d6a7a313a73d42a8449ef5113e9d6d118b559cb809ba'
+		printf '%s\n' '04ca894ae0b53f0fa54eaacc173ce40363c9a95ea5450f773716a84ef650a69b'
 		;;
 	*)
 		echo "unsupported architecture: ${1:-}" >&2