Commit graph Vili/deployment/idunn
Author SHA1 Message Date
Meta Vens
6bdbc27c1c Fix: a listed BVH is opened non-blocking, and the work directory is a declared state slot swept at start (Soul s2 readinside-opens-before-checking, work-dir-undeclared-unswept)
readInside opens O_NONBLOCK|O_NOFOLLOW and checks the open descriptor before reading, so a FIFO is refused at once and holds no filesystem thread. work/ is a slot in the recipe; a daemon that holds the state root creates it and removes stale export-XXXXXX directories from it, nothing else, before it serves.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-25 01:45:14 +02:00
Meta Vens
2891f016bf Fix: the sealed Blender carries libx11-6, libxext6, libxcb1, libxau6, libxdmcp6, libbsd0 and libmd0 too (Soul s1 blender-uses-host-x-libs)
Seven sha256-pinned bookworm inputs from the recipe's snapshot, unpacked by the one unpack-blender-libs step.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-25 00:42:32 +02:00
Meta Vens
8479465cd1 Recipe: the Blender input has its own id; idunn validate refuses an input id that collides with an artifact id
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 21:08:28 +02:00
Meta Vens
0c34679bdc Recipe: Blender 5.2.2 and its nine Debian libraries are sealed in the release
Ten sha256-pinned external inputs, unpack-blender and unpack-blender-libs steps, the blender artifact (blender 0555),
VILI_BLENDER for test_bvh_to_fbx.py, jobs slot schema motion_job.v1.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 20:29:41 +02:00
Meta Vens
579873f317 Recipe: the python-build steps declare PATH and the pip flags they need
Idunn passes a runner only the environment a step lists in required_environment. The binding's PATH (the release
python tree first) was never listed, so python3.12 was not found in the first Idunn run (exit 127).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 13:44:00 +02:00
Meta Vens
33614b87b1 Recipe comment: say what the seal refuses without naming the forbidden tool
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 00:44:27 +02:00
Meta Vens
3b9c6c7525 Recipe: steps name python3.12, a program name; Idunn refuses a program with a path
The binding's python-build PATH puts the release tree's bin first.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 00:40:33 +02:00
Meta Vens
39dd5a9977 Recipe: drop pip check; --no-deps leaves kimodo's UI and SOMA-X's CUDA dependencies uninstalled by design
The import smoke is the proof the environment serves the worker.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 00:33:43 +02:00
Meta Vens
fd03693bc7 Idunn recipe, release assembler and the hash locks
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 00:26:19 +02:00
Meta Vens
f410338329 Lock inputs: build tools and the CPU worker's pinned runtime
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 00:25:07 +02:00