Repository navigation
fix(substrate): bump amd64 runsc default to gVisor nightly 2026-06-02 - #2035
Merged
EItanya merged 3 commits intoJun 17, 2026
Merged
Conversation
Signed-off-by: matcham89 <[email protected]>
github-actions
Bot
added
bug
Matcham89
marked this pull request as ready for review
June 17, 2026 03:00
Matcham89
requested review from
EItanya,
ilackarms,
iplay88keys,
jmhbh,
supreme-gg-gg and
yuval-k
as code owners
June 17, 2026 03:00
Contributor
There was a problem hiding this comment.
Pull request overview
Note
Copilot was unable to run its full agentic suite in this review.
Updates the pinned gVisor runsc (amd64) nightly artifact reference used by the substrate defaults and examples.
Changes:
- Bumped amd64
runscURL from2026-05-19to2026-06-02and updated its SHA256. - Updated the same amd64
runscreferences across Helm chart values, Go flag defaults, and an example manifest snippet.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| helm/kagent/values.yaml | Updates the commented default amd64 runsc URL/SHA256 in chart values. |
| go/core/pkg/app/app.go | Updates the default CLI flag values for amd64 runsc URL/SHA256. |
| examples/substrate-openclaw/README.md | Updates the example config snippet for amd64 runsc URL/SHA256. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+239
to
242
| commandLine.StringVar(&cfg.Substrate.RunscAMD64URL, "substrate-runsc-amd64-url", "gs://gvisor/releases/nightly/2026-06-02/x86_64/runsc", "gVisor runsc URL for amd64.") | ||
| commandLine.StringVar(&cfg.Substrate.RunscAMD64SHA256, "substrate-runsc-amd64-sha256", "efd12935f6654c91a1389710eb8dfa4d12b6b9be00db87526dc2eb584ad00119", "gVisor runsc sha256 for amd64.") | ||
| commandLine.StringVar(&cfg.Substrate.RunscARM64URL, "substrate-runsc-arm64-url", "gs://gvisor/releases/nightly/2026-05-19/aarch64/runsc", "gVisor runsc URL for arm64.") | ||
| commandLine.StringVar(&cfg.Substrate.RunscARM64SHA256, "substrate-runsc-arm64-sha256", "1ba2366ae2efceba166046f51a4104f9261c9cb72c6db8f5b3fe2dc57dea86b9", "gVisor runsc sha256 for arm64.") |
Comment on lines
+96
to
+97
| url: gs://gvisor/releases/nightly/2026-06-02/x86_64/runsc | ||
| sha256Hash: efd12935f6654c91a1389710eb8dfa4d12b6b9be00db87526dc2eb584ad00119 |
github-actions
Bot
added
bug
Contributor
|
Hey @Matcham89, you gotta sign your commits to merge, you can check the result of DCO |
Contributor
Author
I knew I missed something on the commit |
Matcham89
force-pushed
the
fix/bump-amd64-runsc-2026-06-02
branch
from
June 17, 2026 22:05
b452735 to
8570c6b
Compare
EItanya
approved these changes
Jun 17, 2026
social4hyq
pushed a commit
to social4hyq/homebrew-core
that referenced
this pull request
Sep 20, 2026
kagent 0.9.9 Created-by: HarmonybrewBot Commit-by: HarmonybrewBot Merged-by: HarmonybrewBot Description: Created by `brew bump` --- Created with `brew bump-formula-pr`.<details> <summary>release notes</summary> <pre><!-- Release notes generated using configuration in .github/release.yml at v0.9.9 --> ## What's Changed ### Bug Fixes * fix(ui): show agent edit control and prevent chat horizontal overflow by @amit-chaubey in kagent-dev/kagent#2002 * fix(controller): skip DB migration when DB schema is ahead of binary by @onematchfox in kagent-dev/kagent#1963 * fix(helm): rename $defaultProfider to $defaultProvider by @mesutoezdil in kagent-dev/kagent#2039 * fix: set Kind discriminator in ToLegacyTask A2A conversion by @Daniel-Vaz in kagent-dev/kagent#2038 * fix: duplicate error message in responses and panic risk in OTEL env vars by @mesutoezdil in kagent-dev/kagent#2029 * fix(substrate): bump amd64 runsc default to gVisor nightly 2026-06-02 by @Matcham89 in kagent-dev/kagent#2035 ### Other Changes * chore(deps): bump alpine from 3.23 to 3.24 in /docker/skills-init in the docker-minor-patch group across 1 directory by @dependabot[bot] in kagent-dev/kagent#2014 * chore(deps): bump the python-minor-patch group across 1 directory with 15 updates by @dependabot[bot] in kagent-dev/kagent#2017 ## New Contributors * @amit-chaubey made their first contribution in kagent-dev/kagent#2002 **Full Changelog**: https://github.com/kagent-dev/kagent/compare/v0.9.8...v0.9.9</pre> <p>View the full release notes at <a href="https://github.com/kagent-dev/kagent/releases/tag/v0.9.9">https://github.com/kagent-dev/kagent/releases/tag/v0.9.9</a>.</p> </details> <hr> See merge request: Harmonybrew/homebrew-core!11788
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #2036
Summary
kagent's default amd64 runsc (
2026-05-19) fails to restore node.js OpenClaw/NemoClaw actors with inconsistent private memory files on restore; nightly2026-06-02fixes it and still checkpoints (the2026-06-13build breaks checkpoint). This PR bumps the amd64 runsc default to2026-06-02so amd64 users get a working checkpoint/restore out of the box.arm64 defaults are left unchanged — the bug reproduces only on the amd64 build of the gVisor runsc nightly.
Changes
go/core/pkg/app/app.go— bump--substrate-runsc-amd64-urldefault togs://gvisor/releases/nightly/2026-06-02/x86_64/runscand--substrate-runsc-amd64-sha256toefd12935f6654c91a1389710eb8dfa4d12b6b9be00db87526dc2eb584ad00119.helm/kagent/values.yaml— update the commentedrunscAMD64URL/runscAMD64SHA256example to match.examples/substrate-openclaw/README.md— update the amd64 runsc URL/hash in theAgentHarnessexample.The sha256 was computed from the published binary and verified against the convention already in the repo (the existing
2026-05-19amd64 hash reproduces exactly withshasum -a 256).Caveat
C/R was proven to restore on arm64 (Kind) and fail on amd64 (Talos) with the same code and same runsc date, but the arm64 host ran a different kernel (Docker Desktop VM), so an arch-vs-kernel contribution can't be 100% ruled out. The actionable, provable claim that doesn't depend on settling that is the lead sentence above: 05-19 amd64 fails to restore, 06-02 fixes it and still checkpoints.
Notes for reviewers
The runsc-compatibility coupling is owned by
kagent-dev/substrate(its C/R is built against a specific runsc version).Testing
go build ./core/pkg/app/passes.