Files
kata-containers/.github/workflows
Fabiano Fidêncio 0f70ff8a8f ci: stop building the monolithic confidential/GPU rootfs images
Now that no shipped config boots the monolithic rootfs images, drop them
from the static-tarball build matrices:

  - amd64: rootfs-image-confidential, rootfs-image-nvidia-gpu,
           rootfs-image-nvidia-gpu-confidential
  - arm64: rootfs-image-confidential, rootfs-image-nvidia-gpu
  - s390x: rootfs-image-confidential

The main motivation is size: the released kata-static tarball is bumping
against GitHub's release asset size limit (2 GiB). These monolithic images
duplicate content that already ships in the base image plus the coco/gpu
guest extensions, so building and packaging them just inflates the tarball
for no benefit now that both runtimes boot the composable layout. Dropping
them keeps the tarball comfortably under the limit (and saves the
corresponding CI build time).

rootfs-initrd-confidential is intentionally kept: it is still consumed by
s390x Secure Execution.

The monolithic image build targets and install_* helpers stay in the tree
so they can still be built manually; they are simply no longer produced by
CI.

Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com>
Assisted-by: Cursor <cursoragent@cursor.com>
Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com>
2026-07-24 15:19:02 +02:00
..
2026-03-31 10:51:17 -05:00
2026-04-14 16:25:35 +01:00
2026-04-28 13:10:36 +01:00