skip to content

detached 198b1d9

ci: build the runner statically (G10)

commit: 198b1d96a2ff40182d5e68a8f6ee2803425aa969
author: brice · 10d ago · 2026-10-12 19:43 UTC
parent: ee276af
signature: GPG VerifiedCD88F9E564E0102646FB6077A1A07C7C7C3E349D · arch-gpg Verified for the committer email

1 file · +7 -0

M .forgejo/workflows/ci.yml +7 -0


@@ -38,6 +38,13 @@ jobs:
38	38		go mod tidy
39	39		git diff --exit-code -- go.mod go.sum
40	40		- run: go vet ./...
	41	+	- name: Static build
	42	+	# The runner binary is attached read-only to every sandbox, which has no
	43	+	# libc of ours: it must be a static executable (sandbox.CheckStatic
	44	+	# refuses anything else at start).
	45	+	run: \|
	46	+	CGO_ENABLED=0 go build -trimpath -o /tmp/ermite-runner .
	47	+	file /tmp/ermite-runner \| grep -q 'statically linked'
41	48		- name: Protobuf lint and drift
42	49		# buf and protoc-gen-go are pinned as `tool` directives in go.mod: the
43	50		# generated code is reproducible and must match the committed one.


@@ -38,6 +38,13 @@ jobs:
38		go mod tidy	38		go mod tidy
39		git diff --exit-code -- go.mod go.sum	39		git diff --exit-code -- go.mod go.sum
40		- run: go vet ./...	40		- run: go vet ./...
			41	+	- name: Static build
			42	+	# The runner binary is attached read-only to every sandbox, which has no
			43	+	# libc of ours: it must be a static executable (sandbox.CheckStatic
			44	+	# refuses anything else at start).
			45	+	run: \|
			46	+	CGO_ENABLED=0 go build -trimpath -o /tmp/ermite-runner .
			47	+	file /tmp/ermite-runner \| grep -q 'statically linked'
41		- name: Protobuf lint and drift	48		- name: Protobuf lint and drift
42		# buf and protoc-gen-go are pinned as `tool` directives in go.mod: the	49		# buf and protoc-gen-go are pinned as `tool` directives in go.mod: the
43		# generated code is reproducible and must match the committed one.	50		# generated code is reproducible and must match the committed one.