Summary

Add nco 5.4.0-alpha04 built from the pinned upstream source for openEuler 24.03-lts-sp4.

• Validated run: 31660957237.
• Candidate SHA256: 15ba76539ec2606c6444c0b3d42d59a7efe19c0a3071acc98e1ca702a5c5a0fa.

Changes

Adversarial review

Testcase review

• Final result: approved after 1 round.
• Coverage score: 0.9.
• Round 1: approved — Tests are correct and sufficient for the NCO CLI contract: exact version assertion plus a genuine netCDF data path (ncgen fabricate -> ncatted write -> ncks -m readback -> ncap2 compute -> ncks -H exact value verification) matching the final Dockerfile with no Docker/network/lifecycle violations;...
  • Review input: full.
  • minor — HPC/nco/tests/test.sh: The suite exercises only the netCDF classic (netCDF-3) data path; the netCDF4/HDF5 layer compiled into the image is never touched, so an image with broken HDF5/netCDF4 support (e.g., bad hdf5 linkage or a runtime hdf5 lib missing) would pass every assertion.

Fixer process

• Native Fixer invocations: 2.
• Round 1, attempt 1: fixed — Both architectures built and passed version + ncatted/ncks data-path tests but failed because ncap2 was never built: NCO's configure gates ncap2 on finding the antlr executable (HAVE_ANTLR != no), and the builder only installed antlr-C++ (headers/static lib), not antlr-tool (which ships /usr/bin/...
  • Trigger: native_validation_failure; failed architectures: x86_64, aarch64.
  • Change: HPC/nco/5.4.0-alpha04/24.03-lts-sp4/Dockerfile — Added antlr-tool to the builder-stage dnf install list (line 10: antlr-C++ antlr-tool gsl-devel)
• Round 2, attempt 1: fixed — Both architectures built and ran ncap2/ncks correctly; the only failure was a stale test assertion expecting the old annotated temp_sq[i]=val output format that NCO 5.4.0-alpha04 no longer emits. Verified against the pinned upstream 5.4.0-alpha04 source that -H/--hdn means data-toggle/hidde...
  • Trigger: native_validation_failure; failed architectures: x86_64, aarch64.
  • Change: HPC/nco/tests/test.sh — Replaced the temp_sq[i]=val per-element substring checks with a whitespace-normalized assertion that the ncks output contains the exact CDL data line temp_sq=0,4,16,36;, and updated the PASS/FAIL messages accordingly.
• Final outcome: the repaired candidate passed sealed native validation on x86_64 and aarch64.

Repository checks

• Promoted from validated run 31660957237.
• Deterministic target contract: passed
• Hadolint: 5 advisory findings.
  • /home/openeuler/actions-runner/_work/_temp/phase1-target/HPC/nco/5.4.0-alpha04/24.03-lts-sp4/Dockerfile:6 DL3041 warning: Specify version with dnf install -y -.
  • /home/openeuler/actions-runner/_work/_temp/phase1-target/HPC/nco/5.4.0-alpha04/24.03-lts-sp4/Dockerfile:14 SC2046 warning: Quote this to prevent word splitting.
  • /home/openeuler/actions-runner/_work/_temp/phase1-target/HPC/nco/5.4.0-alpha04/24.03-lts-sp4/Dockerfile:14 DL3003 warning: Use WORKDIR to switch to a directory
  • 2 more findings are preserved in the candidate artifact.

Confidence Score

• Score: 0.9 (auto-merge).
• Inputs: both native builds passed; both required runtime test sets passed; Hadolint advisories: 5; final metadata contract passed.
• Target base SHA: 23a59d858085a33b05fd45fe9affc26dea3e2298.
• Task ID: new-image-hpc-nco-5.4.0-alpha04-24.03-lts-sp4.
• Target evidence: version_info.json, x86_64.junit.xml, aarch64.junit.xml.
• Production candidate evidence: reports/results.json.
• Candidate integrity: verified before delivery.

Checklist

• Version and upstream source are pinned
• Changed files are restricted to the task scope
• x86_64 native validation passed
• aarch64 native validation passed
• Adversarial review records are preserved
• Native Fixer process is recorded
• Candidate integrity was verified before delivery