ANTfrastructure

The build images, CI actions, reusable workflows and quality gates every Kataglyphis repository builds on.

Docs site

Prebuilt Linux and Windows Server Core images provide GCC, LLVM/Clang, Vulkan, MSVC, media and inference libraries, nginx, and an arm64 artifact bundle. The composite actions, reusable workflows, shell libraries and gates serve the family at @develop.

Highlights

• One multi-arch :latest for Linux: ONNX Runtime (+GenAI), OpenCV, FFmpeg, GStreamer, LiteRT, TVM, IREE (GenAI smoke contract; RISC-V cross tests).
• A Windows build image, :winamd64, with MSVC, clang-cl, DirectML and HailoRT; :winarm64 is its arm64 bundle.
• Accelerators: Hailo-10H in :latest, CUDA and DeepStream in :latest-nvidia, MIGraphX in :latest-rocm.
• Reusable CI and Python setup: workflows, locked cmake-format and dartdoc tools, dependency environments, image-backed overlays isolated from conflicting uv project settings and consumer inventory; see Python CI.
• Gates that fail loudly: preflight, mutation proofs, consumer pin checks (uv exclusions) and runtime smokes (ORT census); active develop proofs finish before the latest queued push (CI triggers). Windows test result paths are created when needed, and interrupted job waits preserve real statuses (test reports).
• Home-lab stacks, deliberately here: an Ollama + Open WebUI server, Home Assistant, Nextcloud AIO, Ansible, weekly backups to the NAS.

Quick start

# use the image; its default CMD is a shell
nerdctl run -it --rm ghcr.io/kataglyphis/kataglyphis_beschleuniger:latest
git clone --recurse-submodules --branch develop https://github.com/Kataglyphis/ANTfrastructure.git
cd ANTfrastructure
bash linux/scripts/build-cross-chain.sh --target-arches amd64,arm64,riscv64 --log-dir ./logs/build-logs

.\windows\Build-Buildkit.ps1          # the Windows image, :winamd64 (non-admin shell; -Gpu for :winamd64-nvidia)

A fresh host starts at Linux Host Setup or Windows Host Setup. From Ubuntu WSL2, run bash linux/scripts/wsl-quality.sh setup to install pinned tools, then bash linux/scripts/wsl-quality.sh check --jobs 4 to run Linux and PowerShell checks with bounded workers. Windows-only tests use native Windows PowerShell; script tests and coverage. Use bash linux/scripts/refactor-python.sh --root <checkout> --check to preview another repo's Python format debt, or --apply -- path/to/file.py to create a reviewable fix. Consumers call the reusable report, locked Ruff and ty, refactor, mutation and PowerShell workflows at @develop; quality tooling and adoption. Runtime heartbeat cleanup and plugin scan verdicts are regression-tested. Generated reports go in ignored logs/.

Published images

Registry ghcr.io/kataglyphis/kataglyphis_beschleuniger, one manifest per tag over every architecture of its variant (AGENTS.md § Image and tag naming). Every tag, the accelerator matrix and the GPUs :latest-nvidia runs on: docs/overview.md.

Tag	What
:latest	Linux manifest over amd64, arm64 and riscv64; the Hailo runtime on amd64 and arm64
:latest-nvidia	CUDA, cuDNN and DeepStream 9.1, amd64
:latest-rocm	ROCm and MIGraphX, amd64
:winamd64	Windows manifest (windows/amd64), CPU + DirectML; :winamd64-nvidia, :winamd64-rocm
:winarm64	Windows arm64 artifact bundle: a windows/amd64 image, never --platform windows/arm64

Documentation

I want to…	Read
Find a topic or build the docs locally	docs/INDEX.md · Locked docs setup
Wire a new project, pin one direct submodule to its remote default tip, or reuse build, installer, MSIX smoke, image-Python, discovery, reporting, process and test-fixture helpers	Adoption · Shared libraries · Synthetic test fixtures · Image defaults
Upgrade dependencies in one repo or every active, nonfork owned repo; the driver checks the latest Renovate CLI, updates direct submodules to remote default tips, and includes the required Torch/vision Git lookups in a scoped Python scan. Tracked security locks and wheel hashes move together	docs/dependency-updates.md
See what is published, how the chain is laid out, what is in it	docs/overview.md
Build and accept Linux images, including the pinned riscv64 Torch wheelhouse, and smoke-test Flutter web builds	Basics · Cross builds · Accelerators · Consumer acceptance · Python app bundles · Python venv and TVM smoke coverage, including VENV-SET · Webserver and browser smoke helpers
Build the Windows image and arm64 bundle, or reuse guarded runtime DLL staging and container source selection	docs/windows-builds.md · Container root selection · docs/windows-build-lanes.md · docs/windows-cross-builds.md · Windows CI checkout modes · ROCm details
Look up an error message	docs/failure-modes.md
Run quality lanes by hand or see their triggers	docs/ci-build-triggers.md
Know every quality gate, the exception policy and shared build behavior	Fatal full-sweep Ruff, ty and annotation checks for Linux and Windows · Shell return-status gate and copied-bootstrap proof · ShellCheck warning ratchet and Ansible scope, with bounded Windows batches · Dead shell functions, including shared API calls · Quality tooling and duplication scan boundaries · Gate registry · Test worker, timeout and process cleanup · Linux compiler, APT and privilege policies · Windows shared build config, bounded TCP probes and fixtures · Slang WGSL snapshot and parity
Check CI test reports, consumer quality wiring and script reuse across repos	Python report gate · Python CI artifact uploads · Windows Pester coverage for 15 modules · Shared PowerShell Gallery bootstrap · Shared Windows staging and source-copy fixtures · Consumer-to-hub Bash/PowerShell reuse · Weekly fleet reuse report · Consumer inventory
Check Windows PowerShell complexity	Scanner, limits and ignored report folder
Check package licences, icons and image contents	Licences and artifact checks · Flutter and Android icons · PE icon tests · SBOM
Serve LLMs on the family's reference server	linux/llm-stack/README.md
Run a coding agent on-device on a Snapdragon (GenieX)	docs/geniex-local-ai-setup.md
Rules for agents and contributors	AGENTS.md · docs/windows-build-invariants.md
Known work, and what changed	BACKLOG.md · CHANGELOG.md

Source-Controlled Version Snapshot

This block is generated from the Dockerfiles and setup scripts by python3 docs/scripts/sync_versions.py --write.

Target	Source-controlled defaults
Linux base image	Ubuntu 26.04, LLVM/Clang 23.1.3, GCC 16, CMake 4.4.4, Vulkan SDK 1.4.363.0
Android layer	Android SDK 15859902, NDK 29.0.14206865, CMake 4.1.2
Webserver image	Ubuntu 26.04
Windows build image	Windows Server Core LTSC 2025, Visual Studio Build Tools 18, Vulkan SDK 1.4.363.0, GStreamer 1.29.2, CUDA 13.4.3, ONNX Runtime v1.31.0

Contributing and contact

Contribute by reusing shared repo and submodule functionality first; run make hooks and make preflight. See adoption rules, family rules and AGENTS.md § Validation. Licence: MIT, see LICENSE.