Skip to content

fix(hf): verify kernels through exact git checkout - #356

Closed
Lutar, Stephen P. (stephenlutar2-hash) wants to merge 2 commits into
mainfrom
fix/hf-kernel-selfcheck-git-20260728
Closed

fix(hf): verify kernels through exact git checkout#356
Lutar, Stephen P. (stephenlutar2-hash) wants to merge 2 commits into
mainfrom
fix/hf-kernel-selfcheck-git-20260728

Conversation

@stephenlutar2-hash

@stephenlutar2-hash Lutar, Stephen P. (stephenlutar2-hash) commented Jul 28, 2026

Copy link
Copy Markdown
Member

Outcome

Completes the Hugging Face Kernel repair on top of merged #355. Kernel metadata, exact sparse-build checkout, CPU selfcheck, and terminal readiness now share one credential-safe authenticated Git transport; the broken Kernel API loader is no longer attempted.

Failure closed

  • requires an immutable 40-character revision before checkout
  • rejects main movement and verifies the checked-out HEAD
  • inventories the complete remote tree and checks the build-tree digest before and after terminal selfcheck
  • preserves the card/contract-only publication boundary
  • never uses generic repo_type=kernel, Kernel REST metadata, or get_kernel()
  • makes the transport byte-stable across host core.autocrlf settings
  • does not change workflows, rulesets, branch protection, secrets, Apps, or governance policy

Verification

  • py_compile for the controller, transport, readiness, and their tests
  • Kernel Git transport: 8 tests passed
  • release finalizer: 9 tests passed
  • terminal readiness: 9 tests passed
  • legacy finalizer: 4 tests passed
  • bounded retry adapter: 6 tests passed
  • git diff --check

The signed merge head incorporates current main without a rebase or force-push: 42fc178374a53ae2ed3792334ffe5ef7ccf0a24c.

Signed-off-by: Lutar, Stephen P. <stephenlutar2@gmail.com>

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3428c4666c

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "Codex (@codex) review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "Codex (@codex) address that feedback".

dataset, and Space repository types. First-class Kernel repositories therefore
use their native Git endpoint for card/contract publication while metadata is
bound independently through ``HfApi.kernel_info`` by the caller.
use their native Git endpoint for metadata, exact-revision execution, and

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Add the required DCO sign-off

Commit 793d966ef89dfd955f1880becf7bd66f7431c0ed has no Signed-off-by: trailer, so it does not satisfy this repository's requirement that every commit carry a DCO sign-off. Recreate the commit with a matching sign-off before merging.

AGENTS.md reference: AGENTS.md:L29-L34

Useful? React with 👍 / 👎.

Comment thread .github/scripts/kernel_hub_git.py Outdated
Comment on lines +238 to +239
with self._auth_environment() as env:
self._git(["checkout", "-q", "--detach", "FETCH_HEAD"], cwd=repo, env=env)

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Hydrate LFS objects before loading the local kernel

When a Kernel build contains Git LFS-tracked binaries, this checkout inherits _auth_environment()'s GIT_LFS_SKIP_SMUDGE=1, leaving pointer files rather than the executable artifacts that get_local_kernel() subsequently imports. The new exact-revision verification will therefore fail for otherwise valid kernels with large LFS-backed build outputs; materialization needs to allow smudging or explicitly fetch and check out the LFS objects before yielding the repository.

Useful? React with 👍 / 👎.

Signed-off-by: Lutar, Stephen P. <stephenlutar2@gmail.com>
@stephenlutar2-hash

Copy link
Copy Markdown
Member Author

Superseded by signed terminal-only PR #358. Publication finalizer run 30380686192 is already verified green, so the narrower current-main patch preserves that working lane while repairing only downstream readiness.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant