crypto: af_alg/algif_aead: fix CVE-2026-31431 splice write-to-page-cache #666
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Building and pushing Eve kernel images | |
| on: | |
| push: | |
| branches: | |
| - "eve-kernel-riscv64-v6.1.112-generic" | |
| concurrency: | |
| group: main-build-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| build: | |
| runs-on: [runner-xl, Linux] | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| ref: ${{ github.ref }} | |
| fetch-depth: 1 | |
| - name: Login to Docker Hub (pull) | |
| uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_PULL_USER }} | |
| password: ${{ secrets.DOCKERHUB_PULL_TOKEN }} | |
| - name: Build kernel from ${{ github.ref_name }} | |
| run: | | |
| make -f Makefile.eve \ | |
| BRANCH=${{ github.ref_name }} \ | |
| kernel-gcc | |
| - name: Login to Docker Hub (push) | |
| uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 | |
| with: | |
| username: ${{ secrets.RELEASE_DOCKERHUB_ACCOUNT }} | |
| password: ${{ secrets.RELEASE_DOCKERHUB_TOKEN }} | |
| - name: Push from ${{ github.ref_name }} | |
| run: | | |
| make -f Makefile.eve \ | |
| BRANCH=${{ github.ref_name }} \ | |
| push-gcc | |
| - name: Clean | |
| if: always() | |
| run: | | |
| make -f Makefile.eve \ | |
| BRANCH=${{ github.ref_name }} \ | |
| clean-gcc | |
| if docker ps -q -f name=linuxkit-builder | grep -q .; then | |
| echo "=== BuildKit disk usage before prune ===" | |
| docker exec linuxkit-builder buildctl du | tail -n 2 | |
| echo "=== Reclaiming ===" | |
| docker exec linuxkit-builder buildctl prune --keep-storage "${BUILDKIT_KEEP_STORAGE_MB:-32000}" | tail -n 1 | |
| echo "=== BuildKit disk usage after prune ===" | |
| docker exec linuxkit-builder buildctl du | tail -n 2 | |
| else | |
| echo "linuxkit-builder container not running; skipping BuildKit cleanup." | |
| fi |