Skip to content

merge back from earthflowAI fork - #360

Closed
rrsettgast wants to merge 2 commits into
masterfrom
earthflowAI
Closed

merge back from earthflowAI fork#360
rrsettgast wants to merge 2 commits into
masterfrom
earthflowAI

Conversation

@rrsettgast

Copy link
Copy Markdown
Contributor

This should contain non-active changes for GEOS-DEV. This supports provisioning examples for Azure.

Provision ephemeral HB176rs_v4 JIT builder and tester runners for OpenMPI and MPICH, validate the fixed CPU and NVMe contract, and add fail-closed cleanup and janitor automation.

Build Zen 4 TPL images from source with pinned Spack revisions, a source-only mirror, bounded fetch and bootstrap retries, and a shared 176-job build pool. Capture MPI, HDF5, and target evidence; validate candidates offline on fresh runners; promote exact ACR digests; and publish immutable pull instructions.

Harden workflow authorization and artifact contracts with Azure OIDC, GitHub App client IDs, Node 24 action pins, trusted sparse checkouts, and credential-free regression fixtures.
Validate the actual Spack target from spack.lock while treating native compiler flags as the build-tuning evidence. Remove handwritten target tokens from host and candidate validation, keep the lock/native/MPI gates, and add regression coverage for the trusted pull_request_target control path.
@rrsettgast rrsettgast closed this Aug 17, 2026
@rrsettgast
rrsettgast deleted the earthflowAI branch August 17, 2026 05:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant