Skip to content

fix: read the base reference from the build log, where ARGs are expanded - #765

Merged
Danathar merged 1 commit into
mainfrom
fix/variant-boot-digest-from-log
Oct 18, 2026
Merged

Danathar merged 1 commit into
mainfrom
fix/variant-boot-digest-from-log

Conversation

@Danathar

Copy link
Copy Markdown
Owner

#764 didn't fix it. A BlueBuild run dispatched on main after that merge (run 39127974910, budgie-atomic) still recorded an empty base_digest.

Why

The rendered BlueBuild Containerfile names the base through an ARG:

ARG BASE_IMAGE="quay.io/fedora-ostree-desktops/budgie-atomic@sha256:5be0a50e…"
FROM "${BASE_IMAGE}" AS variant-budgie-atomic

base_reference() looked for the base in the Containerfile's FROM lines, found no match, and fell back to the tag. #764's test used the expanded FROM …@sha256:… line, which only appears in the build log. That's why the test passed while the real run still failed.

Change

base_reference() now reads the base from the STEP n/m: FROM lines in build.log, where podman prints every FROM with its ARGs expanded. The test now feeds build-log lines for both methods.

How it was checked

  • python3 -m unittest discover -s tests (2587 tests), ruff check, git diff --check.
  • Rendered budgie-atomic's BlueBuild Containerfile locally with the tool's own generate(); that is where the ARG form above comes from.
  • Replayed the real build.log artifacts through the new function: budgie-atomic (BlueBuild, run 39127974910) gives the pinned @sha256:5be0a50e…, and bazzite-dx-gnome (Containerfile, run 39123468770) gives ghcr.io/ublue-os/bazzite-dx-gnome:stable.

#764 looked for the base in the rendered Containerfile, but BlueBuild names
it through an ARG (`ARG BASE_IMAGE="<repository>@sha256:..."`, then
`FROM "${BASE_IMAGE}"`), so the lookup fell back to the tag and the
dispatched BlueBuild run still recorded no base digest. Its test fed the
expanded form, which only the build log shows.

podman prints every FROM step with its ARGs expanded, so the reference is
now read from build.log. Replaying both hosted runs' build logs gives the
pinned digest for budgie-atomic (BlueBuild) and the tag for
bazzite-dx-gnome (Containerfile).

Signed-off-by: Douglas Baggett <doug.baggett@gmail.com>
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-18T12:51:01.428799Z 08c13f9 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@danathar-atomic-hive danathar-atomic-hive Bot added author/clanker A contributor's own hive authored this PR under their login dco All commits are DCO signed-off role/trusted Author is trusted for unattended merge (trusted-author role or registry/claim tier in require_tiers) stage/050-review-pending Review swarm requested; awaiting a verdict for the current head labels Oct 18, 2026
@Danathar
Danathar merged commit 2502f9f into main Oct 18, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

author/clanker A contributor's own hive authored this PR under their login dco All commits are DCO signed-off role/trusted Author is trusted for unattended merge (trusted-author role or registry/claim tier in require_tiers) stage/050-review-pending Review swarm requested; awaiting a verdict for the current head

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant