Skip to content

chore: enforce installer deployment dependency boundary#2

Merged
yuanyp8 merged 3 commits into
mainfrom
feat/offline-run-packages
Jun 21, 2026
Merged

chore: enforce installer deployment dependency boundary#2
yuanyp8 merged 3 commits into
mainfrom
feat/offline-run-packages

Conversation

@yuanyp8

@yuanyp8 yuanyp8 commented Jun 21, 2026

Copy link
Copy Markdown
Contributor

Summary

确认并固化离线 .run 的部署侧依赖边界:

  • build/CI 阶段允许使用 jq 校验 images/image.json
  • 现场部署的 install.sh 不允许依赖 jq/yq/python/node/npm/npx
  • CI 增加扫描保护:一旦安装器脚本引入这些工具,构建直接失败
  • README 补充构建侧依赖和现场部署侧依赖说明

Deployment-side baseline

Compose 包现场只要求基础 shell 工具、Docker、docker composedocker-compose

K8s 包现场只要求基础 shell 工具、Docker、kubectl。

镜像映射继续使用构建阶段生成的 images/image-index.tsv,不在现场解析 JSON。

@yuanyp8 yuanyp8 merged commit e47e9f9 into main Jun 21, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant