SporeVM Kernels

Build and publish Linux kernel release assets for SporeVM.

Assets

This repository publishes:

• sporevm-arm64-linux-<version>-Image
• sporevm-arm64-linux-<version>-Image.config
• sporevm-arm64-linux-<version>-Image.sha256
• sporevm-arm64-linux-<version>.manifest.json
• sporevm-x86_64-linux-<version>-bzImage
• sporevm-x86_64-linux-<version>-bzImage.config
• sporevm-x86_64-linux-<version>-bzImage.sha256
• sporevm-x86_64-linux-<version>.manifest.json

Both kernels include the initrd, rootfs, Docker, cgroup, namespace, networking, and filesystem support needed by spore run. ARM64 disables /dev/mem. x86_64 enables it with CONFIG_STRICT_DEVMEM=y and CONFIG_IO_STRICT_DEVMEM=n so the guest can map the reserved SporeVM board MMIO page without exposing ordinary system RAM.

Release publishing fails closed unless the x86_64 bzImage, checksum, and manifest all contain the approved SHA-256 07a9b6d8a9efd2b7c5e886d1c010e67245fa132c8b48cf567f200099b55abee8. The exact approved x86_64 image, config, checksum, and manifest are retained in approved/x86_64/6.1.155/. CI stages those files verbatim and verifies all four file hashes before upload and again before release publication. The ARM64 release asset continues to be built normally.

Build

Build one asset locally:

scripts/build-release-asset.sh dist/kernels

SPOREVM_KERNEL_ARCH=x86_64 \
  scripts/build-release-asset.sh dist/kernels-x86_64

Useful environment variables:

• SPOREVM_KERNEL_VERSION, default 6.1.155
• SPOREVM_KERNEL_ARCH, arm64 by default; also supports x86_64
• SPOREVM_KERNEL_DOCKER_IMAGE, defaults to the pinned builder in Dockerfile
• SPOREVM_KERNEL_DOCKER_PLATFORM, default linux/amd64; ARM64 kernels also support native linux/arm64 builds
• SPOREVM_KERNEL_CROSS_COMPILE, default aarch64-linux-gnu- when needed
• SPOREVM_KERNEL_TARBALL_SHA256
• SPOREVM_KERNEL_BUILD_USER, SPOREVM_KERNEL_BUILD_HOST, SPOREVM_KERNEL_BUILD_TIMESTAMP, and SPOREVM_KERNEL_BUILD_VERSION, default to the metadata embedded in the approved x86_64 kernel
• SPOREVM_KERNEL_BUILD_DIR, optional host cache directory mounted at /build
• SPOREVM_KERNELS_GITHUB_REPOSITORY, default sporevm/kernels
• SPOREVM_KERNELS_GITHUB_RELEASE_TOKEN, used by tagged release publishing

CI

Buildkite builds ARM64 and stages the approved x86_64 artifact set on hosted agents. Tagged builds then publish both architectures and dist/kernels.tar.gz to the matching GitHub Release.