0deaa5489a
31 runs were queued on igneum-build-1's one runner at 13:15 UK on 7 October 2026 and nothing had concluded since 13:03Z, so no lane could read a conclusion. - ci.yml: a `changes` job (ubuntu-latest) classifies the push with tools/ci/docs-only-check.sh (docs/, site/, *.md only = code=false; a new branch, a pull request, a force push or an API error = code=true); pow and sims need it and run only on code=true. The site job is unchanged on ubuntu-latest for every push. The classifier's self-test is in the gate. - provision.sh and runner/register.sh: `--host <ip>` registers another box, forwarding BOX_HOSTNAME, RUNNER_NAME, RUNNER_LABELS, RUNNER_CPUS and RUNNER_JOBS (plain words only); RUNNER_CPUS writes AllowedCPUs into the service drop-in beside Nice=10, so igneum-build-2's runner is bounded like a suite (32 cores). The pool label is igneum-build-1 (both boxes carry it); ci-red marks the box with the record file and the poster, the default labels carry it, and igneum-build-1 got it through the runners API today. - ci-red.yml runs on the ci-red label, so the red line always lands where the poster reads it. - CLAUDE.md: the rule reads "read the conclusion when it lands, own a red before the next push"; pushes are never held. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
45 lines
2.9 KiB
YAML
45 lines
2.9 KiB
YAML
# The red watcher as its own workflow, on workflow_run, so the copy on master watches EVERY branch's ci run whatever
|
|
# ci.yml that branch carries: GitHub runs a workflow_run workflow from the default branch only, and the branch's own
|
|
# ci.yml never enters it (7 October 2026: the inline `red` job of ci.yml was conditioned on master and release-*, and
|
|
# a feature branch would have waited for a merge of master before its reds were posted at all).
|
|
#
|
|
# One line per failed run (tools/ci/red-watch.mjs record, idempotent per run attempt) to /srv/ci-red/red.jsonl on the
|
|
# box; the box's igneum-ci-red.timer posts each new line once to the hidden updates channel, naming the branch, the
|
|
# commit, the red check and the pushing author. Runs on the box's own runner (not a GitHub-hosted machine: the billing
|
|
# block of 6 October 2026, 18:37Z to 20:10Z, failed every hosted job at start and nobody was told). Never blocks a
|
|
# release: it reads the run, writes one line, and ends.
|
|
name: ci-red
|
|
on:
|
|
workflow_run:
|
|
workflows: [ci]
|
|
types: [completed]
|
|
jobs:
|
|
red:
|
|
name: red watcher (every branch; one line per failed run, with the branch, commit, red check and pushing author, to the updates channel and the box file)
|
|
if: ${{ github.event.workflow_run.conclusion == 'failure' }}
|
|
# the label ci-red is on igneum-build-1 only (added through the runners API on 7 October 2026; the default of
|
|
# RUNNER_LABELS in provision.sh carries it): the record file and the poster (igneum-ci-red.timer, the webhook file)
|
|
# live on that box, and the pool label igneum-build-1 is shared with igneum-build-2 since the same day
|
|
runs-on: [self-hosted, linux, x64, ci-red]
|
|
timeout-minutes: 5
|
|
permissions:
|
|
actions: read # the failed run's jobs API (the first real red run, 21:19Z on 6 October: the default token answered 403 and the line carried no step)
|
|
contents: read
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
with:
|
|
sparse-checkout: tools/ci
|
|
- name: record the failed run (one line, the branch, the commit, the failed jobs and their first failed step from the run's own API, the pushing author)
|
|
env:
|
|
GITHUB_TOKEN: ${{ github.token }}
|
|
RED_WATCH_RUN_ID: ${{ github.event.workflow_run.id }}
|
|
RED_WATCH_ATTEMPT: ${{ github.event.workflow_run.run_attempt }}
|
|
RED_WATCH_WORKFLOW: ${{ github.event.workflow_run.name }}
|
|
RED_WATCH_BRANCH: ${{ github.event.workflow_run.head_branch }}
|
|
RED_WATCH_SHA: ${{ github.event.workflow_run.head_sha }}
|
|
RED_WATCH_EVENT: ${{ github.event.workflow_run.event }}
|
|
RED_WATCH_URL: ${{ github.event.workflow_run.html_url }}
|
|
RED_WATCH_ACTOR: ${{ github.event.workflow_run.actor.login }}
|
|
RED_WATCH_TITLE: ${{ github.event.workflow_run.head_commit.message }}
|
|
RED_WATCH_AUTHOR: ${{ github.event.workflow_run.head_commit.author.name }}
|
|
run: node tools/ci/red-watch.mjs record --file /srv/ci-red/red.jsonl
|