mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-07-11 00:52:00 +00:00
220b244aa7
Add a Kata static-build component for NVRC (tools/packaging/static-build/nvrc) that clones the NVRC repository at a pinned git reference and builds a static musl binary, mirroring the coco-guest-components build. This lets the composable-image work track NVRC changes from source instead of depending on a signed upstream release. The ref itself lives in its own versions.yaml commit and points at NVIDIA/nvrc#167 (fidencio/nvrc topic/adapt-for-composable-kata-images), which carries the guest-side extension mounting. Building from a ref is a CI-only crutch: once NVRC cuts a signed release with that work we drop the ref and go back to downloading it from `url`. - lib.sh: add get_nvrc_image_name for the builder image. - kata-deploy-binaries.sh: add the nvrc build target, install_nvrc and its tarball path; get_latest_nvidia_nvrc_version now tracks ref+toolchain so the dependent NVIDIA images rebuild when the ref changes. - nvidia_rootfs.sh: pick the NVRC source based on externals.nvrc.ref - when it is set consume the from-source kata-static-nvrc.tar.zst (a build we made ourselves, nothing to verify); otherwise keep downloading and cosign-verifying the signed release. The Sigstore .cert/.sig are copied only when present (i.e. the signed-release path), since a source build emits just the binary. Signed-off-by: Fabiano Fidêncio <ffidencio@nvidia.com> Assisted-by: Cursor <cursoragent@cursor.com>
Packaging scripts
This directory contains useful packaging scripts.
configure-hypervisor.sh
This script generates the official set of QEMU-based hypervisor build configuration options. All repositories that need to build a hypervisor from source MUST use this script to ensure the hypervisor is built in a known way since using a different set of options can impact many areas including performance, memory footprint and security.
Example usage:
$ configure-hypervisor.sh qemu