From bdc658bf62044b93e9cbd569215ed02055134c45 Mon Sep 17 00:00:00 2001 From: Yann Collet Date: Thu, 27 Aug 2026 11:08:33 -0700 Subject: [PATCH] ci: repair Intel CET job, Intel retired the pinned SDE download The 9.33.0 downloadmirror URL now returns 403, so the job died at the download step. Repoint at the current release (10.13.1), pin it by SHA256, and use curl -f so a future retirement reports the http status instead of surfacing as 'tar: unrecognized format'. Also switch to the sde64 launcher: sde is a 32-bit i386 binary. --- .github/workflows/dev-short-tests.yml | 21 ++++++++++++++++++--- 1 file changed, 18 insertions(+), 3 deletions(-) diff --git a/.github/workflows/dev-short-tests.yml b/.github/workflows/dev-short-tests.yml index 4b8a95d185f..c0d1664112e 100644 --- a/.github/workflows/dev-short-tests.yml +++ b/.github/workflows/dev-short-tests.yml @@ -640,6 +640,16 @@ jobs: intel-cet-compatibility: runs-on: ubuntu-latest + env: + # Intel retires the per-release id in the downloadmirror path whenever a new + # SDE ships, and the old URL then starts answering 403. That has broken this + # job twice (#3884 -> #3893, and again for 9.33.0). When it happens again, + # get the current link from Intel's *stable* product page and update these + # three values together: + # https://www.intel.com/content/www/us/en/download/684897/intel-software-development-emulator.html + SDE_URL: https://downloadmirror.intel.com/924984/sde-external-10.13.1-2026-07-28-lin.tar.xz + SDE_SHA256: 94e97d623fec54385686e1e7ba65ebc9941748c05ee451423948334892bf2b50 + SDE_DIR: sde-external-10.13.1-2026-07-28-lin steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # tag=v6.0.2 - name: Build Zstd @@ -648,14 +658,19 @@ jobs: readelf -n zstd - name: Get Intel SDE run: | - curl -LO https://downloadmirror.intel.com/813591/sde-external-9.33.0-2024-01-07-lin.tar.xz - tar xJvf sde-external-9.33.0-2024-01-07-lin.tar.xz + # -f so that a retired URL fails here, with the http status, instead of + # saving the error page and failing later as "tar: unrecognized format". + curl -fsSL -o sde.tar.xz "$SDE_URL" + echo "$SDE_SHA256 sde.tar.xz" | sha256sum -c - + tar xJf sde.tar.xz - name: Configure Permissions run: | echo 0 | sudo tee /proc/sys/kernel/yama/ptrace_scope - name: Run Under SDE run: | - sde-external-9.33.0-2024-01-07-lin/sde -cet -cet-raise 0 -cet-endbr-exe -cet-stderr -cet-abort -- ./zstd -b3 + # sde64, not sde: the latter is a 32-bit i386 launcher, and needs i386 + # runtime libs that a 64-bit runner has no reason to carry. + "$SDE_DIR/sde64" -cet -cet-raise 0 -cet-endbr-exe -cet-stderr -cet-abort -- ./zstd -b3 icx: # install instructions: https://www.intel.com/content/www/us/en/docs/oneapi/installation-guide-linux/2025-0/apt-005.html