Add weekly forced rebuild workflow (HMS-10237)#101
Merged
Conversation
Add a GitHub Actions workflow that bumps a timestamp in the Schutzfile and opens a PR every Wednesday at 05:00 UTC. Since all GitLab CI jobs trigger on Schutzfile changes, this forces a full test cycle on the PR and Konflux pipeline rebuilds after merge. The bump logic lives in a standalone Python script at schutzbot/bump_rebuild_timestamp.py for easy local testing. The timestamp format is YYYYMMDDHHMM (UTC), which is used for both the Schutzfile value and the branch name to avoid collisions on same-day manual re-triggers. Signed-off-by: Tomáš Hozza <thozza@redhat.com>
thozza
requested review from
avitova,
brlane-rht and
supakeen
and removed request for
a team
June 22, 2026 08:46
The previous approach of copying EFI files from /usr/lib/efi/*/*/EFI stopped working on recent c10s images because that path is no longer populated. Instead, reinstall shim-x64 which installs the required files directly into /boot/efi/EFI, fulfilling the container-native ISO contract. Signed-off-by: Tomáš Hozza <thozza@redhat.com>
thozza
requested review from
achilleas-k,
croissanne and
lzap
and removed request for
brlane-rht and
supakeen
June 22, 2026 10:22
lzap
approved these changes
Jun 22, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Introduce a scheduled GitHub Actions workflow that triggers a full CI test cycle and Konflux pipeline rebuild every Wednesday. The workflow bumps a timestamp in the Schutzfile and opens a PR against main, leveraging the existing GitLab CI trigger on Schutzfile changes to force all jobs to run.
I've also had to fix the
stream10-installerContainerfile, because the/usr/lib/efi/*/*/EFIpath is no longer populated in the image. I was not able to determine the root cause of this issue - IOW what changed.shimpackage still installs all packages under/boot.Architectural Changes
The bump logic is extracted into a standalone Python script (
schutzbot/bump_rebuild_timestamp.py) rather than inline shell in the workflow, enabling easy local testing and reuse. A newlast-forced-rebuildkey is added to the Schutzfile'scommonsection, initialized to"000000000000".Key Changes
.github/workflows/force-rebuild.yml— scheduled weekly (Wednesday 05:00 UTC) and manual dispatch, creates a PR with the bumped timestampschutzbot/bump_rebuild_timestamp.py— writes current UTC timestamp (YYYYMMDDHHMM) into SchutzfileSchutzfilewithlast-forced-rebuildfield so the first bump produces a clean diffTesting
python3 schutzbot/bump_rebuild_timestamp.pyfrom the repo rootworkflow_dispatchto verify end-to-end behavior before the first scheduled run