Skip to content

fix: workaround for selinux mprotect on composefs #5086

fix: workaround for selinux mprotect on composefs

fix: workaround for selinux mprotect on composefs #5086

name: Stable Images
on:
pull_request:
branches:
- main
- testing
paths-ignore:
- "**.md"
- ".github/workflows/moderator.yml"
- ".github/workflows/scorecard.yml"
schedule:
- cron: "0 1 * * TUE" # Every Tuesday at 1:15 AM
workflow_call:
workflow_dispatch:
inputs:
previous_build:
description: 'Set to 0 to manually clear rechunking plan'
type: choice
default: '1'
options:
- '0'
- '1'
permissions:
contents: read
packages: write
id-token: write
attestations: write
artifact-metadata: write
jobs:
build-image-stable:
name: Build Stable Images
uses: ./.github/workflows/reusable-build.yml
secrets: inherit
strategy:
fail-fast: false
matrix:
brand_name: ["aurora"]
with:
#kernel_pin: 6.14.11-300.fc42.x86_64 ## This is where kernels get pinned.
brand_name: ${{ matrix.brand_name }}
stream_name: stable
previous_build: ${{ inputs.previous_build }}
# Enable ARM when it makes sense
# architecture: '["aarch64","x86_64"]'
architecture: '["x86_64"]'
publish: ${{ github.event_name != 'pull_request' }}
generate-release:
name: Generate Release
needs: [build-image-stable]
permissions:
contents: write
secrets: inherit
uses: ./.github/workflows/generate-release.yml
with:
stream_name: '["stable"]'