Skip to content

Cross Platform Action 1.5.0

Choose a tag to compare

@github-actions github-actions released this 28 Aug 19:08
· 6 commits to master since this release
Immutable release. Only release title and notes can be modified.

Changed

  • NetBSD images download around 45% smaller -- 11.0 x86-64 goes from 497 MiB to
    268 MiB -- which is most of what a NetBSD job spends on setup
    (#151)
  • Every guest becomes usable sooner, by up to 8 seconds, because the action no
    longer waits on a readiness probe it sent before the guest was listening
  • NetBSD guests are logged into without a credential, so no SSH key is generated
    and no resources disk is built to carry one. A custom image supplied through
    image_url still gets both, since it may expect them

Added

  • Add support for Haiku R1/beta6
    (#165)
  • A variant input, selecting a named configuration of a platform. Defaults to
    default, which boots exactly as before, so no existing workflow changes.
    See Variants
  • The microvm variant for NetBSD on x86-64, which reaches a usable guest in
    roughly half the time. It is opt-in because it changes the hardware the guest
    sees: the root disk becomes ld0 rather than sd0, there is no PCI bus to
    inspect, and uname -v reports a MICROVM kernel. Asking for it where it
    cannot be booted is an error, not a slow boot
  • Log a breakdown of how long each phase of setting up the VM took, together
    with how long the VM took to become reachable over SSH

Fixed

  • 5-level paging (LA57) is no longer exposed to the guests on x86-64
    (#158).
    FreeBSD 13.0 enables 5-level paging whenever the CPU reports it and panics
    in the trampoline that switches to it, so every job that landed on an Intel
    runner from Ice Lake onwards failed to boot
  • STIBP always-on mode is no longer exposed to the guests on x86-64
    (#158). Some
    of the AMD runners report it without the STIBP and IBRS bits that normally
    come with it, which made DragonFly BSD write IA32_SPEC_CTRL and take a
    general protection fault while booting

Security

  • The guest's SSH port is only forwarded to the runner's loopback address. It was
    previously bound to every interface, making the guest reachable from anything
    that could reach the runner