Repository navigation

Ingest and staged publish paths, reliable spool, hardening - #2

Merged

pbuncic merged 128 commits into

masterfrom

fix/release-hardening

Oct 11, 2026

Merged

Ingest and staged publish paths, reliable spool, hardening#2
pbuncic merged 128 commits into
masterfrom
fix/release-hardening

Commits on Jun 19, 2026
- Clean up REFERENCE.md by removing legacy content
  pbuncic
  authored
  a958196
Commits on Jun 24, 2026
- REFERENCE.md: correct technical facts per review
  Test
  committed
  1c156b7
Commits on Jun 25, 2026
Commits on Jul 1, 2026
- lease: target dedicated gateway graft endpoint for DirectGraft
  vvolkl
  committed
  32497b0
Commits on Jul 5, 2026
- add ci
  vvolkl
  committed
  149f053
Commits on Jul 11, 2026
Commits on Jul 12, 2026
Commits on Jul 13, 2026
Commits on Jul 16, 2026
- prepub: enforce CVMFS publish-namespace containment
  pbuncic
  committed
  8d7ed82
Commits on Jul 22, 2026
- security: harden local-mode extraction + API/OIDC from the pre-release review
  pbuncic
  committed
  c334d43
Commits on Jul 26, 2026
Commits on Jul 27, 2026
Commits on Jul 28, 2026
Commits on Jul 29, 2026
- config: make the coarse-publish finalize configurable, and say when it is not
  pbuncic
  committed
  e9f85f3
- gitignore: also ignore archives and copied CVMFS config trees
  pbuncic
  committed
  ceb5653
Commits on Jul 30, 2026
Commits on Jul 31, 2026
Commits on Aug 10, 2026
Commits on Aug 11, 2026
- lease: kill the whole cvmfs_server process group on cancel
  pbuncic
  committed
  a74e6eb
- lease: fix three defects found reviewing a74e6eb
  pbuncic
  committed
  a36ff49
- lease: make the interrupted-publish class deterministic; detach rollbacks
  pbuncic
  committed
  4f20512
- ingest: per-job --direct-s3
  pbuncic
  committed
  8bc05d6
Commits on Aug 12, 2026
- cas/s3: size the S3 keep-alive pool to the pipeline's concurrency
  pbuncic
  committed
  5d219b2
- lease: collect the object list over an inherited pipe
  pbuncic
  committed
  60e0e35
- api: accept object_list on the ingest path
  pbuncic
  committed
  36d58ad
Commits on Aug 13, 2026
- api: stop two submitJob tests racing the job goroutine
  pbuncic
  committed
  501881a
- cas: promote a staged object prefix into the CAS, server-side
  pbuncic
  committed
  86d1895
- api: accept staged-publish fields (staging_prefix, catalog_hash)
  pbuncic
  committed
  ae65d67
- api: publish a staged job by promoting and grafting
  pbuncic
  committed
  6ead2e2
- api: create parent directories for a staged publish
  pbuncic
  committed
  0f685dc
- api: promote staged objects before taking the lease and the lock
  pbuncic
  committed
  5550819
- api: apply the serialize-until-published barrier to staged jobs
  pbuncic
  committed
  f2eb51e
Commits on Aug 14, 2026
- api: record what a staged publish moved
  pbuncic
  committed
  1e8065e
Commits on Aug 15, 2026
Commits on Aug 16, 2026
- prepub: make the staged-path promote concurrency configurable
  pbuncic
  committed
  fca7af9
Commits on Aug 18, 2026
- api,lease: replace_on_conflict on the staged publish path
  pbuncic
  committed
  f63fcdc
Commits on Aug 20, 2026
- api: make the measurements endpoint public (no auth)
  pbuncic
  committed
  42b61c3
- prepub: default the tuning knobs from env (.env-driven)
  pbuncic
  committed
  80ce38b
- prepub: log a publisher-tuning banner at startup
  pbuncic
  committed
  e3a7a96
- prepub: also default min/max-concurrent-jobs from env
  pbuncic
  committed
  5c58320
Commits on Sep 1, 2026
- Fail closed on OIDC issuers without an audience (security review H3)
  pbuncic
  committed
  efbf0c3
- Require per-node broker keys; receivers never hold the master (H2)
  pbuncic
  committed
  3c067fa
- Rename PREPUB_NODE_KEY -> S1_NODE_KEY
  pbuncic
  committed
  31b3f38
- LRU eviction for the IP rate limiter (security review M3)
  pbuncic
  committed
  27fa8d5
Commits on Sep 29, 2026
- jobs list: include accumulated (coarse) jobs; omit unset timestamps
  pbuncic
  committed
  bacfd27
- published endpoint: is a path published, and by which build hash
  pbuncic
  committed
  421e194
Commits on Sep 30, 2026
Commits on Oct 1, 2026
Commits on Oct 3, 2026
Commits on Oct 4, 2026
- Pre-warm from the ingest object list; opt-in on node and job
  pbuncic
  committed
  b23f3b8
Commits on Oct 5, 2026
- prepub: replace only another build's content, when the job asks
  pbuncic
  committed
  dd3d03b
- prepub: lock_wait_s measurement and a published-catalog cache
  pbuncic
  committed
  9dcd7e5
Commits on Oct 6, 2026
Commits on Oct 7, 2026
- measure: record host, direct_s3 and object_list per publish
  pbuncic
  committed
  2360924
- install.sh: write CVMFS_S3_REPO_ALIAS, the prefix the direct-S3 ingest writes under
  pbuncic
  committed
  4c14332
Commits on Oct 10, 2026
- POST /api/v1/published/files: batch-read published .meta.json/.bits-view.json
  pbuncic
  committed
  6210c26

Commits

Commits on Jun 19, 2026

Commits on Jun 24, 2026

Commits on Jun 25, 2026

Commits on Jul 1, 2026

Commits on Jul 5, 2026

Commits on Jul 11, 2026

Commits on Jul 12, 2026

Commits on Jul 13, 2026

Commits on Jul 16, 2026

Commits on Jul 22, 2026

Commits on Jul 26, 2026

Commits on Jul 27, 2026

Commits on Jul 28, 2026

Commits on Jul 29, 2026

Commits on Jul 30, 2026

Commits on Jul 31, 2026

Commits on Aug 10, 2026

Commits on Aug 11, 2026

Commits on Aug 12, 2026

Commits on Aug 13, 2026

Commits on Aug 14, 2026

Commits on Aug 15, 2026

Commits on Aug 16, 2026

Commits on Aug 18, 2026

Commits on Aug 20, 2026

Commits on Sep 1, 2026

Commits on Sep 29, 2026

Commits on Sep 30, 2026

Commits on Oct 1, 2026

Commits on Oct 3, 2026