Repository navigation
Conversation
On 2026-11-09 GitHub answered anonymous release downloads with 504s, so install.sh and `hbench update` could not install anything. mirror.yml copies each published release to https://dl.nodeq.tech/hbench/<tag>/ (and hbench/latest, hbench/install.sh for the latest), and release.yml runs it after publishing. install.sh takes the latest tag and each file from the mirror when GitHub fails, still checking the archive against SHA256SUMS; `hbench update` fetches the script from the mirror when GitHub fails. HBENCH_MIRROR_ONLY=1 checks the mirror alone. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Hacktron Security Check - SkippedReason: Code Review is not active for this organization
|
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
On 2026-11-09 GitHub answered anonymous release downloads with 504s, so
hbench updateandinstall.shfailed (curl: (56) The requested URL returned error: 504).mirror.yml(new): copies a published release tohttps://dl.nodeq.tech/hbench/<tag>/after checking it againstSHA256SUMS; when the tag is GitHub's latest release, also writeshbench/install.shandhbench/latest(the tag, 5-minute cache).release.ymlcalls it after publishing;gh workflow run mirror.yml -f tag=vX.Y.Zruns it by hand. It runs in a newmirrorenvironment (refsmasterandv*tags) whose R2 token writes that bucket alone.install.sh: the latest tag and each file from GitHub first, from the mirror when GitHub fails; the archive is still checked againstSHA256SUMS.HBENCH_MIRROR_ONLY=1uses the mirror alone.hbench update: fetches the install script from the mirror when GitHub fails.docs/RELEASING.md.Depends on node-q/hpg-infra-cloud's bucket and token (branch
hbench-release-mirror, runbookdocs/runbooks/hbench-release-mirror.md) and themirrorenvironment's secretsR2_ENDPOINT,R2_ACCESS_KEY_ID,R2_SECRET_ACCESS_KEY. Until they exist the mirror job fails after the release is published; the release itself is unaffected.Users of v0.3.13 and earlier get the fallback only once a release with this
install.shis out: cut v0.3.14 after merging.Tested against a local stand-in for the mirror: GitHub failing (installs from the mirror), mirror only, both failing (clear error, exit 1), a changed
SHA256SUMS(refused), and thehbench updatecommand falling back.cargo test update::2 passed, clippy and fmt clean, actionlint clean, zizmor: one help-levelself-repositorynote on the localuses:, as the existing setup-rust step has. Not tested: the workflow against R2 (needs the bucket).🤖 Generated with Claude Code