Skip to content

ci: repair Intel CET job, Intel retired the pinned SDE download #4747

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Cyan4973 merged 1 commit into from
Aug 27, 2026
Merged

ci: repair Intel CET job, Intel retired the pinned SDE download #4747

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 18 additions & 3 deletions .github/workflows/dev-short-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -640,6 +640,16 @@ jobs:

intel-cet-compatibility:
runs-on: ubuntu-latest
env:
# Intel retires the per-release id in the downloadmirror path whenever a new
# SDE ships, and the old URL then starts answering 403. That has broken this
# job twice (#3884 -> #3893, and again for 9.33.0). When it happens again,
# get the current link from Intel's *stable* product page and update these
# three values together:
# https://www.intel.com/content/www/us/en/download/684897/intel-software-development-emulator.html
SDE_URL: https://downloadmirror.intel.com/924984/sde-external-10.13.1-2026-07-28-lin.tar.xz
SDE_SHA256: 94e97d623fec54385686e1e7ba65ebc9941748c05ee451423948334892bf2b50
SDE_DIR: sde-external-10.13.1-2026-07-28-lin
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # tag=v6.0.2
- name: Build Zstd
Expand All @@ -648,14 +658,19 @@ jobs:
readelf -n zstd
- name: Get Intel SDE
run: |
curl -LO https://downloadmirror.intel.com/813591/sde-external-9.33.0-2024-01-07-lin.tar.xz
tar xJvf sde-external-9.33.0-2024-01-07-lin.tar.xz
# -f so that a retired URL fails here, with the http status, instead of
# saving the error page and failing later as "tar: unrecognized format".
curl -fsSL -o sde.tar.xz "$SDE_URL"
echo "$SDE_SHA256 sde.tar.xz" | sha256sum -c -
tar xJf sde.tar.xz
- name: Configure Permissions
run: |
echo 0 | sudo tee /proc/sys/kernel/yama/ptrace_scope
- name: Run Under SDE
run: |
sde-external-9.33.0-2024-01-07-lin/sde -cet -cet-raise 0 -cet-endbr-exe -cet-stderr -cet-abort -- ./zstd -b3
# sde64, not sde: the latter is a 32-bit i386 launcher, and needs i386
# runtime libs that a 64-bit runner has no reason to carry.
"$SDE_DIR/sde64" -cet -cet-raise 0 -cet-endbr-exe -cet-stderr -cet-abort -- ./zstd -b3

icx:
# install instructions: https://www.intel.com/content/www/us/en/docs/oneapi/installation-guide-linux/2025-0/apt-005.html
Expand Down
Loading