Skip to content

ci: hide Homebrew's Landlock ABI warning annotation - #71

Merged
stasadev merged 1 commit into
mainfrom
20261002_stasadev_homebrew_landlock
Oct 2, 2026
Merged

stasadev merged 1 commit into
mainfrom
20261002_stasadev_homebrew_landlock

Conversation

@stasadev

@stasadev stasadev commented Oct 2, 2026

Copy link
Copy Markdown
Member

The Issue

Every run shows a Homebrew warning annotation, "Landlock ABI 10 or later is required to deny all network access; found ABI 7". Homebrew sandboxes package unpacking with Landlock, and fully blocking network access needs ABI 10, which first ships in Linux 7.2. GitHub's Ubuntu runners have an older kernel, so every brew install warns, and brew turns the warning into an annotation in GitHub Actions. Brew has no setting to turn it off.

How This PR Solves The Issue

The three brew install calls in action.yaml filter that one line out of brew's stderr with 2> >(grep -vF 'or later is required to deny all network access' >&2), the same filter as ddev/ddev#8893. Other brew warnings and errors still show, and a failed install still fails the step. A comment notes the filter can be removed once Ubuntu runners have Linux 7.2+.

Manual Testing Instructions

Open this PR's workflow runs. The Landlock warning should no longer appear in the annotations or in the "Environment setup" and "Install ddev stable" step output.

Automated Testing Overview

No new tests. This only changes setup output, and this PR's own workflow runs exercise it.

Release/Deployment Notes

Don't create releases manually. Follow the release process documentation when making a new release.

## The Issue

- Related to ddev/ddev#8893

Every run shows a Homebrew warning annotation, "Landlock ABI 10 or later is required to deny all network access; found ABI 7". Homebrew sandboxes package unpacking with Landlock, and fully blocking network access needs ABI 10, which first ships in Linux 7.2. GitHub's Ubuntu runners have an older kernel, so every `brew install` warns, and brew turns the warning into an annotation in GitHub Actions. Brew has no setting to turn it off.

## How This PR Solves The Issue

The three `brew install` calls in `action.yaml` filter that one line out of brew's stderr with `2> >(grep -vF 'or later is required to deny all network access' >&2)`, the same filter as ddev/ddev#8893. Other brew warnings and errors still show, and a failed install still fails the step. A comment notes the filter can be removed once Ubuntu runners have Linux 7.2+.

## Manual Testing Instructions

Open this PR's workflow runs. The Landlock warning should no longer appear in the annotations or in the "Environment setup" and "Install ddev stable" step output.

## Automated Testing Overview

No new tests. This only changes setup output, and this PR's own workflow runs exercise it.

## Release/Deployment Notes

Don't create releases manually. Follow the [release process documentation](https://github.com/ddev/github-action-add-on-test/blob/main/docs/DEVELOPER.md#release-process) when making a new release.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@stasadev
stasadev merged commit d614651 into main Oct 2, 2026
6 of 9 checks passed
@stasadev
stasadev deleted the 20261002_stasadev_homebrew_landlock branch October 2, 2026 16:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant