From 0f70ff8a8fefa4223ee34a09649db6c5fc71052f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fabiano=20Fid=C3=AAncio?= Date: Fri, 24 Jul 2026 15:19:02 +0200 Subject: [PATCH] ci: stop building the monolithic confidential/GPU rootfs images MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Now that no shipped config boots the monolithic rootfs images, drop them from the static-tarball build matrices: - amd64: rootfs-image-confidential, rootfs-image-nvidia-gpu, rootfs-image-nvidia-gpu-confidential - arm64: rootfs-image-confidential, rootfs-image-nvidia-gpu - s390x: rootfs-image-confidential The main motivation is size: the released kata-static tarball is bumping against GitHub's release asset size limit (2 GiB). These monolithic images duplicate content that already ships in the base image plus the coco/gpu guest extensions, so building and packaging them just inflates the tarball for no benefit now that both runtimes boot the composable layout. Dropping them keeps the tarball comfortably under the limit (and saves the corresponding CI build time). rootfs-initrd-confidential is intentionally kept: it is still consumed by s390x Secure Execution. The monolithic image build targets and install_* helpers stay in the tree so they can still be built manually; they are simply no longer produced by CI. Signed-off-by: Fabiano Fidêncio Assisted-by: Cursor Signed-off-by: Fabiano Fidêncio --- .github/workflows/build-kata-static-tarball-amd64.yaml | 3 --- .github/workflows/build-kata-static-tarball-arm64.yaml | 2 -- .github/workflows/build-kata-static-tarball-s390x.yaml | 1 - 3 files changed, 6 deletions(-) diff --git a/.github/workflows/build-kata-static-tarball-amd64.yaml b/.github/workflows/build-kata-static-tarball-amd64.yaml index e57ce85670..c8228627ff 100644 --- a/.github/workflows/build-kata-static-tarball-amd64.yaml +++ b/.github/workflows/build-kata-static-tarball-amd64.yaml @@ -208,11 +208,8 @@ jobs: matrix: asset: - rootfs-image - - rootfs-image-confidential - rootfs-image-coco-extension - rootfs-image-mariner - - rootfs-image-nvidia-gpu - - rootfs-image-nvidia-gpu-confidential - rootfs-image-nvidia - rootfs-image-nvidia-gpu-extension - rootfs-initrd diff --git a/.github/workflows/build-kata-static-tarball-arm64.yaml b/.github/workflows/build-kata-static-tarball-arm64.yaml index 160c27846a..04c4ca61e4 100644 --- a/.github/workflows/build-kata-static-tarball-arm64.yaml +++ b/.github/workflows/build-kata-static-tarball-arm64.yaml @@ -201,9 +201,7 @@ jobs: matrix: asset: - rootfs-image - - rootfs-image-confidential - rootfs-image-coco-extension - - rootfs-image-nvidia-gpu - rootfs-image-nvidia - rootfs-image-nvidia-gpu-extension - rootfs-initrd diff --git a/.github/workflows/build-kata-static-tarball-s390x.yaml b/.github/workflows/build-kata-static-tarball-s390x.yaml index b5f56dfd87..609084e84c 100644 --- a/.github/workflows/build-kata-static-tarball-s390x.yaml +++ b/.github/workflows/build-kata-static-tarball-s390x.yaml @@ -185,7 +185,6 @@ jobs: matrix: asset: - rootfs-image - - rootfs-image-confidential - rootfs-image-coco-extension - rootfs-initrd - rootfs-initrd-confidential