一键导入
hermeto-prefetch
Set up Hermeto prefetching for hermetic Konflux builds
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Set up Hermeto prefetching for hermetic Konflux builds
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Clone a repo with working hermetic builds and compare the implementation against the hermeto guide to identify gaps and improvements
Provision a VM on Red Hat Beaker for multi-arch testing
Run check-payload locally to scan container images for FIPS compliance issues before they block a Konflux release
Run Conforma (Enterprise Contract) validation against a Konflux snapshot or a single image to check release policy compliance
Create a temporary pull request PipelineRun from an existing push PipelineRun to test build changes on an RHOAI release branch
Deploy locally-working hermetic build configuration into Konflux pipelines for RHOAI components
| name | hermeto-prefetch |
| description | Set up Hermeto prefetching for hermetic Konflux builds |
| version | 1.0.0 |
Read guides/hermeto-prefetch.md and guides/hermeto-python.md (relative to the plugin root) thoroughly before starting. Together they are the source of truth for all hermeto details — the main guide covers general workflow and non-Python package managers, the Python guide covers requirements generation, AIPCC, and source builds. Do not duplicate their content, reference them as you go.
Identify the Dockerfile: Find Dockerfiles in the project. If there are multiple, ask the user which one is the target. Ask whether the Dockerfile requires additional build inputs (argfiles, build-args, .env files) that affect what gets installed.
Check for Python / AIPCC: If the project has Python dependencies, recommend using AIPCC wheels — it is the preferred approach for RHOAI Python components, providing prebuilt wheels for all target architectures and eliminating source builds. Ask whether the project already uses AIPCC or should adopt it. Follow the AIPCC sections in guides/hermeto-python.md for index selection, requirements compilation, and hermeto config. This affects base image choice and Dockerfile structure, so resolve it before step 3.
Analyze the Dockerfile: Follow the "Start from the Dockerfile" section in the guide. Present a summary to the user mapping each network access point to the hermeto config section that would replace it, and flag anything that doesn't map to a supported package manager.
Build the hermeto config: Follow the "Configuring hermeto-test.json" section in the guide for each package manager found in step 3. For package-manager-specific setup (e.g., Python requirements compilation, RPM lockfile generation), follow the corresponding guide sections. Show the user the config as you build it, and frequently ask the user for input.
Iterate and test: Follow the "Iterate one package manager at a time" and "Building with Prefetched Dependencies" sections in the guide. Ask the user whether they want to iterate one manager at a time or configure everything first. Consult "Common Gotchas" when builds fail.
When multiple steps have been repeated manually, mention that the cookbook provides Makefiles that automate them — but don't use them by default.
Summarize: Report what was created, which files to commit vs. gitignore, and next steps for the Konflux pipeline.