From 7284ce99e3d03bd294f529314e41ed307dc54cd0 Mon Sep 17 00:00:00 2001 From: "Brian R. Jackson" Date: Tue, 26 May 2026 18:04:05 -0400 Subject: [PATCH 1/2] chore(ci): smoke-test BuildKit registry mirror fix DO NOT MERGE. Temporary pin of the docker-build composite action to the head of NVIDIA/dsx-github-actions#48 (commit 480b123eed6fa49a1fe23ea0f963ca9f0d8b7752, branch fix/buildkit-registry-mirror) to verify that the auth-callout Docker Build job successfully pulls golang:1.25.5 via dockerhub.nvidia.com instead of hitting the Docker Hub unauthenticated rate limit. Reverts to the v1.16.0 tag before merge. Tracks nvbug 6225636. Co-Authored-By: Claude Opus 4.7 Signed-off-by: Brian R. Jackson --- .github/workflows/ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 33205cf..f9dc124 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -121,7 +121,7 @@ jobs: runs-on: linux-amd64-cpu4 steps: - uses: actions/checkout@v4 - - uses: NVIDIA/dsx-github-actions/.github/actions/docker-build@739847ddf00fda38916504ef84e1f504eac3158f # v1.16.0 + - uses: NVIDIA/dsx-github-actions/.github/actions/docker-build@480b123eed6fa49a1fe23ea0f963ca9f0d8b7752 # SMOKE-TEST: fix/buildkit-registry-mirror (revert to v1.16.0 tag before merge) with: image: dsx-exchange-auth-callout tags: ci-validation @@ -172,7 +172,7 @@ jobs: runs-on: linux-amd64-cpu4 steps: - uses: actions/checkout@v4 - - uses: NVIDIA/dsx-github-actions/.github/actions/docker-build@739847ddf00fda38916504ef84e1f504eac3158f # v1.16.0 + - uses: NVIDIA/dsx-github-actions/.github/actions/docker-build@480b123eed6fa49a1fe23ea0f963ca9f0d8b7752 # SMOKE-TEST: fix/buildkit-registry-mirror (revert to v1.16.0 tag before merge) with: image: dsx-exchange-auth-callout tags: scan-validation From a40a7de8a2479bf0c597283903e2cdf0d6319e68 Mon Sep 17 00:00:00 2001 From: "Brian R. Jackson" Date: Tue, 26 May 2026 18:20:16 -0400 Subject: [PATCH 2/2] chore(ci): verify buildkitd mirror config on runner before build DO NOT MERGE. Adds a smoke-test step ahead of each docker-build composite action call that confirms /etc/buildkit/buildkitd.toml is present on the nv-gha-runner. The step echoes the file contents into the job log so reviewers can verify the [registry."docker.io"] mirrors = ["dockerhub.nvidia.com"] block is actually being supplied to BuildKit. Combined with the existing pin to fix/buildkit-registry-mirror, this gives a two-pronged confirmation: (1) the mirror config exists on the runner, and (2) the golang:1.25.5 pull succeeds without 429. Tracks nvbug 6225636. Co-Authored-By: Claude Opus 4.7 Signed-off-by: Brian R. Jackson --- .github/workflows/ci.yml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f9dc124..949bdd1 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -121,6 +121,17 @@ jobs: runs-on: linux-amd64-cpu4 steps: - uses: actions/checkout@v4 + - name: SMOKE-TEST — verify buildkitd mirror config is present on runner + run: | + set -euo pipefail + echo "::group::/etc/buildkit/buildkitd.toml" + if [[ -f /etc/buildkit/buildkitd.toml ]]; then + cat /etc/buildkit/buildkitd.toml + else + echo "MISSING: /etc/buildkit/buildkitd.toml not found on runner" + exit 1 + fi + echo "::endgroup::" - uses: NVIDIA/dsx-github-actions/.github/actions/docker-build@480b123eed6fa49a1fe23ea0f963ca9f0d8b7752 # SMOKE-TEST: fix/buildkit-registry-mirror (revert to v1.16.0 tag before merge) with: image: dsx-exchange-auth-callout @@ -172,6 +183,17 @@ jobs: runs-on: linux-amd64-cpu4 steps: - uses: actions/checkout@v4 + - name: SMOKE-TEST — verify buildkitd mirror config is present on runner + run: | + set -euo pipefail + echo "::group::/etc/buildkit/buildkitd.toml" + if [[ -f /etc/buildkit/buildkitd.toml ]]; then + cat /etc/buildkit/buildkitd.toml + else + echo "MISSING: /etc/buildkit/buildkitd.toml not found on runner" + exit 1 + fi + echo "::endgroup::" - uses: NVIDIA/dsx-github-actions/.github/actions/docker-build@480b123eed6fa49a1fe23ea0f963ca9f0d8b7752 # SMOKE-TEST: fix/buildkit-registry-mirror (revert to v1.16.0 tag before merge) with: image: dsx-exchange-auth-callout