Skip to content

feat(CI): overhaul and update build-system#410

Merged
squat merged 12 commits intomainfrom
update_ci
Feb 23, 2026
Merged

feat(CI): overhaul and update build-system#410
squat merged 12 commits intomainfrom
update_ci

Conversation

@squat
Copy link
Copy Markdown
Owner

@squat squat commented Feb 16, 2026

The tooling to build Kilo is out of date and is preventing CI from
running. This is, in turn, is preventing reviewing and merging PRs,
leading the project to stagnate. This commit overhauls the build-system
for Kilo, locks every single piece of tooling in a flake.lock file,
enables dependabot to promote automatic updates to the code, and uses
Nix for reproducible builds.

Signed-off-by: squat lserven@gmail.com

@squat squat force-pushed the update_ci branch 7 times, most recently from c2b96ce to 47b2697 Compare February 18, 2026 20:12
Repository owner deleted a comment from github-actions Bot Feb 18, 2026
@squat squat force-pushed the update_ci branch 2 times, most recently from 9bb5265 to 926ab79 Compare February 18, 2026 20:51
Repository owner deleted a comment from github-actions Bot Feb 18, 2026
The tooling to build Kilo is out of date and is preventing CI from
running. This is, in turn, is preventing reviewing and merging PRs,
leading the project to stagnate. This commit overhauls the build-system
for Kilo, locks every single piece of tooling in a flake.lock file,
enables dependabot to promote automatic updates to the code, and uses
Nix for reproducible builds.

Signed-off-by: squat <lserven@gmail.com>
Signed-off-by: squat <lserven@gmail.com>
Signed-off-by: squat <lserven@gmail.com>
Signed-off-by: squat <lserven@gmail.com>
Signed-off-by: squat <lserven@gmail.com>
Signed-off-by: squat <lserven@gmail.com>
Signed-off-by: squat <lserven@gmail.com>
If the kgctl path is not passed explicitly via an environment variable,
then we need to resolve the path. Additionally, in more recent versions
of k8s, the taint on control-plane nodes has changed names so we need to
update our code to correctly untaint them.

Signed-off-by: squat <lserven@gmail.com>
Signed-off-by: squat <lserven@gmail.com>
@squat squat force-pushed the update_ci branch 6 times, most recently from 401e2cf to 83f5b5a Compare February 23, 2026 15:40
The first issue is not so bad: cloudflare/boringtun#447

The second issue is severe: cloudflare/boringtun#348
This one is problematic because Kilo uses the WireGuard socket to detect
configuration drift for the `kilo0` interface. Since boringtun always
returns empty configuration, Kilo thinks that there is always
configuration drift, resulting in reconfigurations of the interface
every sync-interval seconds, which causes the interface to drop existing
connections.

This commit fixes the issues by switching from boringtun to the more
maintained, upstream userspace WireGuard implementation wireguard-go.
Furthermore, this commit locks the manifests to specific tags.

Signed-off-by: squat <lserven@gmail.com>
Currently, the e2e tests do not exit if the adjacency or curl pods fail
to come up. The tests will continue running for a long time and fail.
These changes cause the tests to exit early.

Signed-off-by: squat <lserven@gmail.com>
Signed-off-by: squat <lserven@gmail.com>
@squat squat merged commit ed5d8a9 into main Feb 23, 2026
15 checks passed
@squat squat deleted the update_ci branch February 23, 2026 18:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant