Merge pull request 'fix: download GCP apt key directly without gpg --dearmor' (#8 ) from fix/ci-openssl-linker into dev

fix: download GCP apt key directly, no gpg --dearmor
packages.cloud.google.com now serves the key in binary format; piping through gpg --dearmor fails with 'no valid OpenPGP data found'.
2026-05-06 23:39:06 +00:00 · 2026-05-06 18:28:38 -05:00 · 2026-05-06 23:17:12 +00:00 · 2026-05-06 17:58:16 -05:00 · 2026-05-06 22:53:37 +00:00 · 2026-05-06 17:49:35 -05:00
8 changed files with 78 additions and 101 deletions
@@ -24,35 +24,25 @@ jobs:
          apt-get update -qq
          apt-get install -y gcc libcurl4-openssl-dev

-      # Gen2: compile the bootstrap C source into a working elc binary
-      - name: Build elc from bootstrap (gen2)
+      # Seed: use the committed linux-amd64 binary as the bootstrap
+      - name: Bootstrap from committed linux binary (seed)
        run: |
-          # -Wl,--allow-multiple-definition: elc-bootstrap.c and el_runtime.c both define
-          # is_digit/is_whitespace; bootstrap predates the text-processing primitives commit
-          gcc -O2 \
-            -I el-compiler/runtime \
-            dist/elc-bootstrap.c \
-            el-compiler/runtime/el_runtime.c \
-            -lcurl -lpthread -lm \
-            -Wl,--allow-multiple-definition \
-            -o dist/elc-gen2
-          chmod +x dist/elc-gen2
-          echo "gen2 elc built"
-          dist/elc-gen2 --version || true
+          chmod +x dist/platform/elc-linux-amd64
+          echo "seed elc (committed linux-amd64 binary)"
+          dist/platform/elc-linux-amd64 --version || true

-      # Gen3: use gen2 to compile the El compiler from its own El source (self-host)
-      - name: Self-host compile El compiler with gen2 (gen3)
+      # Gen2: use seed to self-host compile the El compiler
+      - name: Self-host compile El compiler (gen2)
        run: |
-          mkdir -p dist/platform
-          dist/elc-gen2 el-compiler/src/compiler.el > dist/elc-gen3.c
+          dist/platform/elc-linux-amd64 elc-cli.el > dist/elc-gen2.c
          gcc -O2 \
            -I el-compiler/runtime \
-            dist/elc-gen3.c \
+            dist/elc-gen2.c \
            el-compiler/runtime/el_runtime.c \
-            -lcurl -lpthread -lm \
+            -lcurl -lssl -lcrypto -lpthread -lm \
            -o dist/platform/elc
          chmod +x dist/platform/elc
-          echo "gen3 (self-hosted) elc built"
+          echo "gen2 (self-hosted) elc built"
          dist/platform/elc --version || true

      - name: Run tests - text
@@ -87,7 +77,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_core.el > /tmp/el_native_core.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_core.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_core
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_core
          /tmp/el_native_core

      - name: Run tests - native (text)
@@ -97,7 +87,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_text.el > /tmp/el_native_text.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_text.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_text
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_text
          /tmp/el_native_text

      - name: Run tests - native (string)
@@ -107,7 +97,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_string.el > /tmp/el_native_string.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_string.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_string
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_string
          /tmp/el_native_string

      - name: Run tests - native (math)
@@ -117,7 +107,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_math.el > /tmp/el_native_math.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_math.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_math
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_math
          /tmp/el_native_math

      - name: Run tests - native (state)
@@ -127,7 +117,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_state.el > /tmp/el_native_state.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_state.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_state
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_state
          /tmp/el_native_state

      - name: Run tests - native (time)
@@ -137,7 +127,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_time.el > /tmp/el_native_time.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_time.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_time
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_time
          /tmp/el_native_time

      - name: Run tests - native (json)
@@ -147,7 +137,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_json.el > /tmp/el_native_json.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_json.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_json
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_json
          /tmp/el_native_json

      - name: Run tests - native (env)
@@ -157,7 +147,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_env.el > /tmp/el_native_env.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_env.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_env
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_env
          /tmp/el_native_env

      - name: Run tests - native (fs)
@@ -167,7 +157,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_fs.el > /tmp/el_native_fs.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_fs.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_fs
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_fs
          /tmp/el_native_fs

      # Publish only after merge (push event), not on PR validation runs
@@ -178,7 +168,7 @@ jobs:
        run: |
          echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
          apt-get install -y -qq apt-transport-https ca-certificates gnupg curl
-          curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor -o /usr/share/keyrings/cloud.google.gpg
+          curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg -o /usr/share/keyrings/cloud.google.gpg
          echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" > /etc/apt/sources.list.d/google-cloud-sdk.list
          apt-get update -qq && apt-get install -y google-cloud-cli
          gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
@@ -34,35 +34,25 @@ jobs:
          apt-get update -qq
          apt-get install -y gcc libcurl4-openssl-dev

-      # Gen2: compile the bootstrap C source into a working elc binary
-      - name: Build elc from bootstrap (gen2)
+      # Seed: use the committed linux-amd64 binary as the bootstrap
+      - name: Bootstrap from committed linux binary (seed)
        run: |
-          # -Wl,--allow-multiple-definition: elc-bootstrap.c and el_runtime.c both define
-          # is_digit/is_whitespace; bootstrap predates the text-processing primitives commit
-          gcc -O2 \
-            -I el-compiler/runtime \
-            dist/elc-bootstrap.c \
-            el-compiler/runtime/el_runtime.c \
-            -lcurl -lpthread -lm \
-            -Wl,--allow-multiple-definition \
-            -o dist/elc-gen2
-          chmod +x dist/elc-gen2
-          echo "gen2 elc built"
-          dist/elc-gen2 --version || true
+          chmod +x dist/platform/elc-linux-amd64
+          echo "seed elc (committed linux-amd64 binary)"
+          dist/platform/elc-linux-amd64 --version || true

-      # Gen3: use gen2 to compile the El compiler from its own El source (self-host)
-      - name: Self-host compile El compiler with gen2 (gen3)
+      # Gen2: use seed to self-host compile the El compiler
+      - name: Self-host compile El compiler (gen2)
        run: |
-          mkdir -p dist/platform
-          dist/elc-gen2 el-compiler/src/compiler.el > dist/elc-gen3.c
+          dist/platform/elc-linux-amd64 elc-cli.el > dist/elc-gen2.c
          gcc -O2 \
            -I el-compiler/runtime \
-            dist/elc-gen3.c \
+            dist/elc-gen2.c \
            el-compiler/runtime/el_runtime.c \
-            -lcurl -lpthread -lm \
+            -lcurl -lssl -lcrypto -lpthread -lm \
            -o dist/platform/elc
          chmod +x dist/platform/elc
-          echo "gen3 (self-hosted) elc built"
+          echo "gen2 (self-hosted) elc built"
          dist/platform/elc --version || true

      - name: Run tests - text
@@ -97,7 +87,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_core.el > /tmp/el_native_core.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_core.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_core
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_core
          /tmp/el_native_core

      - name: Run tests - native (text)
@@ -107,7 +97,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_text.el > /tmp/el_native_text.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_text.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_text
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_text
          /tmp/el_native_text

      - name: Run tests - native (string)
@@ -117,7 +107,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_string.el > /tmp/el_native_string.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_string.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_string
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_string
          /tmp/el_native_string

      - name: Run tests - native (math)
@@ -127,7 +117,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_math.el > /tmp/el_native_math.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_math.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_math
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_math
          /tmp/el_native_math

      - name: Run tests - native (state)
@@ -137,7 +127,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_state.el > /tmp/el_native_state.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_state.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_state
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_state
          /tmp/el_native_state

      - name: Run tests - native (time)
@@ -147,7 +137,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_time.el > /tmp/el_native_time.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_time.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_time
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_time
          /tmp/el_native_time

      - name: Run tests - native (json)
@@ -157,7 +147,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_json.el > /tmp/el_native_json.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_json.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_json
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_json
          /tmp/el_native_json

      - name: Run tests - native (env)
@@ -167,7 +157,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_env.el > /tmp/el_native_env.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_env.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_env
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_env
          /tmp/el_native_env

      - name: Run tests - native (fs)
@@ -177,7 +167,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_fs.el > /tmp/el_native_fs.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_fs.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_fs
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_fs
          /tmp/el_native_fs

      # Publish only after merge (push event), not on PR validation runs
@@ -188,7 +178,7 @@ jobs:
        run: |
          echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
          apt-get install -y -qq apt-transport-https ca-certificates gnupg curl
-          curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor -o /usr/share/keyrings/cloud.google.gpg
+          curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg -o /usr/share/keyrings/cloud.google.gpg
          echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" > /etc/apt/sources.list.d/google-cloud-sdk.list
          apt-get update -qq && apt-get install -y google-cloud-cli
          gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
@@ -34,35 +34,26 @@ jobs:
          apt-get update -qq
          apt-get install -y gcc libcurl4-openssl-dev

-      # Gen2: compile the bootstrap C source into a working elc binary
-      - name: Build elc from bootstrap (gen2)
+      # Seed: use the committed linux-amd64 binary as the bootstrap
+      - name: Bootstrap from committed linux binary (seed)
        run: |
-          # -Wl,--allow-multiple-definition: elc-bootstrap.c and el_runtime.c both define
-          # is_digit/is_whitespace; bootstrap predates the text-processing primitives commit
-          gcc -O2 \
-            -I el-compiler/runtime \
-            dist/elc-bootstrap.c \
-            el-compiler/runtime/el_runtime.c \
-            -lcurl -lpthread -lm \
-            -Wl,--allow-multiple-definition \
-            -o dist/elc-gen2
-          chmod +x dist/elc-gen2
-          echo "gen2 elc built"
-          dist/elc-gen2 --version || true
+          chmod +x dist/platform/elc-linux-amd64
+          echo "seed elc (committed linux-amd64 binary)"
+          dist/platform/elc-linux-amd64 --version || true

-      # Gen3: use gen2 to compile the El compiler from its own El source (self-host)
-      - name: Self-host compile El compiler with gen2 (gen3)
+      # Gen2: use seed to self-host compile the El compiler
+      - name: Self-host compile El compiler (gen2)
        run: |
          mkdir -p dist/platform
-          dist/elc-gen2 el-compiler/src/compiler.el > dist/elc-gen3.c
+          dist/platform/elc-linux-amd64 elc-cli.el > dist/elc-gen2.c
          gcc -O2 \
            -I el-compiler/runtime \
-            dist/elc-gen3.c \
+            dist/elc-gen2.c \
            el-compiler/runtime/el_runtime.c \
-            -lcurl -lpthread -lm \
+            -lcurl -lssl -lcrypto -lpthread -lm \
            -o dist/platform/elc
          chmod +x dist/platform/elc
-          echo "gen3 (self-hosted) elc built"
+          echo "gen2 (self-hosted) elc built"
          dist/platform/elc --version || true

      # Build elb binary
@@ -74,7 +65,7 @@ jobs:
            -I el-compiler/runtime \
            dist/elb.c \
            el-compiler/runtime/el_runtime.c \
-            -lcurl -lpthread -lm \
+            -lcurl -lssl -lcrypto -lpthread -lm \
            -o dist/bin/elb
          chmod +x dist/bin/elb
          echo "elb built"
@@ -87,7 +78,7 @@ jobs:
            -I el-compiler/runtime \
            dist/epm.c \
            el-compiler/runtime/el_runtime.c \
-            -lcurl -lpthread -lm \
+            -lcurl -lssl -lcrypto -lpthread -lm \
            -o dist/bin/epm
          chmod +x dist/bin/epm
          echo "epm built"
@@ -100,7 +91,7 @@ jobs:
            -I el-compiler/runtime \
            dist/el-install.c \
            el-compiler/runtime/el_runtime.c \
-            -lcurl -lpthread -lm \
+            -lcurl -lssl -lcrypto -lpthread -lm \
            -o dist/bin/el-install
          chmod +x dist/bin/el-install
          echo "el-install built"
@@ -137,7 +128,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_core.el > /tmp/el_native_core.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_core.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_core
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_core
          /tmp/el_native_core

      - name: Run tests - native (text)
@@ -147,7 +138,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_text.el > /tmp/el_native_text.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_text.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_text
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_text
          /tmp/el_native_text

      - name: Run tests - native (string)
@@ -157,7 +148,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_string.el > /tmp/el_native_string.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_string.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_string
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_string
          /tmp/el_native_string

      - name: Run tests - native (math)
@@ -167,7 +158,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_math.el > /tmp/el_native_math.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_math.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_math
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_math
          /tmp/el_native_math

      - name: Run tests - native (state)
@@ -177,7 +168,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_state.el > /tmp/el_native_state.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_state.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_state
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_state
          /tmp/el_native_state

      - name: Run tests - native (time)
@@ -187,7 +178,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_time.el > /tmp/el_native_time.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_time.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_time
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_time
          /tmp/el_native_time

      - name: Run tests - native (json)
@@ -197,7 +188,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_json.el > /tmp/el_native_json.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_json.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_json
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_json
          /tmp/el_native_json

      - name: Run tests - native (env)
@@ -207,7 +198,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_env.el > /tmp/el_native_env.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_env.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_env
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_env
          /tmp/el_native_env

      - name: Run tests - native (fs)
@@ -217,7 +208,7 @@ jobs:
          RUNTIME="$(pwd)/el-compiler/runtime"
          "$ELC" --test tests/native/test_fs.el > /tmp/el_native_fs.c
          gcc -O2 -I "$RUNTIME" /tmp/el_native_fs.c "$RUNTIME/el_runtime.c" \
-            -lcurl -lpthread -lm -o /tmp/el_native_fs
+            -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_fs
          /tmp/el_native_fs

      # Bundle the SDK tarball - runs from the repo root to reference lang/ paths correctly
@@ -303,7 +294,7 @@ jobs:
        run: |
          echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
          apt-get install -y -qq apt-transport-https ca-certificates gnupg curl
-          curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg | gpg --dearmor -o /usr/share/keyrings/cloud.google.gpg
+          curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg -o /usr/share/keyrings/cloud.google.gpg
          echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" > /etc/apt/sources.list.d/google-cloud-sdk.list
          apt-get update -qq && apt-get install -y google-cloud-cli
          gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
@@ -4999,7 +4999,13 @@ el_val_t state_get_or(el_val_t key, el_val_t default_val) {

 el_val_t float_to_str(el_val_t f) {
    char buf[64];
-    snprintf(buf, sizeof(buf), "%g", el_to_float(f));
+    double v = el_to_float(f);
+    /* Normalize NaN to "nan" regardless of sign — platform-independent. */
+    if (isnan(v)) {
+        snprintf(buf, sizeof(buf), "nan");
+    } else {
+        snprintf(buf, sizeof(buf), "%g", v);
+    }
    return el_wrap_str(el_strdup(buf));
 }

@@ -44,7 +44,7 @@ run_runtime_case() {
    fi

    if ! cc -O2 -I "${RUNTIME_DIR}" "${out_c}" "${RUNTIME_DIR}/el_runtime.c" \
-            -lcurl -lpthread -o "${out_bin}" 2>/tmp/cal_test.cc.err; then
+            -lcurl -lssl -lcrypto -lpthread -lm -o "${out_bin}" 2>/tmp/cal_test.cc.err; then
        echo "FAIL  ${name} — cc failed:"
        cat /tmp/cal_test.cc.err | sed 's/^/      /'
        FAIL=$((FAIL+1))
@@ -26,7 +26,7 @@ echo "==> Compiling runner.el via ${ELC}"

 echo "==> Linking against ${RUNTIME_DIR}/el_runtime.c"
 cc -O2 -I "${RUNTIME_DIR}" "${OUT_C}" "${RUNTIME_DIR}/el_runtime.c" \
-   -lcurl -lpthread -o "${OUT_BIN}"
+   -lcurl -lssl -lcrypto -lpthread -lm -o "${OUT_BIN}"

 echo "==> Running"
 "${OUT_BIN}"
@@ -42,7 +42,7 @@ run_runtime_case() {
    fi

    if ! cc -O2 -I "${RUNTIME_DIR}" "${out_c}" "${RUNTIME_DIR}/el_runtime.c" \
-            -lcurl -lpthread -o "${out_bin}" 2>/tmp/text_test.cc.err; then
+            -lcurl -lssl -lcrypto -lpthread -lm -o "${out_bin}" 2>/tmp/text_test.cc.err; then
        echo "FAIL  ${name} — cc failed:"
        cat /tmp/text_test.cc.err | sed 's/^/      /'
        FAIL=$((FAIL+1))
@@ -55,7 +55,7 @@ run_runtime_case() {
    fi

    if ! cc -O2 -I "${RUNTIME_DIR}" "${out_c}" "${RUNTIME_DIR}/el_runtime.c" \
-            -lcurl -lpthread -o "${out_bin}" 2>/tmp/time_test.cc.err; then
+            -lcurl -lssl -lcrypto -lpthread -lm -o "${out_bin}" 2>/tmp/time_test.cc.err; then
        echo "FAIL  ${name} — cc failed:"
        cat /tmp/time_test.cc.err | sed 's/^/      /'
        FAIL=$((FAIL+1))
@@ -116,7 +116,7 @@ run_typeerror_case() {
    fi

    if cc -O2 -I "${RUNTIME_DIR}" "${out_c}" "${RUNTIME_DIR}/el_runtime.c" \
-           -lcurl -lpthread -o /tmp/time_test_should_not_link 2>/tmp/time_test.cc.err; then
+           -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/time_test_should_not_link 2>/tmp/time_test.cc.err; then
        echo "FAIL  ${name} — cc unexpectedly succeeded; type rule did not fire"
        FAIL=$((FAIL+1))
        FAILED_NAMES+=("${name}")
Author	SHA1	Message	Date
will.anderson	f2741e4bdb	Merge pull request 'fix: download GCP apt key directly without gpg --dearmor' (#8 ) from fix/ci-openssl-linker into dev El SDK CI - dev / build-and-test (push) Failing after 3m59s Details	2026-05-06 23:39:06 +00:00
will.anderson	7fd01b8a8d	fix: download GCP apt key directly, no gpg --dearmor El SDK CI - dev / build-and-test (pull_request) Successful in 6m38s Details packages.cloud.google.com now serves the key in binary format; piping through gpg --dearmor fails with 'no valid OpenPGP data found'.	2026-05-06 18:28:38 -05:00
will.anderson	d2940f5d1d	Merge pull request 'fix: add --batch to gpg --dearmor in CI publish steps' (#7 ) from fix/ci-openssl-linker into dev El SDK CI - dev / build-and-test (push) Failing after 10m1s Details	2026-05-06 23:17:12 +00:00
will.anderson	dca741f915	fix: add --batch to gpg --dearmor in publish steps El SDK CI - dev / build-and-test (pull_request) Successful in 8m50s Details gpg tries to open /dev/tty for passphrase input when no TTY is present in CI, causing the GCP key setup to fail. --batch suppresses interactive prompts and dearmoring doesn't require one anyway.	2026-05-06 17:58:16 -05:00
will.anderson	9862f4d6e1	Merge pull request 'fix: add -lssl -lcrypto to all CI gcc linker commands' (#6 ) from fix/ci-openssl-linker into dev El SDK CI - dev / build-and-test (push) Failing after 3m25s Details	2026-05-06 22:53:37 +00:00
will.anderson	8b074d2e39	fix: normalize NaN to 'nan' in float_to_str regardless of sign bit El SDK CI - dev / build-and-test (pull_request) Successful in 3m18s Details 0.0/0.0 can produce -nan on Linux/x86_64 (%g gives '-nan'), causing the no-cycle calendar test to fail. Explicitly check isnan() and emit 'nan' so behavior is platform-independent.	2026-05-06 17:49:35 -05:00
will.anderson	ec9c322cc7	fix: use elc-linux-amd64 as bootstrap seed instead of elc-bootstrap.c El SDK CI - dev / build-and-test (pull_request) Failing after 1m57s Details elc-bootstrap.c is stale and produces a broken gen2 that can't correctly compile current El source (generates C without main() for user programs). The committed elc-linux-amd64 binary is the current, correct seed for linux CI. This removes the gen2-from-C step entirely.	2026-05-06 17:45:57 -05:00
will.anderson	702093e043	fix: add -lssl -lcrypto -lm to all test runner gcc commands El SDK CI - dev / build-and-test (pull_request) Failing after 1m7s Details Same OpenSSL/math linker flags needed everywhere el_runtime.c is linked.	2026-05-06 17:41:55 -05:00
will.anderson	95b6fac094	fix: use elc-cli.el as gen3 entry point, not compiler.el directly El SDK CI - dev / build-and-test (pull_request) Failing after 1m8s Details compiler.el imports lexer.el/parser.el/codegen.el with bare names; those resolve relative to the source file's directory only when the entry point is elc-cli.el (which imports el-compiler/src/compiler.el by full path). Compiling compiler.el directly leaves lex/parse/codegen as undefined refs.	2026-05-06 17:39:38 -05:00
will.anderson	af66cebfd3	fix: add -lssl -lcrypto to all CI gcc linker commands El SDK CI - dev / build-and-test (pull_request) Failing after 28s Details el_runtime.c now uses OpenSSL EVP AEAD encryption; all gcc commands in all three workflow files need -lssl -lcrypto to link correctly.	2026-05-06 17:36:48 -05:00