nextbsd-kernel-toolchain

Cross-compilation toolchain containers for the NextBSD kernel pipeline.

Each image bakes a shallow, full-tree checkout of nextbsd-redux/freebsd-src (releng/15.1) into /usr/src, pinned to an exact commit via the FREEBSD_SHA build-arg, then runs kernel-toolchain. Downstream kernel and module builds run inside this image, so they inherit the exact baked source — no re-cloning, and the image itself (stored in GHCR) is the source artifact.

Images

Tag	Meaning
amd64-latest / arm64-latest	Most recent build for the arch
amd64-fbsd-<sha>	Source pinned to FreeBSD commit <sha>
amd64-fbsd-tip	Built from branch tip (manual / scheduled, no SHA)

Triggers

• repository_dispatch: upstream-updated — from the freebsd-src fork's daily sync, carrying the exact changed SHA in client_payload[sha].
• workflow_dispatch — manual.
• schedule — weekly fallback (Mondays 06:00 UTC).

On success the amd64 leg dispatches toolchain-updated to nextbsd-kernel, passing the pinned image_tag forward.

One-time setup

After the first successful build, set the GHCR package visibility to public so downstream container: jobs can pull it without credentials (Org → Packages → nextbsd-kernel-toolchain → Package settings → Change visibility → Public).