more updates

Author: Marko Vejnovic

.github/workflows/build-vmlinux.yml

@@ -16,7 +16,7 @@ jobs:
     outputs:
       matrix: ${{ steps.gen.outputs.matrix }}
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: turtlequeue/setup-babashka@d78ec6570aea3b614bc695cafcceb82eb45c2af9 # v1.8.0
         with:
           babashka-version: 1.12.218
@@ -35,7 +35,7 @@ jobs:
       fail-fast: false
       matrix: ${{ fromJson(needs.prepare.outputs.matrix) }}
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install build dependencies (cached)
         uses: awalsh128/cache-apt-pkgs-action@681749ae568c81c2037cb9185e38b709b261bd2f # v1.6.1
@@ -63,7 +63,7 @@ jobs:
     needs: build
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - uses: turtlequeue/setup-babashka@d78ec6570aea3b614bc695cafcceb82eb45c2af9 # v1.8.0
         with:

.github/workflows/lint.yml

@@ -10,9 +10,29 @@ jobs:
   clj-kondo:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - uses: DeLaGuardo/clojure-lint-action@2d6013175031096ae07bc9b90a07173029ad7dc9 # master
         with:
           clj-kondo-args: --lint src
           check-name: clj-kondo
           github_token: ${{ secrets.GITHUB_TOKEN }}
+
+  actionlint:
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - name: Check workflow files
+        run: |
+          bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
+          ./actionlint -color
+        shell: bash
+
+  format:
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: turtlequeue/setup-babashka@d78ec6570aea3b614bc695cafcceb82eb45c2af9 # v1.8.0
+        with:
+          babashka-version: 1.12.218
+      - name: Check formatting (zprint)
+        run: bb fmt check

.gitignore

@@ -1,9 +1,32 @@
-# Build scratch / staged artifacts
-/out/
-/work/
-*.tar.xz
-*.tar.gz
-# Local actionlint binary
-/actionlint
-# Controller scratch (progress ledger)
-/.superpowers/
+pom.xml
+pom.xml.asc
+*.jar
+*.class
+/lib/
+/classes/
+/target/
+/checkouts/
+.lein-deps-sum
+.lein-repl-history
+.lein-plugins/
+.lein-failures
+.nrepl-port
+.cpcache/
+
+.hgignore
+.hg/
+/.prepl-port
+/checkouts
+profiles.clj
+.idea/
+/.lein-*
+.idea/
+*.iml
+.vscode
+.lsp/*
+.clj-kondo/*
+!.clj-kondo/config.edn
+.calva/*
+
+/.shadow-cljs/
+node_modules/

README.md

@@ -2,3 +2,10 @@
 
 Firecracker-bootable Linux kernel builds, published as GitHub Releases, used as
 the default images in [Hyper](https://github.com/harmont-dev/hyper).
+
+Hyper allows you to provide your own `vmlinux` images. It is, however,
+convenient, not to have to worry about providing your `vmlinux` images, so by
+default, Hyper will fetch images from the [Github Releases of this
+repo](https://github.com/harmont-dev/hyper-vmlinux/releases). These are all
+checksummed in Hyper's implementation to mitigate the risk of a supply chain
+attack.

bb.edn

@@ -10,4 +10,8 @@
 
   release
   {:requires ([vmlinux.tasks.release :as release])
-   :task (apply release/-main *command-line-args*)}}}
+   :task (apply release/-main *command-line-args*)}
+
+  fmt
+  {:requires ([vmlinux.tasks.fmt :as fmt])
+   :task (apply fmt/-main *command-line-args*)}}}

src/vmlinux/tasks/fmt.clj

@@ -0,0 +1,18 @@
+(ns vmlinux.tasks.fmt
+  (:require [babashka.deps :as deps]
+            [babashka.fs :as fs]))
+
+(def ^:private opts {:width 100, :style :community})
+
+(defn- sources [] (map str (fs/glob "." "{src/**/*.clj,manifest.clj}")))
+
+(defn -main
+  [& args]
+  (deps/add-deps '{:deps {zprint/zprint {:mvn/version "1.2.9"}}})
+  (let [zprint (requiring-resolve 'zprint.core/zprint-file-str)
+        reformat (fn [f] (zprint (slurp f) f opts))]
+    (if (= "check" (first args))
+      (let [bad (filterv (fn [f] (not= (slurp f) (reformat f))) (sources))]
+        (when (seq bad) (run! (fn [f] (println "needs formatting:" f)) bad) (System/exit 1))
+        (println "format OK"))
+      (doseq [f (sources)] (spit f (reformat f))))))