From c0d429ea1a59fe6b97f632dbf66b2c7b95fa1ef4 Mon Sep 17 00:00:00 2001 From: Manuel de Brito Fontes Date: Tue, 8 Sep 2026 00:25:58 -0300 Subject: [PATCH] Pin the machine at v20260908.02 The release cut from spin-machine's main, which is where the qcow package's counterpart now lives. v20260907.01 predates all of it. Verified end to end: fetched with no sibling checkout in reach, so the tarball and its sha256 were exercised; guest:verify reads the PVH notes out of the kernel it shipped; demo:stage1 boots a real guest on it, restarts the Agent under the running VM, and reads back everything the first boot fsynced. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_019GHRRFvbnZi5q3KSTvyW5a --- Taskfile.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Taskfile.yml b/Taskfile.yml index 2137cab..6be6e2e 100644 --- a/Taskfile.yml +++ b/Taskfile.yml @@ -30,8 +30,8 @@ vars: # Pinned by version and by content, for the reason the kernel used to be pinned by hash: # "which machine did this lane certify?" needs an answer that is not "whatever was # published that day". Bump both together and say in the commit why the machine changed. - SPIN_MACHINE_VERSION: '{{.SPIN_MACHINE_VERSION | default "v20260907.01"}}' - SPIN_MACHINE_SHA256: '{{.SPIN_MACHINE_SHA256 | default "72db5f9789a37370acaac25bf0aab2490f9b0fa0ee846a65f80651408bb0da47"}}' + SPIN_MACHINE_VERSION: '{{.SPIN_MACHINE_VERSION | default "v20260908.02"}}' + SPIN_MACHINE_SHA256: '{{.SPIN_MACHINE_SHA256 | default "835c193745db13d3dcbaa4574fa471d967335fc4249302de6e0489dfaba02bdb"}}' # A sibling checkout that has already built one wins over the published release. SPIN_MACHINE_DIR: '{{.SPIN_MACHINE_DIR | default "../spin-machine"}}'