alvinlollo 5ffd5d0d82 ci: pin SOURCE_DATE_EPOCH, assert ISO uuid metadata, verify uploads ...

- Export SOURCE_DATE_EPOCH before mkarchiso so label, volume UUID,
  file mtimes and ext4 hash seed trace to one timestamp.
- Post-build step: assert blkid UUID of the ISO matches every
  /boot/<uuid>.uuid stem and archisosearchuuid= reference inside
  shipped boot configs, and that no %ARCHISO% placeholder remains.
- After upload: re-hash local ISOs, size-check API assets, download
  each back from the internal origin (bypasses traefik/Anubis) with
  percent-encoded filenames (iso_name contains a space), compare
  SHA-256. Definitive corruption (missing/size/sha mismatch) deletes
  the release; transport/API errors fail without deleting.

2026-09-23 22:32:08 +10:00

..

build-iso.yaml

ci: pin SOURCE_DATE_EPOCH, assert ISO uuid metadata, verify uploads

2026-09-23 22:32:08 +10:00

tests.yaml

Fix CI: drop incorrect -c flag, fix word splitting in tests

2026-09-15 18:36:45 +10:00