[BUG] Canonical release-image CI gate fails before evidence parsing #47

New issue

Open

opened 2026-09-14 07:36:09 +02:00 by erikinkinen · 0 comments

erikinkinen commented

2026-09-14 07:36:09 +02:00

Owner

Summary

The canonical release-image gate returns wrapper status 1 in CI 1595 and CI 1602, after all 486 catalog scenarios, canonical development boot and both native-ls input routes pass. Later interactive release gates are not reached. The underlying runner stage and cause remain unknown.

Reproduction

Observed in retained original CI; no new VM rerun or failure-frequency estimate.

./tests/release-image-interactive-vm.sh

The original workflow prepares its pinned graph and packaged release disk first. The wrapper delegates to canonical-image-vm.sh release, uses a private writable disk and matching OVMF pair, and selects the physical canonical-shell profile.

Expected and actual behavior

Expected behavior is a successful canonical release boot and evidence validation. Actual output is error: canonical image VM failed with status 1. The canonical wrapper returns before its evidence parser. The available public log does not identify an injector exit, stall, raw QEMU exit or failed guest command.

Environment and identity

CI 1595, push, original Integration 37299e719d7662698593c6d3be24752309bed7ec.
CI 1602, pull_request, original Integration 47c27a1614c02323db7bbebfdbd0ca6b09bc9d45.

The workflow selects its original pinned component graph and x86_64 QEMU/OVMF images. Complete CI logs and original wrappers were inspected. Image/firmware artifact bytes and inner runner receipts were not downloaded; their exact digests and the guest cause remain unverified. Existing 120-second total, 15-second serial-progress and 10-second input-command limits remain unchanged.

Evidence and prior checks

The retained errors occur at 09:30:30 UTC in CI 1595 and 13:15:03 UTC in CI 1602 on September 13. Independent push CI 1601 passes at the same source as PR CI 1602; that pass does not explain or resolve the failed PR run.

Rust and Markdown jobs pass. Complete logs are retained with no compiler/lint warning candidates. No unchanged retry, cancellation, dispatch or threshold adjustment was performed for this report.

Tracking

This is the release counterpart to development-image issue #40. Preserve the distinction and obtain invocation-correlated runner evidence before assigning a cause. Keep existing boot and cleanup assertions.

## Summary The canonical release-image gate returns wrapper status 1 in CI 1595 and CI 1602, after all 486 catalog scenarios, canonical development boot and both native-ls input routes pass. Later interactive release gates are not reached. The underlying runner stage and cause remain unknown. ## Reproduction Observed in retained original CI; no new VM rerun or failure-frequency estimate. ```sh ./tests/release-image-interactive-vm.sh ``` The original workflow prepares its pinned graph and packaged release disk first. The wrapper delegates to canonical-image-vm.sh release, uses a private writable disk and matching OVMF pair, and selects the physical canonical-shell profile. ## Expected and actual behavior Expected behavior is a successful canonical release boot and evidence validation. Actual output is `error: canonical image VM failed with status 1`. The canonical wrapper returns before its evidence parser. The available public log does not identify an injector exit, stall, raw QEMU exit or failed guest command. ## Environment and identity - [CI 1595](https://git.erikinkinen.fi/erix/integration/actions/runs/1595), push, original Integration `37299e719d7662698593c6d3be24752309bed7ec`. - [CI 1602](https://git.erikinkinen.fi/erix/integration/actions/runs/1602), pull_request, original Integration `47c27a1614c02323db7bbebfdbd0ca6b09bc9d45`. The workflow selects its original pinned component graph and x86_64 QEMU/OVMF images. Complete CI logs and original wrappers were inspected. Image/firmware artifact bytes and inner runner receipts were not downloaded; their exact digests and the guest cause remain unverified. Existing 120-second total, 15-second serial-progress and 10-second input-command limits remain unchanged. ## Evidence and prior checks The retained errors occur at 09:30:30 UTC in CI 1595 and 13:15:03 UTC in CI 1602 on September 13. Independent push CI 1601 passes at the same source as PR CI 1602; that pass does not explain or resolve the failed PR run. Rust and Markdown jobs pass. Complete logs are retained with no compiler/lint warning candidates. No unchanged retry, cancellation, dispatch or threshold adjustment was performed for this report. ## Tracking This is the release counterpart to [development-image issue #40](https://git.erikinkinen.fi/erix/integration/issues/40). Preserve the distinction and obtain invocation-correlated runner evidence before assigning a cause. Keep existing boot and cleanup assertions.

erikinkinen added the

bug

phase-6

labels

2026-09-14 07:36:09 +02:00

~~erikinkinen referenced this issue 2026-09-14 07:36:11 +02:00~~

WIP: Coordinate native authority, shell workspace and source transport #12

~~erikinkinen referenced this issue from erix/docs 2026-09-14 07:57:37 +02:00~~

WIP: Document native authority and verify workspace and command evidence #4