From nobody Sat May 30 11:18:26 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) client-ip=192.237.175.120; envelope-from=xen-devel-bounces@lists.xenproject.org; helo=lists.xenproject.org; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; dmarc=pass(p=reject dis=none) header.from=citrix.com ARC-Seal: i=1; a=rsa-sha256; t=1778275782; cv=none; d=zohomail.com; s=zohoarc; b=Eo+7ruhrNni7blUXDerorbAsQ2eDzAsc263yGJRh60+NMao77ZxE4XZcrdY3D3UmRrBvJMstfVaFznQtraIkSR/mSjCYrOlXkoXI/JYj+zwf/oAJz1eocTpzUu+wQHyp9qVoNqOahBLWDLEyVqnKALxOCTJDN1inoIrqgxucIxQ= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1778275782; h=Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=sVmq4etdovYoJDRMA/BMmOvUPNieQX2pyEDBr8hljoM=; b=gJCPT141l/pZ3NNlCqHPyMCQxWZgv5ye3vf2WnPB8Su15hdEtSVOMVOGOk+m4P524bewfiQIHWW0xydJXChiZ11KiHWj81uxwlNDz0vsLHr1A1xWIIasTnGdetc/t+qqLLQ/QuK934YEmieNCgH9ulTc3bfN9YbOLFDPur6vaGI= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; dmarc=pass header.from= (p=reject dis=none) Return-Path: Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) by mx.zohomail.com with SMTPS id 1778275782834439.99390721916654; Fri, 8 May 2026 14:29:42 -0700 (PDT) Received: from list by lists.xenproject.org with outflank-mailman.1304249.1577325 (Exim 4.92) (envelope-from ) id 1wLSky-0004lW-E9; Fri, 08 May 2026 21:29:12 +0000 Received: by outflank-mailman (output) from mailman id 1304249.1577325; Fri, 08 May 2026 21:29:12 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wLSky-0004lN-Ba; Fri, 08 May 2026 21:29:12 +0000 Received: by outflank-mailman (input) for mailman id 1304249; Fri, 08 May 2026 21:29:11 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wLSkx-0004lB-Gp for xen-devel@lists.xenproject.org; Fri, 08 May 2026 21:29:11 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wLSkw-00AvHv-Qk for xen-devel@lists.xenproject.org; Fri, 08 May 2026 23:29:10 +0200 Received: from [10.42.69.2] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 69fe5568-e002-0a2a0a5209dd-0a2a45028108-16 for ; Fri, 08 May 2026 23:29:10 +0200 Received: from [209.85.221.51] (helo=mail-wr1-f51.google.com) by tlsNG-720697.mxtls.expurgate.net with ESMTPS (eXpurgate 4.56.1) (envelope-from ) id 69fe55a6-af86-0a2a45020019-d155dd33c191-3 for ; Fri, 08 May 2026 23:29:10 +0200 Received: by mail-wr1-f51.google.com with SMTP id ffacd0b85a97d-43eb05b1875so1482956f8f.3 for ; Fri, 08 May 2026 14:29:10 -0700 (PDT) Received: from localhost.localdomain (host-78-146-242-105.as13285.net. [78.146.242.105]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-45491ca383asm7548608f8f.28.2026.05.08.14.29.08 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 14:29:09 -0700 (PDT) X-Outflank-Mailman: Message body and most headers restored to incoming version X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=google header.d=citrix.com header.i="@citrix.com" header.h="Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-Id:Date:Subject:Cc:To:From" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=citrix.com; s=google; t=1778275749; x=1778880549; darn=lists.xenproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=sVmq4etdovYoJDRMA/BMmOvUPNieQX2pyEDBr8hljoM=; b=TDSltpKa2KHPfHE1NkLympPxuOBRljN/VqLXBfUT861kaBBT1x+9IkKL5ngNDvgHdB SXP6bl9rzOlcN6nqQNHSQvu07hs2XP50ypeOF2AS+NLOyL04F24TDgB1icQ7brBwLgKA VJcJrzm6U4LsNyLqktiqJf3mpojSh000nAesk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778275749; x=1778880549; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=sVmq4etdovYoJDRMA/BMmOvUPNieQX2pyEDBr8hljoM=; b=UXm3GfBH6wxWkymUMxq7tMB8FjYVNT4355GqUgKZVD8LWfyHPkTvJzsJlNCCbRZ1BT mWBqomaMJRP2u1rd0CAZh/6Mqf7/QJjnHwak87G6a8YUq7bynMDmkYKE7dUqZrb5Lyov 5sXAleuD07i2PL7sUc4Pm6clip80aml7CtANwtjkf+dMeoFfvQ8tLAwwibdfVgSsp3yl mmwBIUOhRIyMYeAHD4b2Yfy2ZwSUlwShutBjiqx27RjbMakipxvY8Q2vzM0//0i2dTI/ bcm1e2gQlybTMHVOJDl9D+gG7Eq0IWtwunBFyEGaBP1DzAcGmUKDzniUdZLZtguN0W5u tsAA== X-Gm-Message-State: AOJu0YyVpnLh+TiqBPbBGOEA6B6MSbMdc+hCEwUMcimqF2LqFdJepDnR gvwx6tR6k3cJBRtugJXTXaLplhD627EGHtU5szC3OeZvtGxLc8FZzCkbGaJRUYpCAWUixQh5R7G unJDe7vc= X-Gm-Gg: Acq92OHvvL0TbUwhGjzXEN6HbT51YvXNxEwnl2XLK+OISRm+6HaOecMyVcw1CJXOd2V lSkW8CaPxk3qw33odjwjXFayYLIxGj2SdTUvlV+ElnCrcj9tEjsO356QtKThVBdDqA1IqC4Os0y DPnfE+faKalm+afsw8ptYd+k8IaYswXYP6OWysAtxzepTM3UYa4PlhxINqZbGxzUbfkzRH4AZv0 NeaNa2wxvEKAPYWHeqJyJOWsiXXfGLu9Dko+PNNgnv5+4Apeaew4xCsUekdljEyMamF/HqCANmA 1kcTSMD13Aj7GJ4KderYTpRJuePQZZn3YdMJjgM8KWbxyDxecwJwhi2IgrEFK4CYKOJe+0pFmP7 dqlAu/yyb6JBTXhEre9+QsJ+BoBWuLSITrb0RORjmMa0GUq5852GZgmVZ7jfqW9Xrxwe10WUN7/ Oum3clFXLw18U/w3+2hpgH0+nk47sKt10jvbF/EUcUtwoIvt5iWoiGTaAKJ4vPtiWgMwCTYfOYA k8W X-Received: by 2002:a5d:5d85:0:b0:454:86d:b4d2 with SMTP id ffacd0b85a97d-45689baa9b3mr100523f8f.8.1778275749343; Fri, 08 May 2026 14:29:09 -0700 (PDT) From: Andrew Cooper To: Xen-devel Cc: Andrew Cooper , Anthony PERARD , Stefano Stabellini , Michal Orzel , Doug Goldstein Subject: [PATCH 1/5] CI: Adjust test needs[] to ensure binaries/ is non-root Date: Fri, 8 May 2026 22:29:03 +0100 Message-Id: <20260508212907.1643761-2-andrew.cooper3@citrix.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20260508212907.1643761-1-andrew.cooper3@citrix.com> References: <20260508212907.1643761-1-andrew.cooper3@citrix.com> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-purgate-ID: tlsNG-720697/1778275750-AB563161-4DC6A5B8/0/0 X-purgate-type: clean X-purgate-size: 2648 X-ZohoMail-DKIM: pass (identity @citrix.com) X-ZM-MESSAGEID: 1778275783608158500 Content-Type: text/plain; charset="utf-8" The binaries/ directory is a composition from the artefacts, and also used = as a working directory for most of the tests. If the very first artefact is f= rom a root container, then the test must also be a root container to use it as a working directory. For arm64, the existing linux-arm64 artefact suffices. For arm32, pull in = the microcode-x86 artefact as it's the smallest available. This bodge can be removed when all build containers have become non-root. For the qemu-xtf-dom0less-arm64-*-xen-version jobs, use *arm64-test-needs ahead of alpine-3.18-gcc-* (as it's a root container), and to deduplicate the *-export dependency. This will allow us to change containers to being non-root one at a time, rather than all in one go. No functional change. Signed-off-by: Andrew Cooper Reviewed-by: Michal Orzel --- CC: Anthony PERARD CC: Stefano Stabellini CC: Michal Orzel CC: Doug Goldstein We should also stop using binaries/ as a working directory for the tests, b= ut that gets very complicated very quickly and I don't have time to do it at t= his juncture. --- automation/gitlab-ci/test.yaml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/automation/gitlab-ci/test.yaml b/automation/gitlab-ci/test.yaml index 8770c523e228..517af1732437 100644 --- a/automation/gitlab-ci/test.yaml +++ b/automation/gitlab-ci/test.yaml @@ -15,6 +15,12 @@ - qemu-system-aarch64-6.0.0-arm64-export =20 .arm32-test-needs: &arm32-test-needs + # Bodge to ensure binaries/ is non-root. Can be any artefact which comes + # from a non-root container, and microcode-x86 is the smallest. Remove = when + # all build containers have become non-root. + - project: $ARTIFACTS_REPO + job: microcode-x86 + ref: $ARTIFACTS_BRANCH - qemu-system-aarch64-6.0.0-arm32-export =20 .x86-64-test-needs: &x86-64-test-needs @@ -569,16 +575,16 @@ qemu-xtf-dom0less-arm64-gcc-hyp-xen-version: script: - ./automation/scripts/qemu-xtf.sh arm64 mmu64le hyp-xen-version 2>&1 = | tee ${LOGFILE} needs: + - *arm64-test-needs - alpine-3.18-gcc-arm64 - - qemu-system-aarch64-6.0.0-arm64-export =20 qemu-xtf-dom0less-arm64-gcc-debug-hyp-xen-version: extends: .qemu-arm64 script: - ./automation/scripts/qemu-xtf.sh arm64 mmu64le hyp-xen-version 2>&1 = | tee ${LOGFILE} needs: + - *arm64-test-needs - alpine-3.18-gcc-debug-arm64 - - qemu-system-aarch64-6.0.0-arm64-export =20 qemu-smoke-dom0-arm32-gcc: extends: .qemu-arm32 --=20 2.39.5 From nobody Sat May 30 11:18:26 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) client-ip=192.237.175.120; envelope-from=xen-devel-bounces@lists.xenproject.org; helo=lists.xenproject.org; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; dmarc=pass(p=reject dis=none) header.from=citrix.com ARC-Seal: i=1; a=rsa-sha256; t=1778275780; cv=none; d=zohomail.com; s=zohoarc; b=j+8cHo8PvsLQ/03Hil1xnZioRr8pLRefVFXH/UTfp8WtpFBvLRJ9TXS2beulTV7m1g7vLLpSG+qeiwHLMhEjrcCkWf6y/YTvkre6JmkIPY1D+ne8RP/PGX81ga+4E8auj1AGxTABdHHIpVM7QmPb+5Q3zR/s0y99MqPSfm02QJI= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1778275780; h=Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=nOnPZ71Y6QNC+1FR8zvXZiIznnQQDmHT9JY/KOQdFvo=; b=IejljRsGJb8Io08F9lhIvHGE2+bAJc3EQlbtKgNkFlNQ7JpvdtUWABx3EZj21JfAsGzXK54TJN9iqL8P/NXXS3oXUfu4Km2ZFcn3sYsMVCfonOh4BV3Jv0dwAYkLMM2/bXoA6t6TkevgKoMgR0WVJPqaK7QKqf/onHgLluakrdI= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; dmarc=pass header.from= (p=reject dis=none) Return-Path: Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) by mx.zohomail.com with SMTPS id 1778275780010660.3859415335369; Fri, 8 May 2026 14:29:40 -0700 (PDT) Received: from list by lists.xenproject.org with outflank-mailman.1304251.1577344 (Exim 4.92) (envelope-from ) id 1wLSl0-0005C8-1b; Fri, 08 May 2026 21:29:14 +0000 Received: by outflank-mailman (output) from mailman id 1304251.1577344; Fri, 08 May 2026 21:29:14 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wLSkz-0005C1-Ts; Fri, 08 May 2026 21:29:13 +0000 Received: by outflank-mailman (input) for mailman id 1304251; Fri, 08 May 2026 21:29:12 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) id 1wLSky-0004lM-8S for xen-devel@lists.xenproject.org; Fri, 08 May 2026 21:29:12 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wLSkx-00E1Ak-Lx for xen-devel@lists.xenproject.org; Fri, 08 May 2026 23:29:11 +0200 Received: from [10.42.69.7] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 69fe5538-bab6-0a2a0a5309dd-0a2a4507b2e6-32 for ; Fri, 08 May 2026 23:29:11 +0200 Received: from [209.85.221.54] (helo=mail-wr1-f54.google.com) by tlsNG-ef75cf.mxtls.expurgate.net with ESMTPS (eXpurgate 4.56.1) (envelope-from ) id 69fe55a7-229c-0a2a45070019-d155dd36acc1-3 for ; Fri, 08 May 2026 23:29:11 +0200 Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-44e1860558fso1643891f8f.0 for ; Fri, 08 May 2026 14:29:11 -0700 (PDT) Received: from localhost.localdomain (host-78-146-242-105.as13285.net. [78.146.242.105]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-45491ca383asm7548608f8f.28.2026.05.08.14.29.09 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 14:29:09 -0700 (PDT) X-Outflank-Mailman: Message body and most headers restored to incoming version X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=google header.d=citrix.com header.i="@citrix.com" header.h="Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-Id:Date:Subject:Cc:To:From" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=citrix.com; s=google; t=1778275751; x=1778880551; darn=lists.xenproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=nOnPZ71Y6QNC+1FR8zvXZiIznnQQDmHT9JY/KOQdFvo=; b=X7BqLKEy4gXZAv3KT3EqIDF3wIHyYSK95tl53WVDgMMWPfPY17jOxMsl+ZwwFtytkv JjNxa/Jpg4BFzPmfA2B4wqOCMEZoUVNIZQrpORdTHCxFey+hRjAzHYnrxueam/cZpGK9 ZvANm2BIxV7Rmy18wAYiLSFkgimPOfxrBrDj8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778275751; x=1778880551; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=nOnPZ71Y6QNC+1FR8zvXZiIznnQQDmHT9JY/KOQdFvo=; b=RdVOCPpmKH2cG7hjrkctJV3A4ZmIu2zQOUujhDOaiAVruviX0GL4BUbfm9yBc4JV6R CcSyK/qLVJHnXFW4U3rFhB9RBeighRAOTAGzmRpo3FdrgpnpYUgzYP+yZR/1QUZJqWPr hvBL20C7PBjraFjfKUWWrBkWwwNabUFMYxcyW1BRJakv5ObiAO1pLaMg0ByTiURG1+a7 uFzdkqiTbEYfs2P9OZzjTx8DlDesG1tGDt0PV86LPAgwsWdkwLN4EltYxDyrje3eTBk1 ScIpWq7k8g89L5Rs6o7zyN1Y+FLGYrmn78u33TjzypKrnrD4RSkdRFsQjy+qI/4Q591L fs3Q== X-Gm-Message-State: AOJu0YyjKTIP8f+jbkReqS2k75KkBMYs4Dh/IQoejZbyvODgc2Mh0MHC YWCibyXHh4RTQb8JdBIFND2vqkIl18W7dBMupWLYZLBKbqV0WBAn8eiFGcN2H8QeGTOmnvOoLGu is6GAJFw= X-Gm-Gg: Acq92OHoaps9N/wvCAlEelm4YHzzc4tFTjK1oOMMZVEVw313i7kNfjEJuhm8+oJt/qn AowirBr9Rm/jLKnIah/K4xFnt6ueoAdgtIUJFVb7vZeuBCCNX0XGzEnJsh4JVU0LRwT17LW5a0r eW+KSpSURtUhFQFcLbNfCIVHjy9+CqKQBtw/7vB4nN0xe4+kQy8BnCOrPMizUlULT8bOniEDlvA C9ltmPimuy420PgAbBWc7ICAVlFF2ApByV3wAObHH4CdCbHmZ8RDdb4k3BrfF9TITikuV7FQx6C +4oxgk/zGbbYy5vugi+7/XpK7T7tEmeUSefY3gRfMdOZh53YMOAFKMzk3W04DboUWdPLl7kCRBI dWEgQAmHfMvM9PCOUFl/rVYjUtj0nTw45l74fUpYEEobsx70lUmoZzviNfXLpHTzPmNhBORkTCC r7kA7PtRz+vksHDnG+utJA0QgH1c7vgmEjE0iHt/7r3bpKJ0fU+uZDj6JoEDuNt6EgoBiqTJJK4 amc X-Received: by 2002:a05:6000:4027:b0:455:7c9f:a49e with SMTP id ffacd0b85a97d-4557c9fa4c8mr1759641f8f.25.1778275750617; Fri, 08 May 2026 14:29:10 -0700 (PDT) From: Andrew Cooper To: Xen-devel Cc: Andrew Cooper , Anthony PERARD , Stefano Stabellini , Michal Orzel , Doug Goldstein Subject: [PATCH 2/5] CI: Refresh the Debian 12 arm32 cross compile container Date: Fri, 8 May 2026 22:29:04 +0100 Message-Id: <20260508212907.1643761-3-andrew.cooper3@citrix.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20260508212907.1643761-1-andrew.cooper3@citrix.com> References: <20260508212907.1643761-1-andrew.cooper3@citrix.com> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-purgate-ID: tlsNG-ef75cf/1778275751-23F7EC48-A60DC4E8/10/63158204843 X-purgate-type: spam X-purgate-size: 8770 X-ZohoMail-DKIM: pass (identity @citrix.com) X-ZM-MESSAGEID: 1778275782326154100 Content-Type: text/plain; charset="utf-8" From: Javi Merino Rework the container to user heredocs for readability, derive from bookworm-slim and use apt-get --no-install-recommends to keep the size down. Convert it to being a non-root container. Add checkpolicy as FLASK is an available build option for arm32 under Randconfig testing. Rename the CI jobs to debian-12-arm32-* to follow the naming scheme of all = the other CI jobs. No functional change. Signed-off-by: Javi Merino Signed-off-by: Andrew Cooper Reviewed-by: Michal Orzel --- CC: Anthony PERARD CC: Stefano Stabellini CC: Michal Orzel CC: Doug Goldstein --- .../build/debian/12-arm64v8-arm32.dockerfile | 32 +++++++++++++++++++ .../bookworm-arm64v8-arm32-gcc.dockerfile | 24 -------------- automation/gitlab-ci/build.yaml | 24 +++++++------- automation/gitlab-ci/test.yaml | 14 ++++---- automation/scripts/containerize | 2 +- 5 files changed, 52 insertions(+), 44 deletions(-) create mode 100644 automation/build/debian/12-arm64v8-arm32.dockerfile delete mode 100644 automation/build/debian/bookworm-arm64v8-arm32-gcc.dock= erfile diff --git a/automation/build/debian/12-arm64v8-arm32.dockerfile b/automati= on/build/debian/12-arm64v8-arm32.dockerfile new file mode 100644 index 000000000000..a4d70f1111ed --- /dev/null +++ b/automation/build/debian/12-arm64v8-arm32.dockerfile @@ -0,0 +1,32 @@ +# syntax=3Ddocker/dockerfile:1 +FROM --platform=3Dlinux/arm64/v8 debian:bookworm-slim +LABEL maintainer.name=3D"The Xen Project" +LABEL maintainer.email=3D"xen-devel@lists.xenproject.org" + +ENV DEBIAN_FRONTEND=3Dnoninteractive +ENV CROSS_COMPILE=3D/usr/bin/arm-linux-gnueabihf- + +RUN <&1 | tee ${LOGFI= LE} needs: - *arm32-test-needs - - debian-bookworm-gcc-arm32 + - debian-12-arm32-gcc =20 qemu-smoke-dom0less-arm32-gcc-debug: extends: .qemu-arm32 @@ -608,7 +608,7 @@ qemu-smoke-dom0less-arm32-gcc-debug: - ./automation/scripts/qemu-smoke-dom0less-arm32.sh 2>&1 | tee ${LOGFI= LE} needs: - *arm32-test-needs - - debian-bookworm-gcc-arm32-debug + - debian-12-arm32-gcc-debug =20 qemu-smoke-dom0less-arm32-gcc-debug-staticmem: extends: .qemu-arm32 @@ -616,7 +616,7 @@ qemu-smoke-dom0less-arm32-gcc-debug-staticmem: - ./automation/scripts/qemu-smoke-dom0less-arm32.sh static-mem 2>&1 | = tee ${LOGFILE} needs: - *arm32-test-needs - - debian-bookworm-gcc-arm32-debug-staticmem + - debian-12-arm32-gcc-debug-staticmem =20 qemu-smoke-dom0less-arm32-gcc-debug-gzip: extends: .qemu-arm32 @@ -624,7 +624,7 @@ qemu-smoke-dom0less-arm32-gcc-debug-gzip: - ./automation/scripts/qemu-smoke-dom0less-arm32.sh gzip 2>&1 | tee ${= LOGFILE} needs: - *arm32-test-needs - - debian-bookworm-gcc-arm32-debug + - debian-12-arm32-gcc-debug =20 qemu-smoke-dom0less-arm32-gcc-without-dom0: extends: .qemu-arm32 @@ -632,7 +632,7 @@ qemu-smoke-dom0less-arm32-gcc-without-dom0: - ./automation/scripts/qemu-smoke-dom0less-arm32.sh without-dom0 2>&1 = | tee ${LOGFILE} needs: - *arm32-test-needs - - debian-bookworm-gcc-arm32 + - debian-12-arm32-gcc =20 qemu-smoke-dom0less-arm32-gcc-debug-without-dom0: extends: .qemu-arm32 @@ -640,7 +640,7 @@ qemu-smoke-dom0less-arm32-gcc-debug-without-dom0: - ./automation/scripts/qemu-smoke-dom0less-arm32.sh without-dom0 2>&1 = | tee ${LOGFILE} needs: - *arm32-test-needs - - debian-bookworm-gcc-arm32-debug + - debian-12-arm32-gcc-debug =20 qemu-smoke-dom0less-arm32-gcc-debug-earlyprintk: extends: .qemu-arm32 @@ -648,7 +648,7 @@ qemu-smoke-dom0less-arm32-gcc-debug-earlyprintk: - ./automation/scripts/qemu-smoke-dom0less-arm32.sh earlyprintk 2>&1 |= tee ${LOGFILE} needs: - *arm32-test-needs - - debian-bookworm-gcc-arm32-debug-earlyprintk + - debian-12-arm32-gcc-debug-earlyprintk =20 qemu-alpine-x86_64-gcc: extends: .qemu-x86-64 diff --git a/automation/scripts/containerize b/automation/scripts/container= ize index ad3e2372703f..ef3b97b65578 100755 --- a/automation/scripts/containerize +++ b/automation/scripts/containerize @@ -38,7 +38,7 @@ case "_${CONTAINER}" in _bookworm|_bookworm-x86_64) CONTAINER=3D"${BASE}/debian:12-x86_64" ;; _trixie-x86_64|_) CONTAINER=3D"${BASE}/debian:13-x86_64" ;; _bookworm-i386|_bookworm-x86_32) CONTAINER=3D"${BASE}/debian:12-x86_32= " ;; - _bookworm-arm64v8-arm32-gcc) CONTAINER=3D"${BASE}/debian:bookworm-arm6= 4v8-arm32-gcc" ;; + _bookworm-arm64v8-arm32) CONTAINER=3D"${BASE}/debian:12-arm64v8-arm32"= ;; _bookworm-arm64v8) CONTAINER=3D"${BASE}/debian:bookworm-arm64v8" ;; _bookworm-cppcheck) CONTAINER=3D"${BASE}/debian:12-arm64v8-cppcheck" ;; _opensuse-leap|_leap) CONTAINER=3D"${BASE}/opensuse:leap-15.6-x86_64" = ;; --=20 2.39.5 From nobody Sat May 30 11:18:26 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) client-ip=192.237.175.120; envelope-from=xen-devel-bounces@lists.xenproject.org; helo=lists.xenproject.org; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; dmarc=pass(p=reject dis=none) header.from=citrix.com ARC-Seal: i=1; a=rsa-sha256; t=1778275786; cv=none; d=zohomail.com; s=zohoarc; b=mPD6I35YOUK3j5br0kWo9GM1Efe8otrniY/E56FavGp2aCh3NF+NhTzEshXUxQe1D/+DhDB3IvPkzy3zgUA7M0icFyHf2ctl7JM2sjO670pSkY1u7bir4SEpevnhQV5/WA9BQIDgFedrQ9hCCocGoIc4ORS1vr+8QSreGbMQ28Q= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1778275786; h=Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=UxdUfwcXb8ISQulfHsZ5+IBQxfYeU+5dzOWpCcoWqBo=; b=jr610490HpAfoMYgzewZhRlqfZ/Me8WAxbUF+0lheT7Co+SpznmWbXzaIK1We+CX3vSBkpqf7MiqgoOFlmWknZdlOS5yUDo6owPh46JCijciL7PHY2H0+va82NVORg2b6Ls5i/D+AgIu7sVPECrrt8W2DZ+0GYVcOKIRKW9/XTI= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of lists.xenproject.org designates 192.237.175.120 as permitted sender) smtp.mailfrom=xen-devel-bounces@lists.xenproject.org; dmarc=pass header.from= (p=reject dis=none) Return-Path: Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) by mx.zohomail.com with SMTPS id 1778275786463834.8108588222733; Fri, 8 May 2026 14:29:46 -0700 (PDT) Received: from list by lists.xenproject.org with outflank-mailman.1304252.1577353 (Exim 4.92) (envelope-from ) id 1wLSl1-0005Q0-8n; Fri, 08 May 2026 21:29:15 +0000 Received: by outflank-mailman (output) from mailman id 1304252.1577353; Fri, 08 May 2026 21:29:15 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wLSl1-0005Pm-5i; Fri, 08 May 2026 21:29:15 +0000 Received: by outflank-mailman (input) for mailman id 1304252; Fri, 08 May 2026 21:29:13 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) id 1wLSkz-0004wH-4R for xen-devel@lists.xenproject.org; Fri, 08 May 2026 21:29:13 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wLSky-008Ead-GQ for xen-devel@lists.xenproject.org; Fri, 08 May 2026 23:29:12 +0200 Received: from [10.42.69.1] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 69fe559a-2eae-0a2a0a5409dd-0a2a450196e8-8 for ; Fri, 08 May 2026 23:29:12 +0200 Received: from [209.85.221.52] (helo=mail-wr1-f52.google.com) by tlsNG-d62444.mxtls.expurgate.net with ESMTPS (eXpurgate 4.56.1) (envelope-from ) id 69fe55a8-c1f2-0a2a45010019-d155dd34ed8c-3 for ; Fri, 08 May 2026 23:29:12 +0200 Received: by mail-wr1-f52.google.com with SMTP id ffacd0b85a97d-44b330c5cc6so1746613f8f.1 for ; Fri, 08 May 2026 14:29:12 -0700 (PDT) Received: from localhost.localdomain (host-78-146-242-105.as13285.net. [78.146.242.105]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-45491ca383asm7548608f8f.28.2026.05.08.14.29.10 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 14:29:10 -0700 (PDT) X-Outflank-Mailman: Message body and most headers restored to incoming version X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=google header.d=citrix.com header.i="@citrix.com" header.h="Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-Id:Date:Subject:Cc:To:From" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=citrix.com; s=google; t=1778275752; x=1778880552; darn=lists.xenproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=UxdUfwcXb8ISQulfHsZ5+IBQxfYeU+5dzOWpCcoWqBo=; b=svfHOJtyRIt6foUhLLrmGzGMUWf7nLYydc6CJd3M2mBAlpVLSejt+xuCPekxhUhbfU sIbtHpmuxzn2TnnlTCpd84YXziOptC9Ip5oz3ZQUC0y3Wtmv+m3D921clGi6GNtwH28K bTkx3/nvreo7cqenRc5ISN/Q/2Z/l+e3a45AY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778275752; x=1778880552; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=UxdUfwcXb8ISQulfHsZ5+IBQxfYeU+5dzOWpCcoWqBo=; b=RX4nrYuz05udJdGFfWbVBYKIfKWY5GTxMFCD6U/2x12YA4vTt8aLrCBavy1zC1xVpy 4TOaUBCTMWutTXT4a7yM8zQAsCbmHgsDfK2ZITmGOMm5w5lz0n+wmYCvQauL2AuGqQbi Tv0PKS56KI9UJJNSqt/CLoWsNq+lVPNW830LNAqyxL4UWmCq/nQVZuFEtplJlFsQ8+JU ybBkt4rW6zh5F19kWNsO7hVtKFgkv67iQosH++kLjrPccZVxnWba0nw5GjmlVZCQhIua J1erBXgDG+ne3JNoCJmcbDURM7W/VkG6zKLZZQCYi4YGkhcnmj91QCC+JSv2B05pX/2A 3x8Q== X-Gm-Message-State: AOJu0YxqDW8B3NgMoEFU8SV6KlJ8JGxBh3L8t38sor26NiyFwuw1bFw7 5qburdkioqsESKvb177z2NwYJLx3wU0dqsMSdl1KST5X144SaP+I8EpakYh/NhGBsEo1klQJYbU KYmua/mY= X-Gm-Gg: Acq92OHYFnHkhjLCC16vyUBVUyphuNPwyxGvwSQpwwUDDSi6T9J+5Zc2O1ITwily+n2 ItdWZ4QwGnWcTMQ3A07zRTswrxejqLznRouU4DXSAVArDWNFfIsnLgx7/S0FqGyQVYZBk5lhIFr 15Q78vXMI9pA1+5F8pQRUHZrfgEvZNvKlcKcMGOlLfVXQTH9JLkSBZWxg3zH6TCdn14UIIF0vBd 4BP7PDddxvKxlx2AmSCRJozP9MNGe118+//eoyFT4fsNwnLY17HrNnnRJMi0310zLHA7Oc8CTMl vYIbaezD7MInqbsz4B3NeM98WAkUBqh840avtsfxNZbFMtIXB4EpbhikQv9Cl/pkuy1XVqVGW6W L7bsyGse1XwSqgaxOOtsorzT0/HcMAXszfznGXiB7VtJnMSB+Jw2OKALCT/BXi23wLbkTu7zlMD hZ/7NKER3+G4u+kDmp9ZOLJbzapAz5rT/+o8myyq2xhOcKpvSCWxRB6QVJSk1tdFDKrnhlW5+nf bX0 X-Received: by 2002:a5d:5683:0:b0:452:a5c3:3e4a with SMTP id ffacd0b85a97d-452a5c33e5amr11336261f8f.2.1778275751316; Fri, 08 May 2026 14:29:11 -0700 (PDT) From: Andrew Cooper To: Xen-devel Cc: Andrew Cooper , Anthony PERARD , Stefano Stabellini , Michal Orzel , Doug Goldstein Subject: [PATCH 3/5] CI: Refresh the Debian 12 arm64 container Date: Fri, 8 May 2026 22:29:05 +0100 Message-Id: <20260508212907.1643761-4-andrew.cooper3@citrix.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20260508212907.1643761-1-andrew.cooper3@citrix.com> References: <20260508212907.1643761-1-andrew.cooper3@citrix.com> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-purgate-ID: tlsNG-d62444/1778275752-B7754FF4-8CED085D/10/63158204843 X-purgate-type: spam X-purgate-size: 7184 X-ZohoMail-DKIM: pass (identity @citrix.com) X-ZM-MESSAGEID: 1778275787701158500 Content-Type: text/plain; charset="utf-8" From: Javi Merino Rework the container to user heredocs for readability, derive from bookworm-slim and use apt-get --no-install-recommends to keep the size down. Additionally: * Make it a non-root container. * Drop libext2fs-dev which is an x86-only dependency. * Add libncurses5-dev for xentop and zlib1g-dev which was missing from the libxenguest decompressors. * As there's no ninja, the container can no loger build QEMU so drop libglib2.0-dev and libpixman-1-dev too. * Swap libyajl-dev for libjson-c-dev given the latters deprecation. Rename the job to debian-12-arm64-* to follow the naming scheme of all the other CI jobs. This reduces the size of the debian:12-arm64v8 from 2.25GB down to 1.62GB. Signed-off-by: Javi Merino Signed-off-by: Andrew Cooper Reviewed-by: Michal Orzel --- CC: Anthony PERARD CC: Stefano Stabellini CC: Michal Orzel CC: Doug Goldstein Depends on "[PATCH] tools/libxl: Fix libxl_nocpuid.c build with json-c" submitted separately. --- automation/build/debian/12-arm64v8.dockerfile | 69 +++++++++++++++++++ .../build/debian/bookworm-arm64v8.dockerfile | 55 --------------- automation/gitlab-ci/build.yaml | 8 +-- automation/gitlab-ci/test.yaml | 4 +- automation/scripts/containerize | 2 +- 5 files changed, 76 insertions(+), 62 deletions(-) create mode 100644 automation/build/debian/12-arm64v8.dockerfile delete mode 100644 automation/build/debian/bookworm-arm64v8.dockerfile diff --git a/automation/build/debian/12-arm64v8.dockerfile b/automation/bui= ld/debian/12-arm64v8.dockerfile new file mode 100644 index 000000000000..c0e08a010f6a --- /dev/null +++ b/automation/build/debian/12-arm64v8.dockerfile @@ -0,0 +1,69 @@ +# syntax=3Ddocker/dockerfile:1 +FROM --platform=3Dlinux/arm64/v8 debian:bookworm-slim +LABEL maintainer.name=3D"The Xen Project" +LABEL maintainer.email=3D"xen-devel@lists.xenproject.org" + +ENV DEBIAN_FRONTEND=3Dnoninteractive + +RUN < (p=reject dis=none) Return-Path: Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) by mx.zohomail.com with SMTPS id 1778275787198529.8669629025766; Fri, 8 May 2026 14:29:47 -0700 (PDT) Received: from list by lists.xenproject.org with outflank-mailman.1304253.1577358 (Exim 4.92) (envelope-from ) id 1wLSl1-0005Sh-KD; Fri, 08 May 2026 21:29:15 +0000 Received: by outflank-mailman (output) from mailman id 1304253.1577358; Fri, 08 May 2026 21:29:15 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wLSl1-0005Re-D8; Fri, 08 May 2026 21:29:15 +0000 Received: by outflank-mailman (input) for mailman id 1304253; Fri, 08 May 2026 21:29:13 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) id 1wLSkz-00053I-Dr for xen-devel@lists.xenproject.org; Fri, 08 May 2026 21:29:13 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wLSky-00E1Ak-R5 for xen-devel@lists.xenproject.org; Fri, 08 May 2026 23:29:12 +0200 Received: from [10.42.69.9] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 69fe5569-bab6-0a2a0a5309dd-0a2a4509d4ec-46 for ; Fri, 08 May 2026 23:29:12 +0200 Received: from [209.85.221.44] (helo=mail-wr1-f44.google.com) by tlsNG-bad1c0.mxtls.expurgate.net with ESMTPS (eXpurgate 4.56.1) (envelope-from ) id 69fe55a8-2497-0a2a45090019-d155dd2cad56-3 for ; Fri, 08 May 2026 23:29:12 +0200 Received: by mail-wr1-f44.google.com with SMTP id ffacd0b85a97d-44da2de25f3so1696091f8f.1 for ; Fri, 08 May 2026 14:29:12 -0700 (PDT) Received: from localhost.localdomain (host-78-146-242-105.as13285.net. [78.146.242.105]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-45491ca383asm7548608f8f.28.2026.05.08.14.29.11 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 14:29:11 -0700 (PDT) X-Outflank-Mailman: Message body and most headers restored to incoming version X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=google header.d=citrix.com header.i="@citrix.com" header.h="Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-Id:Date:Subject:Cc:To:From" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=citrix.com; s=google; t=1778275752; x=1778880552; darn=lists.xenproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=sCpnw2CHljiDPANNMJcNI0PWk3nH2XqIoYsrjyrERM4=; b=IzT4UXvx/KdEUEDSKGP1r6y2YxWkwjJxDDhljP9CxUGb8ptqfgvpQlV7izh41l9J2G 10CNfTQqlSFTMjPkhh8bMs0CJHKmzcjLzMglvpkWIrLtj/zso2xmDmBl9JWSAto9IT6/ Rs64gdZJ/958rG0NfpTNCycfrhDk9bJr6JQkc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778275752; x=1778880552; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=sCpnw2CHljiDPANNMJcNI0PWk3nH2XqIoYsrjyrERM4=; b=IW+2GPEONFUwTt5QHpurYyAZpAb4I5QcGh57wH5dKFq4zC50zgFcwvu7O9vicE6p45 cE5LFogwyYV14i++vtNtES1FbpYfT6myQpJco81TP1E9mmAmTyvIb6lZYFsYWW1gM/5Q FyTOcEPpholrg+qCM5GJkvbRD3wAg5KbiOw41kIAmHI7G3tc8hbEcogSnrPBn3bbxs45 gEJuGM16pE5YmScmA29R8rB/zhltl0eDpWjrxaNO9H+jxCK+EIkb4TzMuydsv6WaPZXZ UB8j9GhOyUY6eG2HqAY2sd57a06SFpQ5O1KanO3w5J9YwDEt0MYNyv9LwDsQcCcwgPr0 lXsA== X-Gm-Message-State: AOJu0YwoNPUnZWDIpLmuNaA4x4zvC6XTCr/9YDbu3OXNLDNkJ+0D/FZy A1V1X3fS4RYviYBm9nlSMDo8P5D5WscqOCgujF2WiTZ9o6KWVWECTXAkZtXKLqk7/RGjqUQ1vr8 fez0bytY= X-Gm-Gg: Acq92OGzsZMZkv/NQ3kWueumkexePUqGBRHIJWF6g1VpQc96n9vX4M3sQEYY/6x25ml D0yCLXkbQYUFWPfuffcclAPlb8IVZ3ypkGnVN+EuxwAgHnMTFRF2jxgH2GFe+egeNT3bPoQRUbg AAxWWeyOyek0b5BPIysBHBerWyE9mdy0lux0WiOmlL7ZiHlrt4jm8EWOezEcpqY0YIKZTwtzA2b X44vLoKzsU4chfS632S11i1wgZEePOylbqL0CQ3hH98RBrjcvkB9Dt7B2vrhkBk8E3ViWzZKNzd 9kw/yZek2+zn38pcpFQ4BnNA1SaQJGbIl0F7VqGmZ2Uwodxl8ifYE4zqXQKc1Bwo6Rvqfw/NDo2 sy7eIDdJr7jZdLZg13b6IVUbdoeN9qzCB+sGv3nMCHCZIRCnPoAeEYtKQBm0DwQHIRcu5nqod3x mGFBnNL3pF3lmua1eH39q33z+Nxyzv1eEoA8s2zspalie60aDUXlRwKdQ/VJ3+BzKku6w75+ujK Jts X-Received: by 2002:a05:6000:4383:b0:43d:7275:c1eb with SMTP id ffacd0b85a97d-454637c804cmr6690324f8f.39.1778275751877; Fri, 08 May 2026 14:29:11 -0700 (PDT) From: Andrew Cooper To: Xen-devel Cc: Andrew Cooper , Anthony PERARD , Stefano Stabellini , Michal Orzel , Doug Goldstein Subject: [PATCH 4/5] CI: Add a Debian 13 (Trixie) arm64 container Date: Fri, 8 May 2026 22:29:06 +0100 Message-Id: <20260508212907.1643761-5-andrew.cooper3@citrix.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20260508212907.1643761-1-andrew.cooper3@citrix.com> References: <20260508212907.1643761-1-andrew.cooper3@citrix.com> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-purgate-ID: tlsNG-bad1c0/1778275752-40D67A53-32A4080A/10/63158204843 X-purgate-type: spam X-purgate-size: 4052 X-ZohoMail-DKIM: pass (identity @citrix.com) X-ZM-MESSAGEID: 1778275787641158500 Content-Type: text/plain; charset="utf-8" Exactly as per the Bookworm container, but additionally with the ipxe-qemu = and qemu-system-aarch64 packages. These will be used to remove the export jobs. Switch qemu-arm{32,64} jobs to use this container. No functional change. Signed-off-by: Andrew Cooper Reviewed-by: Michal Orzel --- CC: Anthony PERARD CC: Stefano Stabellini CC: Michal Orzel CC: Doug Goldstein We should probably wire up some build tests too, but it's too late on a Fri= day for me to be thinking about that for this posting. --- automation/build/debian/13-arm64v8.dockerfile | 71 +++++++++++++++++++ automation/gitlab-ci/test.yaml | 4 +- automation/scripts/containerize | 1 + 3 files changed, 74 insertions(+), 2 deletions(-) create mode 100644 automation/build/debian/13-arm64v8.dockerfile diff --git a/automation/build/debian/13-arm64v8.dockerfile b/automation/bui= ld/debian/13-arm64v8.dockerfile new file mode 100644 index 000000000000..b9062ee8b443 --- /dev/null +++ b/automation/build/debian/13-arm64v8.dockerfile @@ -0,0 +1,71 @@ +# syntax=3Ddocker/dockerfile:1 +FROM --platform=3Dlinux/arm64/v8 debian:trixie-slim +LABEL maintainer.name=3D"The Xen Project" +LABEL maintainer.email=3D"xen-devel@lists.xenproject.org" + +ENV DEBIAN_FRONTEND=3Dnoninteractive + +RUN < (p=reject dis=none) Return-Path: Received: from lists.xenproject.org (lists.xenproject.org [192.237.175.120]) by mx.zohomail.com with SMTPS id 1778275779947158.81401217178552; Fri, 8 May 2026 14:29:39 -0700 (PDT) Received: from list by lists.xenproject.org with outflank-mailman.1304254.1577364 (Exim 4.92) (envelope-from ) id 1wLSl2-0005cE-1f; Fri, 08 May 2026 21:29:16 +0000 Received: by outflank-mailman (output) from mailman id 1304254.1577364; Fri, 08 May 2026 21:29:16 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1wLSl1-0005ah-T1; Fri, 08 May 2026 21:29:15 +0000 Received: by outflank-mailman (input) for mailman id 1304254; Fri, 08 May 2026 21:29:14 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) id 1wLSl0-0005Gs-GH for xen-devel@lists.xenproject.org; Fri, 08 May 2026 21:29:14 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1wLSkz-000E8K-Tf for xen-devel@lists.xenproject.org; Fri, 08 May 2026 23:29:13 +0200 Received: from [10.42.69.8] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 69fe5508-5cb7-0a2a0a5109dd-0a2a4508bcd8-36 for ; Fri, 08 May 2026 23:29:13 +0200 Received: from [209.85.221.53] (helo=mail-wr1-f53.google.com) by tlsNG-c1860d.mxtls.expurgate.net with ESMTPS (eXpurgate 4.56.1) (envelope-from ) id 69fe55a9-63b5-0a2a45080019-d155dd35d1fa-3 for ; Fri, 08 May 2026 23:29:13 +0200 Received: by mail-wr1-f53.google.com with SMTP id ffacd0b85a97d-45297094718so1933598f8f.3 for ; Fri, 08 May 2026 14:29:13 -0700 (PDT) Received: from localhost.localdomain (host-78-146-242-105.as13285.net. [78.146.242.105]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-45491ca383asm7548608f8f.28.2026.05.08.14.29.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 08 May 2026 14:29:12 -0700 (PDT) X-Outflank-Mailman: Message body and most headers restored to incoming version X-BeenThere: xen-devel@lists.xenproject.org List-Id: Xen developer discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xenproject.org Precedence: list Sender: "Xen-devel" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=google header.d=citrix.com header.i="@citrix.com" header.h="Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-Id:Date:Subject:Cc:To:From" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=citrix.com; s=google; t=1778275753; x=1778880553; darn=lists.xenproject.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=3pK0KfhDLNVVZ6TWY1JZ97U9wzF5HmGiXTOWuG1PAs8=; b=YW3kIXyVCV8+kHX+dX/5jZATJW7G7uq0dyrX8E73zEn4p2fOeEETk1k4wI8HAIhrPX Rp1GBc4oknSKFIj/fiBOfX0bZhL7yq5tCb0A1/PumjWCN/ABRGG4IocqJkjSyMi+ViZL wKBzeBKiIGeaJbfzPJnBBM+c9oYOGrqzVAwUY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778275753; x=1778880553; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=3pK0KfhDLNVVZ6TWY1JZ97U9wzF5HmGiXTOWuG1PAs8=; b=dlNSijxEWSRPDiTLlbYPA5FAwwFpjOSd4clmjm0nngbNWb3AbsD54OwXjIO70bqwQg WT0Deys9lxXwIeq4JH+NuIx2fo/mdUID2llbJF/00qhlqFQyW6Un4H/3cjvROj0PoGqE pwbTZB8PwW4CX/qsKW7x/YbLE2riyoLDDWCgEOmwYalhKconig29/irES0VPUQZiBn8X OQt9/ZWFlPooMDWlufxgFRD8ZIQ66DFKM++qW6F1AJMNDjsCWB5sVt1hmvWTuUHPMqeV 81mSSGPqaH46gHa/gbF5BOF6CSTYfQLd+v60wiCsw79/9/qPXTAfi21567zk6ikh1izC jt6A== X-Gm-Message-State: AOJu0YwqcYkRwTMU9/wQBnIHf0SVNGb1YOvsVxJNbjun9NQAKg3JRom4 4EHAcFRnDT5j5NI78vX5c2kpqJvhwKt1lRFAqbhux2lprZAKbBpZyjEFbnQl4Z2mPCcOq3e8vbi uWY98TNU= X-Gm-Gg: Acq92OFzvjrCyTD7wcmF4A2+qn4i7P6kuLewlqw3flIeTLFxURqiqzEwAWwTyq7Fbyv /TKxUkChP06n3WcGqzP3tyJN4TQ/hQB2FHDdK8JuhPeq7EjKfY7XGIKzmuye/J8hFPBT2pl5coC A1pv4FNmmLobzBXkaK+jZX8fBu06IlUmdjsvWel8ahJxuvcVE+Msu5ZvEzgcSDUN03HGhoqDqHE f2mUDwZGKcDFJbz64bJn75eoy/evfJGeQSJh85yyNJtfCvSZOrk63hkCex5N7Kj9rCwXixm8cZ2 Hw29FJbAjMBHJnYxIBhGxj7MDc58RvjkB5yRq306GEBtlZsocAEkPGClL+ywtwFSZK1KWBp1Qg5 0Wp/ssEpQRBvq/8xIY0t0qa2NmKh/jvm1OItJAn/hfu/yCnvHYbWrNae/qyjaNADiqtMfFnG3M5 hdnfetXo+ysnDhBuHYS9sxUhm8i0L5ka80McQHDrfj7yy9qHC7XPxUJO7/DtuuXkabKGLWgKf3l 495MarUsTTkI3g= X-Received: by 2002:a05:6000:2087:b0:451:b1a:a753 with SMTP id ffacd0b85a97d-4515b0572a7mr22726817f8f.6.1778275752521; Fri, 08 May 2026 14:29:12 -0700 (PDT) From: Andrew Cooper To: Xen-devel Cc: Andrew Cooper , Anthony PERARD , Stefano Stabellini , Michal Orzel , Doug Goldstein Subject: [PATCH 5/5] CI: Switch qemu-arm* jobs to using the distro provided QEMU Date: Fri, 8 May 2026 22:29:07 +0100 Message-Id: <20260508212907.1643761-6-andrew.cooper3@citrix.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20260508212907.1643761-1-andrew.cooper3@citrix.com> References: <20260508212907.1643761-1-andrew.cooper3@citrix.com> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-purgate-ID: tlsNG-c1860d/1778275753-B5F6ADB1-C4C1A11A/10/63158204843 X-purgate-type: spam X-purgate-size: 11153 X-ZohoMail-DKIM: pass (identity @citrix.com) X-ZM-MESSAGEID: 1778275781689158500 Content-Type: text/plain; charset="utf-8" This removes qemu-system-aarch64-6.0.0-*-export and fixes the outstanding TODOs about efi-virtio.rom, now that the QEMU in use has it's /usr/share/ properly packaged. Signed-off-by: Andrew Cooper Reviewed-by: Michal Orzel --- CC: Anthony PERARD CC: Stefano Stabellini CC: Michal Orzel CC: Doug Goldstein --- automation/gitlab-ci/build.yaml | 33 -------- automation/gitlab-ci/test.yaml | 2 - automation/scripts/include/xtf-arm64 | 7 +- automation/scripts/qemu-smoke-dom0-arm32.sh | 6 +- automation/scripts/qemu-smoke-dom0-arm64.sh | 6 +- .../scripts/qemu-smoke-dom0less-arm32.sh | 6 +- .../scripts/qemu-smoke-dom0less-arm64.sh | 6 +- .../6.0.0-arm64v8.dockerfile | 77 ------------------- 8 files changed, 10 insertions(+), 133 deletions(-) delete mode 100644 automation/tests-artifacts/qemu-system-aarch64/6.0.0-ar= m64v8.dockerfile diff --git a/automation/gitlab-ci/build.yaml b/automation/gitlab-ci/build.y= aml index e50ff6936c5c..be4a038363ac 100644 --- a/automation/gitlab-ci/build.yaml +++ b/automation/gitlab-ci/build.yaml @@ -265,39 +265,6 @@ variables: <<: *gcc =20 -## Test artifacts common - -.test-jobs-artifact-common: - stage: build - needs: [] - rules: - - if: $CI_JOB_NAME =3D~ $SELECTED_JOBS_ONLY - when: on_success - -# Arm test artifacts - -qemu-system-aarch64-6.0.0-arm64-export: - extends: .test-jobs-artifact-common - image: registry.gitlab.com/xen-project/xen/tests-artifacts/qemu-system-a= arch64:6.0.0-arm64v8 - script: - - mkdir binaries && cp /qemu-system-aarch64 binaries/qemu-system-aarch= 64 - artifacts: - paths: - - binaries/qemu-system-aarch64 - tags: - - arm64 - -qemu-system-aarch64-6.0.0-arm32-export: - extends: .test-jobs-artifact-common - image: registry.gitlab.com/xen-project/xen/tests-artifacts/qemu-system-a= arch64:6.0.0-arm64v8 - script: - - mkdir binaries && cp /qemu-system-arm binaries/qemu-system-arm - artifacts: - paths: - - binaries/qemu-system-arm - tags: - - arm64 - # Jobs below this line =20 # Build jobs needed for tests diff --git a/automation/gitlab-ci/test.yaml b/automation/gitlab-ci/test.yaml index 008deef98d1e..1722800c1541 100644 --- a/automation/gitlab-ci/test.yaml +++ b/automation/gitlab-ci/test.yaml @@ -12,7 +12,6 @@ - project: $ARTIFACTS_REPO job: alpine-3.18-arm64-rootfs ref: $ARTIFACTS_BRANCH - - qemu-system-aarch64-6.0.0-arm64-export =20 .arm32-test-needs: &arm32-test-needs # Bodge to ensure binaries/ is non-root. Can be any artefact which comes @@ -21,7 +20,6 @@ - project: $ARTIFACTS_REPO job: microcode-x86 ref: $ARTIFACTS_BRANCH - - qemu-system-aarch64-6.0.0-arm32-export =20 .x86-64-test-needs: &x86-64-test-needs - project: $ARTIFACTS_REPO diff --git a/automation/scripts/include/xtf-arm64 b/automation/scripts/incl= ude/xtf-arm64 index 1a318b7aa0ba..5d851af788a1 100644 --- a/automation/scripts/include/xtf-arm64 +++ b/automation/scripts/include/xtf-arm64 @@ -7,7 +7,7 @@ function xtf_arch_prepare() { export FW_PREFIX=3D"${FW_PREFIX:-/usr/lib/u-boot/qemu_arm64/}" - export QEMU_PREFIX=3D"${QEMU_PREFIX:-${WORKDIR}/}" + export QEMU_PREFIX=3D"${QEMU_PREFIX:-}" export XEN_BINARY=3D"${XEN_BINARY:-${WORKDIR}/xen}" export XEN_CMDLINE=3D"${XEN_CMDLINE:-loglvl=3Dall noreboot console_tim= estamps=3Dboot console=3Ddtuart}" export XTF_SRC_BRANCH=3D"${XTF_SRC_BRANCH:-xtf-arm}" @@ -18,9 +18,6 @@ function xtf_arch_prepare() # Perform arch-specific XTF environment setup. function xtf_arch_setup() { - # QEMU looks for "efi-virtio.rom" even if it is unneeded - curl -fsSLO https://github.com/qemu/qemu/raw/v5.2.0/pc-bios/efi-virtio= .rom - # Crude check for local testing if [ ! -d imagebuilder ]; then git clone --depth 1 https://gitlab.com/xen-project/imagebuilder.git @@ -47,7 +44,7 @@ EOF cp ${XTF_BINARY} ${WORKDIR}/xtf-test =20 # Generate virt-gicv2.dtb - ${WORKDIR}/qemu-system-aarch64 \ + ${QEMU_PREFIX}qemu-system-aarch64 \ -machine virtualization=3Dtrue \ -cpu cortex-a57 \ -machine type=3Dvirt \ diff --git a/automation/scripts/qemu-smoke-dom0-arm32.sh b/automation/scrip= ts/qemu-smoke-dom0-arm32.sh index 58797f7d30d3..5dc348c71aa9 100755 --- a/automation/scripts/qemu-smoke-dom0-arm32.sh +++ b/automation/scripts/qemu-smoke-dom0-arm32.sh @@ -39,9 +39,7 @@ cp ../zImage ./root find . | cpio -R 0:0 -H newc -o | gzip > ../initrd.gz cd .. =20 -# XXX QEMU looks for "efi-virtio.rom" even if it is unneeded -curl -fsSLO https://github.com/qemu/qemu/raw/v5.2.0/pc-bios/efi-virtio.rom -./qemu-system-arm \ +qemu-system-arm \ -machine virt \ -machine virtualization=3Dtrue \ -smp 4 \ @@ -77,7 +75,7 @@ git clone --depth 1 https://gitlab.com/xen-project/imageb= uilder.git bash imagebuilder/scripts/uboot-script-gen -t tftp -d . -c config =20 rm -f ${serial_log} -export TEST_CMD=3D"./qemu-system-arm \ +export TEST_CMD=3D"qemu-system-arm \ -machine virt \ -machine virtualization=3Dtrue \ -smp 4 \ diff --git a/automation/scripts/qemu-smoke-dom0-arm64.sh b/automation/scrip= ts/qemu-smoke-dom0-arm64.sh index 05962bdc0203..1d673f184251 100755 --- a/automation/scripts/qemu-smoke-dom0-arm64.sh +++ b/automation/scripts/qemu-smoke-dom0-arm64.sh @@ -57,9 +57,7 @@ chmod +x etc/local.d/xen.start find . | cpio -R 0:0 -H newc -o | gzip >> ../dom0-rootfs.cpio.gz cd ../.. =20 -# XXX QEMU looks for "efi-virtio.rom" even if it is unneeded -curl -fsSLO https://github.com/qemu/qemu/raw/v5.2.0/pc-bios/efi-virtio.rom -./binaries/qemu-system-aarch64 \ +qemu-system-aarch64 \ -machine virtualization=3Dtrue \ -cpu cortex-a57 -machine type=3Dvirt \ -m 2048 -smp 2 -display none \ @@ -90,7 +88,7 @@ bash imagebuilder/scripts/uboot-script-gen -t tftp -d bin= aries/ -c binaries/conf =20 # Run the test rm -f smoke.serial -export TEST_CMD=3D"./binaries/qemu-system-aarch64 \ +export TEST_CMD=3D"qemu-system-aarch64 \ -machine virtualization=3Dtrue \ -cpu cortex-a57 -machine type=3Dvirt \ -m 2048 -monitor none -serial stdio \ diff --git a/automation/scripts/qemu-smoke-dom0less-arm32.sh b/automation/s= cripts/qemu-smoke-dom0less-arm32.sh index 627d890a3926..20e43b4f049d 100755 --- a/automation/scripts/qemu-smoke-dom0less-arm32.sh +++ b/automation/scripts/qemu-smoke-dom0less-arm32.sh @@ -78,9 +78,7 @@ chmod +x init find . | cpio -R 0:0 -H newc -o | gzip > ../initrd.gz cd .. =20 -# XXX QEMU looks for "efi-virtio.rom" even if it is unneeded -curl -fsSLO https://github.com/qemu/qemu/raw/v5.2.0/pc-bios/efi-virtio.rom -./qemu-system-arm \ +qemu-system-arm \ -machine virt \ -machine virtualization=3Dtrue \ -smp 4 \ @@ -130,7 +128,7 @@ bash imagebuilder/scripts/uboot-script-gen -t tftp -d .= -c config =20 # Run the test rm -f ${serial_log} -export TEST_CMD=3D"./qemu-system-arm \ +export TEST_CMD=3D"qemu-system-arm \ -machine virt \ -machine virtualization=3Dtrue \ -smp 4 \ diff --git a/automation/scripts/qemu-smoke-dom0less-arm64.sh b/automation/s= cripts/qemu-smoke-dom0less-arm64.sh index 05c4a6acbb59..a9e99f1ae392 100755 --- a/automation/scripts/qemu-smoke-dom0less-arm64.sh +++ b/automation/scripts/qemu-smoke-dom0less-arm64.sh @@ -78,9 +78,7 @@ if [[ "${test_variant}" =3D=3D "gicv3" ]]; then domU_check=3D"echo \"${passed}\"" fi =20 -# XXX QEMU looks for "efi-virtio.rom" even if it is unneeded -curl -fsSLO https://github.com/qemu/qemu/raw/v5.2.0/pc-bios/efi-virtio.rom -./binaries/qemu-system-aarch64 \ +qemu-system-aarch64 \ -machine virtualization=3Dtrue \ -cpu cortex-a57 -machine type=3Dvirt,gic-version=3D$gic_version \ -m 2048 -smp 2 -display none \ @@ -203,7 +201,7 @@ bash imagebuilder/scripts/uboot-script-gen -t tftp -d b= inaries/ -c binaries/conf =20 # Run the test rm -f smoke.serial -export TEST_CMD=3D"./binaries/qemu-system-aarch64 \ +export TEST_CMD=3D"qemu-system-aarch64 \ -machine virtualization=3Dtrue \ -cpu cortex-a57 -machine type=3Dvirt,gic-version=3D$gic_version \ -m 2048 -monitor none -serial stdio \ diff --git a/automation/tests-artifacts/qemu-system-aarch64/6.0.0-arm64v8.d= ockerfile b/automation/tests-artifacts/qemu-system-aarch64/6.0.0-arm64v8.do= ckerfile deleted file mode 100644 index e9f5576be7a6..000000000000 --- a/automation/tests-artifacts/qemu-system-aarch64/6.0.0-arm64v8.dockerfi= le +++ /dev/null @@ -1,77 +0,0 @@ -# syntax=3Ddocker/dockerfile:1 -FROM --platform=3Dlinux/arm64/v8 debian:bookworm -LABEL maintainer.name=3D"The Xen Project" \ - maintainer.email=3D"xen-devel@lists.xenproject.org" - -ENV DEBIAN_FRONTEND=3Dnoninteractive -ENV QEMU_VERSION=3D6.0.0 -ENV USER root - -RUN mkdir /build -WORKDIR /build - -# build depends -RUN apt-get update && \ - apt-get --quiet --yes install \ - build-essential \ - curl \ - python3 \ - ninja-build \ - pkg-config \ - libglib2.0-dev \ - libpixman-1-dev \ - && \ - \ - curl -fsSLO https://download.qemu.org/qemu-"$QEMU_VERSION".tar.xz && \ - tar xvJf qemu-"$QEMU_VERSION".tar.xz && \ - cd qemu-"$QEMU_VERSION" && \ - ./configure \ - --target-list=3Darm-softmmu,aarch64-softmmu \ - --enable-system \ - --disable-blobs \ - --disable-bsd-user \ - --disable-debug-info \ - --disable-glusterfs \ - --disable-gtk \ - --disable-guest-agent \ - --disable-linux-user \ - --disable-sdl \ - --disable-spice \ - --disable-tpm \ - --disable-vhost-net \ - --disable-vhost-scsi \ - --disable-vhost-user \ - --disable-vhost-vsock \ - --disable-virtfs \ - --disable-vnc \ - --disable-werror \ - --disable-xen \ - --disable-safe-stack \ - --disable-libssh \ - --disable-opengl \ - --disable-tools \ - --disable-virglrenderer \ - --disable-stack-protector \ - --disable-containers \ - --disable-replication \ - --disable-cloop \ - --disable-dmg \ - --disable-vvfat \ - --disable-vdi \ - --disable-parallels \ - --disable-qed \ - --disable-bochs \ - --disable-qom-cast-debug \ - --disable-vhost-vdpa \ - --disable-vhost-kernel \ - --disable-qcow1 \ - --disable-live-block-migration \ - && \ - make -j$(nproc) && \ - cp ./build/qemu-system-aarch64 / && \ - cp ./build/qemu-system-arm / && \ - cd /build && \ - rm -rf qemu-"$QEMU_VERSION"* && \ - apt-get autoremove -y && \ - apt-get clean && \ - rm -rf /var/lib/apt/lists* /tmp/* /var/tmp/* --=20 2.39.5