Author	SHA1	Message	Date
pat-s	1362e0bd3a	fix(alpine): build R with cairo, png, jpeg and tiff graphics devices (#9) ... ## Motivation R on the Alpine images was built without graphics support: `capabilities()` reports `cairo`, `png`, `jpeg` and `tiff` as `FALSE`, while Ubuntu reports all four `TRUE`. The images install `R-dev` but never the graphics headers, and R's `configure` treats those as optional and does not fail when they are absent, so the build succeeds and ships an R that cannot draw. Reproduced in a clean `alpine:3.22` container with the old package set: ``` Additional capabilities: PNG, NLS, ICU Capabilities skipped: JPEG, TIFF, cairo ``` One correction to the original diagnosis: `--with-x=no` was not the cause, and libpng was in fact found. R's bitmap and `pangocairo` checks run independently of `R_X11` (`configure.ac:2604` gates on `want_cairo`, not `use_X11`). `capabilities("png")` needs a device *backend*, and with X11 off and cairo absent there was none, which is why all four read `FALSE` despite configure listing PNG. So the fix is purely the missing `-dev` packages. X11 stays off, which is correct for headless images, and cairo covers `png()` / `jpeg()` / `tiff()` / `svg()`. ## Changes - `builder/Dockerfile.alpine-{320,321,322,323,324}` — install `pkgconf cairo-dev pango-dev fontconfig-dev freetype-dev libpng-dev jpeg-dev tiff-dev zlib-dev`; pass `--with-cairo --with-libpng --with-jpeglib --with-libtiff` explicitly so the intent sits next to `--with-x=no`; set `REQUIRED_CAPABILITIES`. - `builder/build.sh` — add `verify_capabilities()` between `compile_r` and `package_r`. A build that loses a graphics device now fails instead of being packaged and uploaded. Opt-in via `REQUIRED_CAPABILITIES`, so every non-Alpine platform is untouched. - `.crow/build.yaml` — add a `FORCE_REBUILD` escape hatch to the dedup step. Artifact filenames carry only the R version, so the HEAD probe would otherwise keep skipping every Alpine version and serving the stale broken binaries. - `CLAUDE.md` — record the three gotchas. ## Verification Compiled R 4.5.1 in the patched `alpine-322` image, through the real `build.sh`: ``` jpeg png tiff tcltk X11 aqua TRUE TRUE TRUE TRUE FALSE FALSE NLS Rprof profmem cairo ICU long.double TRUE TRUE TRUE TRUE TRUE TRUE All required capabilities are present. ``` The devices actually render, not just report `TRUE` (`default bitmapType: cairo`): ``` png -> t.png (2154 bytes) jpeg -> t.jpeg (4489 bytes) tiff -> t.tiff (120160 bytes) svg -> t.svg (9381 bytes) ``` The guard was exercised in both directions against that real build: it passes on the four graphics capabilities, and returns non-zero naming the missing entry when additionally asked for `X11`. `crow lint .crow/` passes and `bash -n builder/build.sh` is clean. ## Behaviour change Alpine R binaries gain the cairo, png, jpeg and tiff devices, and link against `libcairo`, `libpangocairo`, `libpng`, `libjpeg` and `libtiff`. The `.apk` metadata already declared those runtime dependencies, so consumer images need no change. Any Alpine build that loses a graphics device now fails the pipeline rather than uploading silently. **Needs a follow-up after merge:** the first run must have `FORCE_REBUILD` set, otherwise dedup skips every existing Alpine version and the broken artifacts stay in the bucket. Reviewed-on: #9	2026-09-18 07:04:22 +00:00
pat-s	8eacc0ab47	fix(ci): use bare shell vars in existing-version check (crow ${VAR} substitution) ... The merged HEAD-probe check still rebuilt everything: crow runs its own ${VAR} substitution over the commands before the shell executes, so the shell variables ${BASE} and ${VERSION} were blanked to empty (only matrix vars resolve at that stage). Every probed URL was therefore malformed and returned non-200, leaving r-versions-existing.txt empty. Use bare $name for shell variables and build the filename with printf, which avoids the ${VERSION}_1 brace requirement entirely. Matrix vars (${PLATFORM}, ${PLATFORM_ID}, ${ARCH_ID}) keep braces since crow resolves those correctly. Verified URL construction against the live bucket for apk, deb and rpm.	2026-06-29 14:15:55 +02:00
pat-s	ca336c2720	fix(ci): detect existing R versions via public object HEAD probe (#8) ... The existing-version check listed the bucket with an anonymous curl, but Backblaze B2 requires authentication for the list-bucket API, so it returned AccessDenied and r-versions-existing.txt was always empty -> every version was rebuilt despite already existing in s3. Signing the request is not workable here: the B2 credentials are scoped to the plugin-s3 image in crow and are not injected into this plain alpine step (curl saw --user ":"). Individual artifacts are public-read, so probe each expected object URL with an anonymous HEAD instead of listing the bucket. The filename mirrors what nfpm produces (version/release pinned to 1): r-<ver>_1_<arch>.{apk,deb} for alpine/ubuntu and R-<ver>-1-1.<arch>.rpm for el*. Verified against the live bucket for all three packager families. Reviewed-on: #8	2026-06-29 12:11:03 +00:00
pat-s	1e278cdb3a	fix(ci): authenticate B2 list-bucket request in existing-version check (#7) ... Backblaze B2 requires authentication for the list-bucket API; anonymous access only works for individual public-read objects. The unauthenticated curl returned AccessDenied, so r-version-s3.txt was always empty and every R version was rebuilt despite already existing in s3. Sign the listing request with --aws-sigv4 using the same B2 credentials as the upload step. Also fix the broken version extraction: the old substr($NF, 3, 5) ran against the prefixed key and yielded garbage, so the Build step's grep could never match. Print the actual version on a match and use a literal index() instead of a regex comparison. Reviewed-on: #7	2026-06-29 11:02:04 +00:00
pat-s	56c75e2df0	ci: build last four minor R versions instead of only the latest (#6) ... ## Summary The crow build pipeline previously built only the single latest stable R version (from the brew formula). It now builds the latest patch release of each of the **last four minor R versions** and uploads any that are missing from S3, so older supported minors stay available rather than only the newest stable. - **Get R versions to build**: derive the four versions from posit's `versions.json` (the same source upstream's `test/get_r_versions.py` uses) via jq — keep only `x.y.z` releases, take the latest patch per minor, then the top four minors (e.g. `4.6.0, 4.5.3, 4.4.3, 4.3.3`). - **Check which R versions already exist in s3**: iterate the four versions against the S3 listing for the platform/arch. - **Build**: build only the versions that are missing. In steady state nothing builds; when a new minor lands, only that one is built. ## awk fix The existence check used an awk regex (`$0 ~ ver`), so the unescaped dots in a version made `4.4.3` spuriously match `4.3.3` (the substring `4/4.3` satisfies the pattern). Harmless with a single version, but across four adjacent versions it would wrongly skip builds. Switched to literal substring matching via awk `index($0, ver)`. Reviewed-on: #6	2026-06-12 17:16:43 +00:00
pat-s	d34684260f	feat: add alpine-3.24 build config (#5) ... ## Summary Adds an `alpine-3.24` build configuration, mirroring the existing `alpine-3.23` setup. - `builder/Dockerfile.alpine-324` — `FROM alpine:3.24`, `OS_IDENTIFIER=alpine-324`, copies `package.alpine-324` - `builder/package.alpine-324` — nfpm spec (identical to 323) - `builder/docker-compose.yml` — new `alpine-324` service - `Makefile` `PLATFORMS` and `Justfile` `build-r-alpine-324` target - `.crow/build.yaml` — alpine-324 matrix entries (arm64 + amd64), newest-first Existing alpine-322/323 matrix entries are left intact. Reviewed-on: #5	2026-06-12 13:46:11 +00:00
pat-s	4c63350f7d	ci: clamp MTU to 1280 in all alpine steps and DinD service ... Path MTU to external destinations is ~1280 from the new cluster (PMTUD broken upstream, packets >1280 are silently dropped). Force eth0 MTU to 1280 at the start of every step (needs privileged), drop the DinD inner bridge from 1420 to 1280, and wrap each apk add in a short retry loop to absorb any remaining transient failures. Workflow-side workaround; the proper fix is to lower the CNI/host docker daemon MTU at the infra layer.	2026-05-13 21:47:44 +02:00
pat-s	22d8a945d5	ci: add temporary Net debug step for MTU/connectivity diagnosis	2026-05-13 21:38:21 +02:00
pat-s	4695bd08b7	fix: stabilize alpine CI steps ... - Fetch R version from Homebrew JSON API with jq instead of scraping the raw formula (was silently producing an empty version file that propagated to downstream steps). - Replace grep -oP with grep -oE in the S3 listing step; BusyBox grep in the alpine image has no Perl-regex support. - Add ephemeral-storage requests/limits to the Build step so the docker-cli apk extract doesn't fail with I/O errors under node disk pressure.	2026-05-13 16:48:08 +02:00
pat-s	090bf0a1eb	ci: migrate from Hetzner to Backblaze	2026-04-29 14:32:34 +02:00
pat-s	782707f352	feat: add Ubuntu 26.04 (Resolute) support ... Add Dockerfile, package script, and CI/build configuration for ubuntu-2604 across all build targets.	2026-04-24 13:20:25 +02:00
pat-s	db4f305877	fix: replace aws-cli with curl for S3 checks to avoid python3 dependency issues on Alpine 3.23	2026-04-24 12:46:57 +02:00
pat-s	e75479069e	chore: remove tolerations	2026-03-22 11:01:32 +01:00
pat-s	528708c087	ci: don't limit instance types	2026-03-22 11:00:32 +01:00
pat-s	42969daeb1	chore: proxy cache name	2025-12-06 12:04:31 +01:00
pat-s	a8e38ea55d	chore: remove alpine 321, add 323	2025-12-06 12:01:19 +01:00
pat-s	b888251fa2	ci: prefix endpoint with https	2025-12-01 10:44:32 +01:00
automation-bot	afe42a1540	chore(deps): update reg.devxy.io/proxy_cache/woodpeckerci/plugin-s3 docker tag to v1.5.2	2025-10-01 00:07:36 +00:00
pat-s	5c9b97b5dd	use reg.devxy.io/proxy_cache	2025-09-02 11:23:00 +02:00
automation-bot	1f55c66522	chore(deps): update woodpeckerci/plugin-s3 docker tag to v1.5.1	2025-07-24 00:04:07 +00:00
automation-bot	71e19230a6	chore(deps): update woodpeckerci/plugin-s3 docker tag to v1.5.0	2025-07-13 00:04:35 +00:00
automation-bot	b3db015543	chore(deps): update woodpeckerci/plugin-s3 docker tag to v1.4.0	2025-07-01 00:03:50 +00:00
pat-s	5d937e2cbf	build latest	2025-06-30 17:13:35 +02:00
automation-bot	6d332ec859	chore(deps): update woodpeckerci/plugin-s3 docker tag to v1.3.2	2025-06-14 00:02:56 +00:00
pat-s	d4a3f8405c	chore: build latest	2025-06-13 15:13:58 +02:00
pat-s	01f9378b4e	chore: build 4.1.3	2025-06-13 12:59:47 +02:00
pat-s	34dac66fc1	feat: use a single r-version-to-build.txt file	2025-06-13 12:56:40 +02:00
pat-s	4b3a87bbe4	chore: build 4.2.3	2025-06-13 12:40:20 +02:00
pat-s	e6ee8987d4	chore: build 4.3.3	2025-06-13 12:22:07 +02:00
pat-s	12c221c14f	feat: add rhel10	2025-06-03 17:38:55 +02:00
pat-s	94184582c9	chore: build alpine 3.22	2025-06-01 12:22:53 +02:00