Skip to content

Pin the foundryup installer in the rollupcreator image - #212

Open
robwblack wants to merge 1 commit into
masterfrom
nit-6071-pin-the-foundryup-installer-in-the-testnode-rollupcreator
Open

robwblack wants to merge 1 commit into
masterfrom
nit-6071-pin-the-foundryup-installer-in-the-testnode-rollupcreator

Conversation

@robwblack

Copy link
Copy Markdown

Pins the foundryup binary that the rollupcreator image installs, by release tag and per-arch sha256. Currently the image pipes whatever installer foundry.paradigm.xyz serves into bash. nitro-private's Docker build job rebuilds this image through test-node.bash --init. An upstream installer change can fail that job, which NIT-5886 makes required.

  • Downloads foundryup_linux_<arch> from the foundry-rs/foundryup v0.0.8 release
  • Checks its sha256 because the release assets are mutable

The install step builds for linux/amd64 and arm64 and installs forge 1.0.0 on both. The full image builds on arm64. A wrong hash fails at sha256sum -c.

Fixes NIT-6071

The image piped whatever foundry.paradigm.xyz served into bash. The
build checks the binary's sha256 because the release assets are mutable.
@robwblack
robwblack marked this pull request as ready for review October 9, 2026 22:34
@robwblack
robwblack requested a review from mglowack October 9, 2026 22:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants