From db3f606ed6d61402676eadcf714df8f5e5d6ecdf Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fabiano=20Fid=C3=AAncio?= Date: Fri, 10 Jul 2026 13:55:12 +0200 Subject: [PATCH] DO-NOT-MERGE: pin the NVRC git ref in versions.yaml MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Point externals.nvrc at a source build instead of the signed release: add repo/ref/toolchain and bump the version. The NVRC static-build component consumes these to build NVRC from `ref` (currently NVIDIA/nvrc#167, fidencio/nvrc topic/adapt-for-composable-kata-images). `ref` may be a commit, tag or branch; pin to a commit for reproducible builds. The existing `url` is kept for the signed-release path. Drop this commit (and the ref) once NVRC ships a signed release carrying the composable-image work. Signed-off-by: Fabiano Fidêncio --- versions.yaml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/versions.yaml b/versions.yaml index 611b66cecf..7ad5a91228 100644 --- a/versions.yaml +++ b/versions.yaml @@ -246,8 +246,15 @@ externals: nvrc: # yamllint disable-line rule:line-length desc: "The NVRC project provides a Rust binary that implements a simple init system for microVMs" - version: "v0.1.4" + version: "" url: "https://github.com/NVIDIA/nvrc/releases/download/" + # While the composable-image work is in flight NVRC is built from source at + # a pinned git reference (tools/packaging/static-build/nvrc) instead of + # downloading the signed release from `url` above. `ref` may be a commit, + # tag or branch; pin to a commit for reproducible builds. + repo: "https://github.com/fidencio/nvrc.git" + ref: "668f01692142e24f6785d0cdd9f65c40aec28522" + toolchain: "1.94.0" nvidia: desc: "NVIDIA compute stack"