From 8ad81a9c6b9f9a57301e09784b37f126ea751a64 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Tue, 7 Apr 2026 11:22:18 +0000 Subject: [PATCH 1/2] fix(ci): use privileged Docker for debos loop devices on GitHub runners debos with --disable-fakemachine requires /dev/loop-control. The default container namespace does not expose it, causing repeated failures to set up loop devices. --privileged matches typical debos CI usage. Co-authored-by: RicciP --- .github/workflows/os-build.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/os-build.yml b/.github/workflows/os-build.yml index d3a974c..73d3c94 100644 --- a/.github/workflows/os-build.yml +++ b/.github/workflows/os-build.yml @@ -23,9 +23,13 @@ jobs: - name: Build pai-engine .deb run: bash os/packaging/build-deb.sh + # --privileged: debos with --disable-fakemachine needs loop devices (/dev/loop-control). + # Default docker run does not expose them; GitHub-hosted runners otherwise fail with + # "could not open /dev/loop-control". - name: Build image with debos run: | docker run --rm \ + --privileged \ -v "${{ github.workspace }}:/build" -w /build \ --cap-add SYS_ADMIN \ godebos/debos \ From 765c01ec4211d00ea6519a7e6b85558eb82aebea Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Tue, 7 Apr 2026 11:29:57 +0000 Subject: [PATCH 2/2] fix(ci): bump fastrand in lockfile (yanked 2.4.0), drop redundant cap-add cargo-deny failed on PR CI: fastrand 2.4.0 was yanked; update to 2.4.1 via cargo update -p fastrand. Remove --cap-add SYS_ADMIN under --privileged (CodeRabbit nit). Co-authored-by: RicciP --- .github/workflows/os-build.yml | 1 - engine/Cargo.lock | 4 ++-- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/os-build.yml b/.github/workflows/os-build.yml index 73d3c94..61d43f2 100644 --- a/.github/workflows/os-build.yml +++ b/.github/workflows/os-build.yml @@ -31,7 +31,6 @@ jobs: docker run --rm \ --privileged \ -v "${{ github.workspace }}:/build" -w /build \ - --cap-add SYS_ADMIN \ godebos/debos \ --disable-fakemachine -t machine:radxa-rock5c os/image.yaml diff --git a/engine/Cargo.lock b/engine/Cargo.lock index 98132e5..0c9173d 100644 --- a/engine/Cargo.lock +++ b/engine/Cargo.lock @@ -319,9 +319,9 @@ dependencies = [ [[package]] name = "fastrand" -version = "2.4.0" +version = "2.4.1" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "a043dc74da1e37d6afe657061213aa6f425f855399a11d3463c6ecccc4dfda1f" +checksum = "9f1f227452a390804cdb637b74a86990f2a7d7ba4b7d5693aac9b4dd6defd8d6" [[package]] name = "foldhash"