Fix SIGILL crash on CPUs without AVX2 support#71
Merged
Conversation
sgasser
force-pushed
the
fix/bun-baseline-avx2-issue-70
branch
from
ff8d384 to
c00806d
Compare
Copy Bun binary from official oven/bun:1-slim image instead of using the install script. The official images use baseline builds for x64, which only require SSE4.2 and work on older/low-power CPUs like the Intel Atom C3558R that lack AVX2 instructions. Also fixes compatibility with updated presidio-analyzer base image: - Use USER root for build, then switch to non-root (UID 1001) for runtime - Fix Presidio config paths (/app/presidio_analyzer/conf/) - Move PasteGuard to /pasteguard to avoid overwriting Presidio's /app - Update supervisord to run without root privileges - Update volume mount paths in docker-compose.yml and docs
sgasser
force-pushed
the
fix/bun-baseline-avx2-issue-70
branch
from
c00806d to
21e5178
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Fixes #70 - PasteGuard crashes with
SIGILLon x86_64 CPUs without AVX2 support (e.g., Intel Atom C3558R).Root cause: The Bun install script detected AVX2 on the GitHub Actions build host and installed the optimized binary. When run on CPUs without AVX2, it crashed immediately.
Fix: Copy the Bun binary directly from the official
oven/bun:1-slimbuilder stage. The official images use baseline builds for x64, which only require SSE4.2.Also fixes compatibility with the updated
presidio-analyzerbase image which now runs as non-root user.Changes
docker/Dockerfile:USER rootfor apt-get commands/app/presidio_analyzer/conf/)/pasteguardto avoid directory conflict with Presidiodocker/supervisord.conf:/app/pasteguard/usr/local/bin/bunTested