build(ci): add s390x native build, test, and release pipeline

- Add s390x.yml: native PR/push gate running unit tests on self-hosted
  [self-hosted, Linux, s390x] runners; catches big-endian issues that
  x86_64 CI cannot detect
- Add build-s390x-native job in publish.yml: native build + unit tests
  on self-hosted s390x runner before packaging; shipped binary is the
  same one that was tested
- Restore cross.yml to pristine upstream state by removing
  s390x-unknown-linux-gnu from the cross-compilation matrix
- Fix publish.yml: replace upstream-only release-builder-linux runner
  with ubuntu-24.04 for build-linux-cross job
- Wire build-s390x-native into all downstream publish jobs so s390x
  artifacts are included in checksums and GitHub releases
- Bypass install-protoc.sh (no s390x binary) and mold (no s390x
  binary) in all s390x jobs; use apt protobuf-compiler instead

Author: Binh Nguyen

.github/workflows/publish.yml

@@ -136,7 +136,7 @@ jobs:
 
   build-linux-cross:
     name: Build Vector for ${{ matrix.target }}
-    runs-on: release-builder-linux
+    runs-on: ubuntu-24.04
     timeout-minutes: 60
     needs: generate-publish-metadata
     env:
@@ -165,7 +165,7 @@ jobs:
           protoc: true
           libsasl2: true
       - name: Install cross-compilation tools
-        run: sudo apt-get install -y binutils-arm-linux-gnueabihf binutils-aarch64-linux-gnu cmark-gfm
+        run: sudo apt-get install -y binutils-arm-linux-gnueabihf binutils-aarch64-linux-gnu binutils-s390x-linux-gnu cmark-gfm
       - name: Install rpm
         if: endsWith(matrix.target, '-linux-gnu') || matrix.target == 'armv7-unknown-linux-gnueabihf'
         run: sudo apt-get install -y rpm
@@ -177,6 +177,45 @@ jobs:
           name: vector-${{ env.VECTOR_VERSION }}-${{ matrix.target }}
           path: target/artifacts/vector*
 
+  build-s390x-native:
+    name: Build and test Vector for s390x-unknown-linux-gnu (native)
+    runs-on: [self-hosted, Linux, s390x]
+    timeout-minutes: 120
+    needs: generate-publish-metadata
+    env:
+      VECTOR_VERSION: ${{ needs.generate-publish-metadata.outputs.vector_version }}
+      VECTOR_BUILD_DESC: ${{ needs.generate-publish-metadata.outputs.vector_build_desc }}
+      CHANNEL: ${{ needs.generate-publish-metadata.outputs.vector_release_channel }}
+    steps:
+      - name: Checkout Vector
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          ref: ${{ inputs.git_ref }}
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            cmark-gfm \
+            rpm \
+            libsasl2-dev \
+            protobuf-compiler
+      - uses: ./.github/actions/setup
+        with:
+          rust: true
+          cargo-nextest: true
+          cargo-deb: true
+          protoc: false
+          vdev: false
+      - name: Run unit tests
+        run: make test FEATURES="default"
+      - name: Build Vector
+        run: make NATIVE=true package-s390x-unknown-linux-gnu-all
+      - name: Stage package artifacts for publish
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: vector-${{ env.VECTOR_VERSION }}-s390x-unknown-linux-gnu
+          path: target/artifacts/vector*
+
   build-apple-darwin-packages:
     name: Build Vector for ${{ matrix.architecture }}-apple-darwin (.tar.gz)
     runs-on: ${{ matrix.runner }}
@@ -279,6 +318,7 @@ jobs:
       - generate-publish-metadata
       - build-linux-gnu-native
       - build-linux-cross
+      - build-s390x-native
     env:
       VECTOR_VERSION: ${{ needs.generate-publish-metadata.outputs.vector_version }}
       DD_PKG_VERSION: "latest"
@@ -335,6 +375,7 @@ jobs:
       - generate-publish-metadata
       - build-linux-gnu-native
       - build-linux-cross
+      - build-s390x-native
     env:
       VECTOR_VERSION: ${{ needs.generate-publish-metadata.outputs.vector_version }}
       DD_PKG_VERSION: "latest"
@@ -430,6 +471,7 @@ jobs:
       - generate-publish-metadata
       - build-linux-gnu-native
       - build-linux-cross
+      - build-s390x-native
       - deb-verify
     env:
       VECTOR_VERSION: ${{ needs.generate-publish-metadata.outputs.vector_version }}
@@ -489,6 +531,7 @@ jobs:
       - generate-publish-metadata
       - build-linux-gnu-native
       - build-linux-cross
+      - build-s390x-native
       - build-apple-darwin-packages
       - build-x86_64-pc-windows-msvc-packages
       - deb-verify
@@ -531,6 +574,7 @@ jobs:
       - generate-publish-metadata
       - build-linux-gnu-native
       - build-linux-cross
+      - build-s390x-native
       - build-apple-darwin-packages
       - build-x86_64-pc-windows-msvc-packages
       - deb-verify
@@ -566,6 +610,7 @@ jobs:
       - generate-publish-metadata
       - build-linux-gnu-native
       - build-linux-cross
+      - build-s390x-native
       - build-apple-darwin-packages
       - build-x86_64-pc-windows-msvc-packages
     env:

.github/workflows/s390x.yml

@@ -0,0 +1,42 @@
+name: S390x CI
+
+# Native unit test gate for s390x (big-endian). Catches endianness bugs that
+# x86_64-based CI cannot detect. Runs on every PR and master push.
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+
+permissions:
+  contents: read
+
+env:
+  CI: true
+  DISABLE_MOLD: true # mold does not ship s390x binaries
+
+jobs:
+  test-s390x:
+    name: Unit tests (s390x native)
+    runs-on: [self-hosted, Linux, s390x]
+    timeout-minutes: 60
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y --no-install-recommends \
+            libsasl2-dev \
+            protobuf-compiler
+
+      - uses: ./.github/actions/setup
+        with:
+          rust: true
+          cargo-nextest: true
+          protoc: false  # upstream script has no s390x binary; use apt protobuf-compiler above
+          vdev: false    # no s390x vdev binary; not needed for testing
+
+      - name: Run unit tests
+        run: make test FEATURES="default"

Cargo.toml

@@ -580,6 +580,7 @@ target-armv7-unknown-linux-gnueabihf =  ["target-unix"]
 target-armv7-unknown-linux-musleabihf = ["target-base"]
 target-arm-unknown-linux-gnueabi =      ["target-unix"]
 target-arm-unknown-linux-musleabi =     ["target-base"]
+target-s390x-unknown-linux-gnu =        ["target-unix"]
 target-x86_64-unknown-linux-gnu =       ["target-unix", "vendored"]
 target-x86_64-unknown-linux-musl =      ["target-unix"]
 # Apple targets opt into `gssapi` (dynamic linkage to system libsasl2 + Apple's

Cross.toml

@@ -35,3 +35,6 @@ image = "vector-cross-env:arm-unknown-linux-gnueabi"
 
 [target.arm-unknown-linux-musleabi]
 image = "vector-cross-env:arm-unknown-linux-musleabi"
+
+[target.s390x-unknown-linux-gnu]
+image = "vector-cross-env:s390x-unknown-linux-gnu"

Makefile

@@ -124,6 +124,10 @@ build-arm-unknown-linux-gnueabi: target/arm-unknown-linux-gnueabi/release/vector
 build-arm-unknown-linux-musleabi: target/arm-unknown-linux-musleabi/release/vector ## Build a release binary for the arm-unknown-linux-musleabi triple.
 	@echo "Output to ${<}"
 
+.PHONY: build-s390x-unknown-linux-gnu
+build-s390x-unknown-linux-gnu: target/s390x-unknown-linux-gnu/release/vector ## Build a release binary for the s390x-unknown-linux-gnu triple.
+	@echo "Output to ${<}"
+
 .PHONY: check-build-tools
 check-build-tools:
 ifeq ($(shell command -v cargo >/dev/null || echo not-found), not-found)
@@ -148,6 +152,7 @@ CROSS_DIGEST_armv7-unknown-linux-gnueabihf  := sha256:73294ebb06e077e49bbbecfe8f
 CROSS_DIGEST_armv7-unknown-linux-musleabihf := sha256:49bdc9a4cf2f1bcb385389c85be8f43c4399fa6d6fe22883702ef13eb921e443
 CROSS_DIGEST_arm-unknown-linux-gnueabi      := sha256:0c70b0e54724bd599dff00a2888f8ea176a5b6c85af47aad9ad25296f63e2967
 CROSS_DIGEST_arm-unknown-linux-musleabi     := sha256:0ca8f4afcc29fb5964aa63e482452e8869311a610c5868f22ded400c4e483328
+CROSS_DIGEST_s390x-unknown-linux-gnu       := sha256:7e1a5bac3f275881425146faf87b78b79ae60e49bcc86f198572501d41299265
 
 # GNU Make < 3.82 pattern matching priority depends on the definition order
 # so cross-image-% must be defined before cross-%

Makefile.packaging

@@ -61,6 +61,9 @@ package-arm-unknown-linux-gnueabi-all: package-arm-unknown-linux-gnueabi package
 .PHONY: package-arm-unknown-linux-musleabi-all
 package-arm-unknown-linux-musleabi-all: package-arm-unknown-linux-musleabi # .tar.gz
 
+.PHONY: package-s390x-unknown-linux-gnu-all
+package-s390x-unknown-linux-gnu-all: package-s390x-unknown-linux-gnu package-deb-s390x package-rpm-s390x # .tar.gz, .deb, .rpm
+
 .PHONY: package-x86_64-unknown-linux-gnu
 package-x86_64-unknown-linux-gnu: target/artifacts/vector-${VERSION}-x86_64-unknown-linux-gnu.tar.gz ## Build an archive suitable for the `x86_64-unknown-linux-gnu` triple.
 	@echo "Output to ${<}."
@@ -93,6 +96,10 @@ package-arm-unknown-linux-gnueabi: target/artifacts/vector-${VERSION}-arm-unknow
 package-arm-unknown-linux-musleabi: target/artifacts/vector-${VERSION}-arm-unknown-linux-musleabi.tar.gz ## Build an archive suitable for the `arm-unknown-linux-musleabi` triple.
 	@echo "Output to ${<}."
 
+.PHONY: package-s390x-unknown-linux-gnu
+package-s390x-unknown-linux-gnu: target/artifacts/vector-${VERSION}-s390x-unknown-linux-gnu.tar.gz ## Build an archive suitable for the `s390x-unknown-linux-gnu` triple.
+	@echo "Output to ${<}."
+
 # debs
 
 .PHONY: package-deb-x86_64-unknown-linux-gnu
@@ -115,6 +122,10 @@ package-deb-armv7-gnu: package-armv7-unknown-linux-gnueabihf ## Build the armv7-
 package-deb-arm-gnu: package-arm-unknown-linux-gnueabi ## Build the arm-unknown-linux-gnueabi deb package
 	TARGET=arm-unknown-linux-gnueabi $(VDEV) package deb
 
+.PHONY: package-deb-s390x
+package-deb-s390x: package-s390x-unknown-linux-gnu ## Build the s390x-unknown-linux-gnu deb package
+	TARGET=s390x-unknown-linux-gnu $(VDEV) package deb
+
 # rpms
 
 .PHONY: package-rpm-x86_64-unknown-linux-gnu
@@ -133,4 +144,8 @@ package-rpm-aarch64: package-aarch64-unknown-linux-gnu ## Build the aarch64 rpm
 package-rpm-armv7hl-gnu: package-armv7-unknown-linux-gnueabihf ## Build the armv7hl-unknown-linux-gnueabihf rpm package
 	TARGET=armv7-unknown-linux-gnueabihf ARCH=armv7hl $(VDEV) package rpm
 
+.PHONY: package-rpm-s390x
+package-rpm-s390x: package-s390x-unknown-linux-gnu ## Build the s390x-unknown-linux-gnu rpm package
+	TARGET=s390x-unknown-linux-gnu $(VDEV) package rpm
+
 

scripts/build-docker.sh

@@ -22,10 +22,10 @@ IFS=, read -ra REPO_LIST <<< "$REPOS"
 
 IFS=, read -ra REQUESTED_PLATFORMS <<< "$PLATFORM"
 declare -A SUPPORTED_PLATFORMS=(
-  [debian]="linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64/v8"
+  [debian]="linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64/v8,linux/s390x"
   [alpine]="linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64/v8"
   [distroless-static]="linux/amd64,linux/arm/v7,linux/arm64/v8"
-  [distroless-libc]="linux/amd64,linux/arm/v7,linux/arm64/v8"
+  [distroless-libc]="linux/amd64,linux/arm/v7,linux/arm64/v8,linux/s390x"
 )
 
 #