Skip to content

packaging: prepare the OpenVINO 2026.2.1 candidate - #71

Merged
archledger merged 4 commits into
mainfrom
integration/openvino-2621-prerequisites
Oct 26, 2026
Merged

archledger merged 4 commits into
mainfrom
integration/openvino-2621-prerequisites

Conversation

@archledger

Copy link
Copy Markdown
Owner

Purpose

Bring the existing OpenVINO 2026.2.1 candidate prerequisites onto current main with signed, self-contained commits. The LP-E-core backport follows separately.

Changes

Validation

  • Locked scripts/check.sh: 341 Rust tests, formatting, strict Clippy, documentation and profile validation passed.
  • CI Python suite: 442 tests passed. Repository assembly, release-profile generation, bootstrap, VM runner and guest-lifecycle suites also passed (25 / 18 / 13 / 17 / 10 tests).
  • Real private SDKs for OpenVINO 2026.2.0 and 2026.2.1: native compilation/linking, all five CTests and ELF hardening checks passed for each version. CI's committed SDK pin remains 2026.2.0.
  • RED/GREEN coverage includes SDK version acceptance, candidate release identity, SDK ABI selection, missing/unsupported metadata, the controlled-PATH runner and RPATH rejection.
  • All four new commits have verified signatures and one DCO sign-off each. Production profiles and kernel history are unchanged from the base.

Review corrections include the candidate generator's stale release label, the native runner's hardcoded SONAME, and the controlled-PATH fixture's missing ABI metadata. The final review found no remaining confirmed P1/P2 issues in this scope.

The retained candidate baseline has 12 verified provider RPM hashes and 21 verified declared payload hashes. The current 38 repository recipe inputs and 13 archive/notice inputs match the accepted release-1 build; all 51 retained inputs were rehashed. Those results are provenance checks, not claims of a newly rebuilt package set.

Scope

No packages are installed, no production profile is promoted, and this PR does not qualify or publish a release. The generated profile stays an unqualified candidate. Existing independent package and hardware evidence remains separate from this source integration.

Signed-off-by: Wisbendji Fimerlus archledger236@gmail.com

Replace the bool::then filter_map with an equivalent filter and map.
The existing fixture trips filter_map_bool_then under the pinned Clippy
toolchain and prevents the required quality gate from running its tests.

Preserve the selected CPU and GPU fixture libraries and all existing
contract assertions. The fixture's 15 tests pass with strict lint enabled.

Signed-off-by: Wisbendji Fimerlus <archledger236@gmail.com>
Accept exactly OpenVINO 2026.2.0 or 2026.2.1 from the explicit SDK prefix.
The candidate tools use 2026.2.1, while existing 0.1.1 SDK checks still use
2026.2.0. Keep all other versions rejected with an explicit diagnostic.

Add configure regressions for both supported versions and an unsupported
version. Both tests fail on the old configuration and pass with the fix.

Signed-off-by: Wisbendji Fimerlus <archledger236@gmail.com>
Write the expected runtime SONAME from the accepted SDK version and use it
for the native helper ELF audit. This lets the standard runner validate
2026.2.1 without accepting a mismatched dependency or weakening hardening.

Reject missing or unsupported ABI metadata. Update the controlled-PATH
fixture and check that its RPATH-negative case reaches the ELF rejection.
Cover both supported ABIs and mismatched, missing and unknown metadata.

Signed-off-by: Wisbendji Fimerlus <archledger236@gmail.com>
Pin OpenVINO 2026.2.1 and the RC2 NPU compiler source, retaining the checked
unbounded-Reshape guard. Align the candidate manifest, provider paths,
tools package contracts and generated candidate release with 0.2.0.

The manifest remains bound to the retained release-1 provider artifacts.
Preserve the historical changelog entries and leave production profiles
unchanged. These source changes do not install or promote the candidate.

Signed-off-by: Wisbendji Fimerlus <archledger236@gmail.com>
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-26T20:22:06.836460Z eb95184 PR opened
🔒 Security Review ✅ Completed 2026-10-26T20:23:08.182600Z eb95184 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@archledger
archledger merged commit 20af927 into main Oct 26, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant