Skip to content

Build the event extension from its PECL release archive - #260

Merged
csandanov merged 1 commit into
masterfrom
fix/event-from-pecl
Oct 21, 2026
Merged

csandanov merged 1 commit into
masterfrom
fix/event-from-pecl

Conversation

@csandanov

Copy link
Copy Markdown
Member

Problem

Every image build failed during the Bitbucket outage, which blocked the release with the critical PHP security fixes.

Cause

The event extension was installed through a package whose source code is hosted on Bitbucket. While Bitbucket was degraded, each build waited and then failed to download it ("Could not authenticate against bitbucket.org").

Solution

Build the same event 3.1.6 release from the official PECL release archive instead, the same way other extensions such as oauth, imagick and xhprof are already built. Bitbucket is no longer needed. The archive is checked against a fixed checksum, and the extension keeps the same version and build options.

Details

  • 8/install-extensions.sh: install_pie osmanov/pecl-event:3.1.6 … → install_source event-3.1.6 5b74554c6370aae8c284c8110fe27e071d3f663953c3eb762ffc429b0a3c83a2 . …, with the same configure flags (--enable-event-sockets --with-event-libevent-dir=/usr --with-event-extra=yes --with-event-openssl --with-openssl-dir=yes).
  • The checksum is the SHA-256 of https://pecl.php.net/get/event-3.1.6.tgz. The archive keeps config.m4 at its top level, like the other PECL archives built here.

Validation

  • bash -n 8/install-extensions.sh passes, and so do the build reliability tests (python3 -m unittest discover -s 8/tests -p 'test_*.py', 8 tests).
  • The full image build, tests and scan run in CI and in the revision release build.

The event PIE package downloads its source from Bitbucket, so a Bitbucket
outage failed every image build. Build the same 3.1.6 release from the
checksummed PECL archive with the same configure options, like the other
source-built extensions.
@csandanov
csandanov merged commit 580c163 into master Oct 21, 2026
2 of 26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant