@@ -573,13 +573,14 @@ Multiple lanes are allowed:
573573docker_lanes : install-e2e bundled-channel-update-acpx
574574` ` `
575575
576- That skips the release chunk matrix and runs one targeted Docker job against the
577- prepared GHCR images and the selected package artifact. Rerun commands
578- generated inside GitHub artifacts include ` package_artifact_run_id`,
579- ` package_artifact_name` , `docker_e2e_bare_image`, and
580- ` docker_e2e_functional_image` when available, so failed lanes can reuse the
581- exact tarball and prepared images from the failed run. When the fix changes
582- package contents, omit those reuse inputs so the workflow packs a new tarball.
576+ That skips the release chunk matrix and runs one targeted Docker job against
577+ the selected package. The default no-push path builds the required images for
578+ that run and moves them through immutable workflow artifacts. The rerun helper
579+ reads the exact selected target SHA from the failure artifact and repacks that
580+ ref; manual dispatch does not accept the reusable workflow's internal package
581+ artifact tuple. Generated commands add ` docker_e2e_bare_image`,
582+ ` docker_e2e_functional_image` , and `shared_image_policy=existing-only` only for
583+ GHCR-backed images; runner-local artifact images are rebuilt on a fresh rerun.
583584Live-only targeted reruns skip the E2E images and build only the live-test
584585image. Release-path normal mode fans out into smaller Docker chunk jobs :
585586
@@ -765,11 +766,19 @@ gh workflow run openclaw-live-and-e2e-checks-reusable.yml \
765766 -f live_models_only=false
766767` ` `
767768
768- That path still runs the prepare job, so it creates a new tarball for `<sha>`.
769- If the SHA-tagged GHCR bare/functional image already exists, CI skips rebuilding
770- that image and only uploads the fresh package artifact before the targeted lane
771- job. Do not rerun the full release path unless the failed lane list
772- or touched surface really requires it.
769+ That path still runs the prepare job, so it creates a new tarball for `<sha>`
770+ and, by default, rebuilds the required image into an immutable workflow
771+ artifact for the targeted lane job. A generated command skips the image rebuild
772+ only when it carries explicit GHCR image refs plus
773+ ` shared_image_policy=existing-only` . Do not rerun the full release path unless
774+ the failed lane list or touched surface really requires it.
775+
776+ The helper never recovers the workflow-definition `--ref` from an artifact
777+ command because full-release temporary branches are deleted. It uses the
778+ repository default branch unless the operator sets
779+ ` OPENCLAW_DOCKER_E2E_WORKFLOW_REF` ; this is separate from the artifact target
780+ SHA passed as the workflow's `ref` input. An explicit target SHA override drops
781+ recovered GHCR image refs unless the artifact proves they belong to that SHA.
773782
774783# # Docker Expected Timings
775784
0 commit comments