mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-07-10 15:56:47 +00:00
f16b2fff3e
Add a Kata static-build component for NVRC (tools/packaging/static-build/nvrc) that clones the NVRC repository at a pinned git reference and builds a static musl binary, mirroring the coco-guest-components build. This lets the composable-image work track NVRC changes from source instead of depending on a signed upstream release. The ref points at NVIDIA/nvrc#167 (fidencio/nvrc topic/adapt-for-composable-kata-images, 20d38ea), which carries the guest-side extension mounting. This is a CI-only crutch: once NVRC cuts a signed release with that work we go back to downloading it from `url`, so this commit must be dropped before merge. - versions.yaml: add repo/ref/toolchain to externals.nvrc (and bump the version); the existing url is kept for the signed-release path. - lib.sh: add get_nvrc_image_name for the builder image. - kata-deploy-binaries.sh: add the nvrc build target, install_nvrc and its tarball path; get_latest_nvidia_nvrc_version now tracks ref+toolchain so the dependent NVIDIA images rebuild when the ref changes. - nvidia_rootfs.sh: consume kata-static-nvrc.tar.zst instead of downloading and cosign-verifying the release; the Sigstore .cert/.sig are now copied only when present (i.e. the signed-release path), since a source build emits just the binary. Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com> Assisted-by: Cursor <cursoragent@cursor.com>
Packaging scripts
This directory contains useful packaging scripts.
configure-hypervisor.sh
This script generates the official set of QEMU-based hypervisor build configuration options. All repositories that need to build a hypervisor from source MUST use this script to ensure the hypervisor is built in a known way since using a different set of options can impact many areas including performance, memory footprint and security.
Example usage:
$ configure-hypervisor.sh qemu