Skip to content

Stop GPG agent before removing signature-verification home - #1273

Merged
brunoborges merged 2 commits into
mainfrom
copilot/verify-signature-cleanup-fix
Sep 29, 2026
Merged

brunoborges merged 2 commits into
mainfrom
copilot/verify-signature-cleanup-fix

Conversation

Copilot AI commented Sep 28, 2026 •

Copy link
Copy Markdown
Contributor

Description:
On self-hosted runners with NFS-backed RUNNER_TEMP, signature verification can succeed but the step can fail while removing an agent-held .nfs* file.

  • Cleanup: Stop the verification GPG agent before removing its temporary home, reusing the existing best-effort shutdown behavior.
  • Coverage: Add tests for cleanup after successful and failed verification, including when gpgconf is unavailable.

Related issue:
NFS-backed RUNNER_TEMP signature-verification cleanup failure.

Download URL:
Not applicable; no new distribution.

License:
Not applicable; no new distribution.

Check list:

  • Mark if documentation changes are required.
  • Mark if tests were added or updated to cover the changes.
  • Mark if new distribution is being added.
Co-authored-by: brunoborges <129743+brunoborges@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix cleanup failure due to EBUSY error in GPG signature verification Sep 28, 2026
Copilot AI requested a review from brunoborges September 28, 2026 22:45
@brunoborges
brunoborges marked this pull request as ready for review September 28, 2026 23:47
@brunoborges
brunoborges requested a review from a team as a code owner September 28, 2026 23:47
Copilot AI balanced review requested due to automatic review settings September 28, 2026 23:47

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The implementation, generated bundles, and tests consistently address the reported NFS cleanup failure.

Review effort: Balanced
Findings: None

What changed in this PR

Stops temporary GPG agents before deleting signature-verification homes, preventing NFS cleanup failures.

Changes:

  • Extracts reusable best-effort GPG agent shutdown.
  • Applies shutdown to verification cleanup.
  • Adds success, failure, and unavailable-gpgconf coverage.
File Description
src/​gpg.ts Stops agents before home removal.
__tests__/​gpg.test.ts Covers all cleanup outcomes.
dist/​setup/​81.index.js Updates generated setup bundle.
dist/​setup/​220.index.js Updates generated setup bundle.
dist/​setup/​463.index.js Updates generated setup bundle.
dist/​cleanup/​index.js Updates generated cleanup bundle.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@brunoborges
brunoborges merged commit a78ec39 into main Sep 29, 2026
86 checks passed
@brunoborges
brunoborges deleted the copilot/verify-signature-cleanup-fix branch September 29, 2026 01:26
gregor-dietrich pushed a commit to gregor-dietrich/Midas that referenced this pull request Oct 24, 2026
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-java](https://github.com/actions/setup-java) | action | minor | `v6.0.1` → `v6.1.0` |

---

### Release Notes

<details>
<summary>actions/setup-java</summary>

### [`v6.1.0`](https://github.com/actions/setup-java/releases/tag/v6.1.0)

[Compare Source](actions/setup-java@v6.0.1...v6.1.0)

##### What's Changed

- Preserve compound Liberica build versions from .sdkmanrc by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1268](actions/setup-java#1268)
- Support Temurin on Linux RISC-V by [@&#8203;yawkat](https://github.com/yawkat) in [#&#8203;1269](actions/setup-java#1269)
- Stop GPG agent before removing signature-verification home by [@&#8203;brunoborges](https://github.com/brunoborges) with [@&#8203;Copilot](https://github.com/Copilot) in [#&#8203;1273](actions/setup-java#1273)
- Prefer Zulu 4-segment hotfix builds when resolving version ranges by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1278](actions/setup-java#1278)
- Support Temurin JEP 322 patch versions like 26.0.2.1+1 by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1279](actions/setup-java#1279)
- chore(deps): bump undici from 6.28.0 to 6.29.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1274](actions/setup-java#1274)
- chore(deps): bump the monthly-npm-updates group with 13 updates by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;1276](actions/setup-java#1276)
- feat: support Maven server credential origins by [@&#8203;YunaBraska](https://github.com/YunaBraska) in [#&#8203;1282](actions/setup-java#1282)
- Support Maven plugin repositories in generated settings.xml by [@&#8203;brunoborges](https://github.com/brunoborges) in [#&#8203;1286](actions/setup-java#1286)

##### New Contributors

- [@&#8203;yawkat](https://github.com/yawkat) made their first contribution in [#&#8203;1269](actions/setup-java#1269)
- [@&#8203;YunaBraska](https://github.com/YunaBraska) made their first contribution in [#&#8203;1282](actions/setup-java#1282)

**Full Changelog**: <actions/setup-java@v6.0.1...v6.1.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjUuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: https://git.vptr.de/gregor/midas2/pulls/113
Reviewed-by: gregor <1+gregor@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@vptr.de>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

3 participants