Run tooling race contract with a pinned compiler image

Authored-By: Codex (GPT-6) <noreply@openai.com>
2026-09-07 17:05:40 +00:00
parent a81131583e
commit c9bd31a6e9
3 changed files with 22 additions and 1 deletions
@@ -96,6 +96,20 @@ input for public bases.
 |---|---|
 | `tag` | Numeric tag assigned (= `github.run_number`). |

+## Private module contract validation
+
+The private-module contract workflow runs its Go race tests in the digest-pinned
+standard Go compiler image in `tests/private-modules.Dockerfile`. The Fritzlab
+runner doesn't provide GCC. Only `tools/private-modules` enters that build context;
+the test runs with networking and module downloads disabled. The public compiler
+image must already be cached or obtainable through the existing image pull path.
+This check doesn't publish an image or change runner configuration.
+
+```sh
+python3 -m unittest discover -s tests
+docker build --network none --file tests/private-modules.Dockerfile tools/private-modules
+```
+
 ## Smoke test patterns

 Override entrypoint for a binary that expects no args: