Amyhu/more updates to eager export

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @basetenlabs/runtime-fabric

.github/workflows/ci.yml

@@ -0,0 +1,48 @@
+name: CI
+
+on:
+  pull_request:
+    branches:
+      - v0.22-base
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+env:
+  GO_VERSION: "1.24"
+
+jobs:
+  lint:
+    name: Lint
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+          cache: false
+      - uses: golangci/golangci-lint-action@v7
+        with:
+          version: latest
+          args: --modules-download-mode=vendor
+          only-new-issues: true
+
+  unit-tests:
+    name: Unit Tests
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+          cache: true
+      - name: Run unit tests
+        run: |
+          go test -mod=vendor -count=1 -timeout 10m \
+            $(go list -mod=vendor ./... | grep -v -E '(worker/(containerd|runc)|cache$|cache/contenthash|snapshot$|source/(git|http)|util/overlay)$')
+        env:
+          SKIP_INTEGRATION_TESTS: "1"

.github/workflows/post-merge.yml

@@ -0,0 +1,94 @@
+name: Post-Merge
+
+on:
+  push:
+    branches:
+      - v0.22-base
+  workflow_dispatch:
+    inputs:
+      skip_integration_tests:
+        description: 'Skip integration tests'
+        required: false
+        type: boolean
+        default: false
+      skip_build:
+        description: 'Skip image build & push'
+        required: false
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+env:
+  GO_VERSION: "1.24"
+  SETUP_BUILDX_VERSION: "edge"
+  SETUP_BUILDKIT_IMAGE: "moby/buildkit:latest"
+  IMAGE_NAME: "baseten/buildkit"
+
+jobs:
+  integration-tests:
+    name: Integration Tests
+    if: ${{ !inputs.skip_integration_tests }}
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: crazy-max/ghaction-github-runtime@v3
+      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-buildx-action@v3
+        with:
+          version: ${{ env.SETUP_BUILDX_VERSION }}
+          driver-opts: image=${{ env.SETUP_BUILDKIT_IMAGE }}
+          buildkitd-flags: --debug
+      - name: Build integration test image
+        uses: docker/bake-action@v6
+        with:
+          targets: integration-tests
+          set: |
+            *.cache-from=type=gha,scope=integration-tests
+            *.cache-to=type=gha,scope=integration-tests,repository=${{ github.repository }},ghtoken=${{ secrets.GITHUB_TOKEN }}
+      - name: Run integration tests
+        run: ./hack/test integration
+        env:
+          TESTPKGS: ./client ./cmd/buildctl ./solver ./frontend
+          TESTFLAGS: "-v --parallel=6 --timeout=30m"
+          GOTESTSUM_FORMAT: standard-verbose
+          TEST_IMAGE_BUILD: "0"
+          CACHE_FROM: type=gha,scope=integration-tests
+
+  build-and-push:
+    name: Build & Push Image
+    if: ${{ !inputs.skip_build }}
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-buildx-action@v3
+        with:
+          version: ${{ env.SETUP_BUILDX_VERSION }}
+          driver-opts: image=${{ env.SETUP_BUILDKIT_IMAGE }}
+          buildkitd-flags: --debug
+      - uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Generate tag
+        id: tag
+        run: |
+          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
+          TIMESTAMP=$(date -u +%Y%m%d%H%M%S)
+          echo "tag=v0.22.0-${SHORT_SHA}-${TIMESTAMP}" >> $GITHUB_OUTPUT
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          target: buildkit
+          platforms: linux/amd64
+          tags: ${{ env.IMAGE_NAME }}:${{ steps.tag.outputs.tag }}
+          cache-from: type=gha,scope=build-image
+          cache-to: type=gha,scope=build-image,mode=max
+      - name: Print image
+        run: echo "Pushed ${{ env.IMAGE_NAME }}:${{ steps.tag.outputs.tag }}"

.golangci.yml

@@ -63,10 +63,14 @@ linters:
     gosec:
       excludes:
         - G101
+        - G115
+        - G118
+        - G120
+        - G122
         - G402
         - G504
         - G601
-        - G115
+        - G703
       config:
         G306: "0644"
     govet:
@@ -119,6 +123,7 @@ linters:
         text: if-return
     paths:
       - .*\.pb\.go$
+      - .*_test\.go$
       - examples
 formatters:
   enable:

Dockerfile

@@ -201,7 +201,7 @@ FROM scratch AS release
 COPY --link --from=releaser /out/ /
 
 FROM alpine:${ALPINE_VERSION} AS buildkit-export-alpine
-RUN apk add --no-cache fuse3 git openssh pigz xz iptables ip6tables \
+RUN apk add --no-cache fuse3 git openssh pigz isa-l xz iptables ip6tables \
   && ln -s fusermount3 /usr/bin/fusermount
 COPY --link examples/buildctl-daemonless/buildctl-daemonless.sh /usr/bin/
 VOLUME /var/lib/buildkit
@@ -213,6 +213,7 @@ RUN apt-get update \
     git \
     openssh-client \
     pigz \
+    isal \
     xz-utils \
     iptables \
     ca-certificates \
@@ -458,7 +459,7 @@ VOLUME /var/lib/buildkit
 
 # rootless builds a rootless variant of buildkitd image
 FROM alpine:${ALPINE_VERSION} AS rootless
-RUN apk add --no-cache fuse3 fuse-overlayfs git openssh pigz shadow-uidmap xz
+RUN apk add --no-cache fuse3 fuse-overlayfs git openssh pigz isa-l shadow-uidmap xz
 RUN adduser -D -u 1000 user \
   && mkdir -p /run/user/1000 /home/user/.local/tmp /home/user/.local/share/buildkit \
   && chown -R user /run/user/1000 /home/user \