What the developer wrote
Authored by fanquake
ci: always use tag for LLVM checkout
Rather than trying to match the apt installed clang version, which is
prone to intermittent issues. i.e #33345.
What changed, and why it matters
This is a Bitcoin Core continuous integration (CI) script change. It switches the LLVM source checkout from trying to match the locally installed clang version to always using a fixed tag (llvmorg-21.1.1). The commit message says this avoids intermittent CI issues. There is no change to the Bitcoin Core software that users run, no wallet or consensus code is touched, and no security vulnerability is described.
No security action required. Treat as a normal CI reliability improvement.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies ci/test/01_base_install.sh. Previously, when USE_INSTRUMENTED_LIBCPP was set and APT_LLVM_V was present, the script cloned the llvm-project repository at a tag derived from the installed clang –version output; otherwise it used a hard-coded llvmorg-21.1.0 tag. The patch removes the version detection and always clones llvmorg-21.1.1. It also moves the git clone outside the conditional so it runs regardless of APT_LLVM_V. The cmake build step remains inside the APT_LLVM_V branch. This is purely a CI infrastructure reliability fix.
Changed components
ci/test/01_base_install.shInspect captured patch +2 / −3
diff --git a/ci/test/01_base_install.sh b/ci/test/01_base_install.sh
index b1a9d625..6944ab42 100755
--- a/ci/test/01_base_install.sh
+++ b/ci/test/01_base_install.sh
@@ -56,10 +56,9 @@ if [ -n "$PIP_PACKAGES" ]; then
fi
if [[ -n "${USE_INSTRUMENTED_LIBCPP}" ]]; then
+ ${CI_RETRY_EXE} git clone --depth=1 https://github.com/llvm/llvm-project -b "llvmorg-21.1.1" /llvm-project
+
if [ -n "${APT_LLVM_V}" ]; then
- ${CI_RETRY_EXE} git clone --depth=1 https://github.com/llvm/llvm-project -b "llvmorg-$( clang --version | sed --silent 's@.*clang version \([0-9.]*\).*@\1@p' )" /llvm-project
- else
- ${CI_RETRY_EXE} git clone --depth=1 https://github.com/llvm/llvm-project -b "llvmorg-21.1.0" /llvm-project
cmake -G Ninja -B /clang_build/ \
-DLLVM_ENABLE_PROJECTS="clang" \
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.