Skip to content

release: fix vendor.tar.zst generation#402

Merged
cyphar merged 2 commits into
mainfrom
release-vendor-tarball
Jun 23, 2026
Merged

release: fix vendor.tar.zst generation#402
cyphar merged 2 commits into
mainfrom
release-vendor-tarball

Conversation

@cyphar

@cyphar cyphar commented Jun 23, 2026

Copy link
Copy Markdown
Owner

Our old pipeline-based compression setup for the vendor tarball would
result in a corrupted tar archive (as other commands would output
informaiton to stdout that would be captured and prepended to the tar
archive contents).

The simplest solution is to just two-phase it. We could build-in the
compression to the archive step, but arguably doing two-pass compression
is slightly better anyway.

Fixes #400
Fixes: 8b989b3 ("make: add signed release build script")
Signed-off-by: Aleksa Sarai cyphar@cyphar.com

@codecov

codecov Bot commented Jun 23, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Our old pipeline-based compression setup for the vendor tarball would
result in a corrupted tar archive (as other commands would output
informaiton to stdout that would be captured and prepended to the tar
archive contents).

The simplest solution is to just two-phase it. We could build-in the
compression to the archive step, but arguably doing two-pass compression
is slightly better anyway.

Fixes: 8b989b3 ("make: add signed release build script")
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
@cyphar cyphar force-pushed the release-vendor-tarball branch from 93b6142 to 7668258 Compare June 23, 2026 01:30
We've just fixed a bug in this, it seems prudent to at least validate
that they are sane tar archives.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
@cyphar cyphar force-pushed the release-vendor-tarball branch from 20dbccd to 71f2d1e Compare June 23, 2026 03:27
@cyphar cyphar merged commit c0b2ae8 into main Jun 23, 2026
140 checks passed
@cyphar cyphar deleted the release-vendor-tarball branch June 23, 2026 03:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

vendor archive not recognized as valid tarball

1 participant