[Copilot]

The riscv64 CI runtime bootstrap fails with E: Couldn't find these debs: musl when building the unified QEMU runtime root from Ubuntu ports. This PR switches the debootstrap source to a distro/arch combination that provides musl for riscv64.

• Problem

  • Current debootstrap inputs request musl on a source that does not resolve for the riscv64 CI path, causing runtime root provisioning to fail early.

• Change

  • Update riscv64 debootstrap inputs in .github/workflows/ci.yml:
    • suite: jammy → trixie
    • mirror: http://ports.ubuntu.com/ubuntu-ports → https://deb.debian.org/debian
  • Keep runtime composition unchanged (libc6,libgcc-s1,musl) and keep output path unchanged (/opt/riscv64-linux-runtime).

• Scope

  • Only the debootstrap source/suite and adjacent comment were changed.
  • No changes to linker env, target matrix, or sccache flow.

sudo debootstrap \
  --arch=riscv64 \
  --foreign \
  --variant=minbase \
  --include=libc6,libgcc-s1,musl \
  trixie /opt/riscv64-linux-runtime \
  https://deb.debian.org/debian

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• launchpad.net
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)
• packages.ubuntu.com
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)
• ports.ubuntu.com
  • Triggering command: /usr/bin/curl curl -fsSL REDACTED (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.