Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

Dstack-TEE / dstack Public

Notifications You must be signed in to change notification settings
Fork 91
Star 520

Code
Issues 35
Pull requests 17
Discussions
Actions
Projects
Security and quality 1
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights

os: add experimental reproducible Debian/mkosi backend#816

Open

kvinwang wants to merge 89 commits into

masterDstack-TEE/dstack:masterfrom

feat/experimental-mkosi-osDstack-TEE/dstack:feat/experimental-mkosi-osCopy head branch name to clipboard

Conversation Commits89 (89)Checks Files changed

Open

os: add experimental reproducible Debian/mkosi backend#816
kvinwang wants to merge 89 commits into
masterfrom
feat/experimental-mkosi-os

Commits

Commits on Jul 22, 2026

os: add experimental reproducible mkosi backend
kvinwang
committed
ci: fix mkosi REUSE and shell checks
kvinwang
committed
feat(os): align mkosi backend with Yocto guest stack
kvinwang
committed
ci: preserve generated patch whitespace
kvinwang
committed
fix(os): make mkosi builds reproducible
kvinwang
committed

Commits on Jul 23, 2026

fix(os): add SEV-SNP measurement artifacts
kvinwang
committed
ci(os): annotate SEV OVMF environment source
kvinwang
committed
feat(os): add opt-in mkosi development cache
kvinwang
committed
fix(os): include host packages in dev cache key
kvinwang
committed
refactor(os): encapsulate mkosi component caching
kvinwang
committed
fix(os): strip production kernel module debug data
kvinwang
committed
fix(os): prune non-runtime production payload
kvinwang
committed
fix(os): strip modules one file at a time
kvinwang
committed
fix(os): regenerate indexes after merging module stages
kvinwang
committed
fix(os): expose usr-merged modules to final depmod
kvinwang
committed
ci(os): check duplicate guest OVMF explicitly
kvinwang
committed
refactor(os): make mkosi components self-describing
kvinwang
committed
refactor(os): colocate mkosi component definitions
kvinwang
committed
fix(os): satisfy component merger lint
kvinwang
committed
fix(os): include all component patches in cache keys
kvinwang
committed
fix(os): generate module indexes only after assembly
kvinwang
committed
fix(os): default direct mkosi builds to production
kvinwang
committed
fix(os): make UKI EFI filesystem reproducible
kvinwang
committed
fix(os): bound NVIDIA download stalls
kvinwang
committed
test(os): compare UKI reproducibility output
kvinwang
committed
test(os): cover component key propagation
kvinwang
committed
refactor(os): build mkosi components in pinned toolchain
kvinwang
committed
fix(os): apply snapshot through mkosi tools config
kvinwang
committed
fix(os): locate extracted Rust installers
kvinwang
committed
fix(os): allow locked Rust fetches in clean build roots
kvinwang
committed
fix(os): include bzip2 in mkosi build root
kvinwang
committed
fix(os): ignore archive owners in mkosi sandbox
kvinwang
committed
fix(os): select Python 3 before building OVMF tools
kvinwang
committed
fix(os): rebuild pinned tools for production images
kvinwang
committed
refactor(os): initialize production tools tree once
kvinwang
committed
fix(os): retry pinned OVMF submodule fetches
kvinwang
committed
ci(os): verify mkosi output against local baseline
kvinwang
committed
ci(os): run mkosi verification on hosted runner
kvinwang
committed
ci(os): bootstrap hosted mkosi verification
kvinwang
committed
ci(os): use Python 3.13 for mkosi
kvinwang
committed
ci(os): install mkosi from pinned upstream commit
kvinwang
committed
ci(os): install Debian archive keyring
kvinwang
committed
ci(os): run mkosi with hosted-runner privileges
kvinwang
committed
ci(os): use distro Python for linkage checks
kvinwang
committed
fix(os): stabilize Rust code generation across hosts
kvinwang
committed
fix(os): normalize initramfs ownership
kvinwang
committed
fix(os): normalize mkosi skeleton modes
kvinwang
committed
fix(os): source UKI metadata from image
kvinwang
committed
fix(os): load UKI metadata file contents
kvinwang
committed
ci(os): refresh cross-host mkosi baseline
kvinwang
committed
ci(os): correct reproducibility revision
kvinwang
committed
fix(os): pass source revision into hermetic build
kvinwang
committed
ci(os): update reproducible mkosi hashes
kvinwang
committed
ci(os): retain mkosi checksum diagnostics
kvinwang
committed
fix(os): use a canonical build umask
kvinwang
committed
fix(os): exclude host ACLs from rootfs
kvinwang
committed
ci(os): verify canonical hosted mkosi output
kvinwang
committed
fix(os): serialize reproducible rootfs compression
kvinwang
committed
fix(os): remove privilege-dependent runtime state
kvinwang
committed
ci(os): refresh serialized mkosi baseline
kvinwang
committed
fix(os): pin rootfs assembly binaries
kvinwang
committed
ci(os): verify pinned rootfs assembly baseline
kvinwang
committed
ci(os): retain canonical rootfs manifest
kvinwang
committed
fix(os): normalize service override modes
kvinwang
committed
ci(os): verify normalized rootfs baseline
kvinwang
committed
ci(os): make mkosi verification manual only
kvinwang
committed

Commits on Jul 24, 2026

build(os): compile image tools inside mkosi
kvinwang
committed
refactor(os): assemble outputs in mkosi hooks
kvinwang
committed
refactor(os): use mkosi profiles and content policy
kvinwang
committed
ci(os): delegate build setup to mkosi
kvinwang
committed
refactor(os): use presets and tmpfiles for image policy
kvinwang
committed
refactor(os): decouple skeleton modes from git metadata
kvinwang
committed
refactor(os): disable unused native boot artifacts
kvinwang
committed
fix(os): bypass component keys in production builds
kvinwang
committed
fix(os): retain mkosi lifecycle for release outputs
kvinwang
committed
fix(os): pass source revision into mkosi sandbox
kvinwang
committed
build(os): minimize mkosi tools-tree profile
kvinwang
committed
fix(os): manifest development cache sources on host
kvinwang
committed
build(os): disable unused split artifacts
kvinwang
committed
docs(os): define native mkosi boundary
kvinwang
committed
docs(os): record skeleton mode normalization
kvinwang
committed
ci(os): refresh mkosi reproducibility baseline
kvinwang
committed
style(os): satisfy ruff source formatting
kvinwang
committed
ci(os): retain rootfs diagnostics on mismatch
kvinwang
committed
fix(os): normalize volatile rootfs directories
kvinwang
committed
style(os): normalize directory marker files
kvinwang
committed
fix(os): ignore removed directory markers in finalize
kvinwang
committed
fix(os): normalize package state directory modes
kvinwang
committed
ci(os): update normalized rootfs baseline
kvinwang
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.