build: lock OpenWrt SDKs for agent 0.6.2

This commit is contained in:
benya
2026-07-23 02:05:14 +03:00
parent b2b903bd47
commit c709255b17
15 changed files with 58 additions and 35 deletions
+4 -2
View File
@@ -143,8 +143,10 @@ The release matrix covers OpenWrt `21.02.7`, `22.03.7`, `23.05.5`, `24.10.7` and
- Raspberry Pi 4 (`bcm27xx/bcm2711`, ARM64);
- MediaTek Filogic (`mediatek/filogic`, ARM64) on supported releases.
The workflow resolves each SDK filename and SHA256 from the official OpenWrt mirror,
falling back to the OpenWrt archive for end-of-life branches. Releases through `24.10`
The workflow reads each official SDK URL and SHA256 from the reviewed
`.github/openwrt-sdk-lock.tsv` lock file. Updating an OpenWrt patch release requires
refreshing that file from the official `sha256sums`; Docker still verifies every SDK
archive before extraction and retries transient downloads. Releases through `24.10`
produce `.ipk`; `25.12` produces `.apk`. Manual runs retain each target as a workflow
artifact for 30 days. An `agent-v*` tag also creates a GitHub Release containing all packages and
a combined `SHA256SUMS`, a Sigstore signature bundle and native signed package feeds.