dfinity · basvandijk · Jul 29, 2026 · Jun 28, 2026 · Jun 28, 2026 · Jun 28, 2026
@@ -1,5 +1,5 @@
 {
-  "image": "ghcr.io/dfinity/ic-dev@sha256:661a3e80a89607d98b9384e4dddfaa4bd8f90a0cb420006cbf3f3f061aa8e9a5",
+  "image": "ghcr.io/dfinity/ic-dev@sha256:ed8673ea7f78a4bf8bd0ddb7958f62a7deb6c81b2d051d17265cc001ac253bf9",
   "remoteUser": "ubuntu",
   "privileged": true,
   "runArgs": [

@@ -22,7 +22,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:65ab9023792784e8e13dbdd5b9a63c2dff0cd38237afd1cdbc299577505d4b88
+      image: ghcr.io/dfinity/ic-build@sha256:c7760a23d358f6748188ca96de05a7a48dd55df86f83e3af6e519044c2690a15
       options: >-
         -e NODE_NAME --privileged --cgroupns host
         --mount type=tmpfs,target="/home/buildifier/.local/share/containers"

@@ -55,6 +55,22 @@ jobs:
       pull-requests: write
 
 
+  # This job runs a bazel build & test on the Remote Build Execution cluster @ Namespace.
+  # It's currently in the evaluation phase where we compare its speed and stability with the `bazel-test-all` job.
+  # We expect it to fail and that's OK and it shouldn't block PRs & releases.
+  ci-rbe-evaluation:
+    name: CI RBE Evaluation
+    # for dfinity/ic: run on all events except for forked PRs
+    if: |
+      github.repository == 'dfinity/ic' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
+    uses: ./.github/workflows/ci-rbe-evaluation.yml
+    secrets: inherit
+    with:
+      commit-sha: ${{ github.sha }}
+      release-build: ${{ inputs.release-build }}
+    permissions:
+      contents: read
+
 ## Explanation on the below jobs for posting required checks:
 ## For accepting external contributions we need to trigger the workflow from `workflow_dispatch`, not the pull_request directly
 ## We use status checks to post the result back to the PR and mark those checks as "required"

@@ -33,7 +33,7 @@ jobs:
     runs-on: &dind-large-setup
       labels: dind-large
     container: &container-setup
-      image: ghcr.io/dfinity/ic-build@sha256:65ab9023792784e8e13dbdd5b9a63c2dff0cd38237afd1cdbc299577505d4b88
+      image: ghcr.io/dfinity/ic-build@sha256:c7760a23d358f6748188ca96de05a7a48dd55df86f83e3af6e519044c2690a15
       options: >-
          -e NODE_NAME --privileged --cgroupns host --mount type=tmpfs,target="/tmp/containers"
     timeout-minutes: 90
@@ -179,7 +179,9 @@ jobs:
         uses: ./.github/actions/bazel
         with:
           run: |
-            targets_args=()
+            # Local system-tests will run on the Remote Execution Cluster @ Namespace
+            # via the .github/workflows/ci-rbe-evaluation.yml job so skip them in this job:
+            targets_args=(--exclude_tags=local_system_test)
             if [[ '${{ needs.config.outputs.skip_long_tests }}' == 'true' ]]; then
               targets_args+=("--skip_long_tests")
             fi
@@ -244,7 +246,6 @@ jobs:
             bazel_args+=( --config=stamped )
           fi
 
-
           echo "bazel-args=${bazel_args[@]}" >> $GITHUB_OUTPUT
 
       - name: Download target files

@@ -37,7 +37,7 @@ jobs:
     runs-on: &dind-small-setup
       labels: dind-small
     container: &container-setup
-      image: ghcr.io/dfinity/ic-build@sha256:65ab9023792784e8e13dbdd5b9a63c2dff0cd38237afd1cdbc299577505d4b88
+      image: ghcr.io/dfinity/ic-build@sha256:c7760a23d358f6748188ca96de05a7a48dd55df86f83e3af6e519044c2690a15
       options: >-
          -e NODE_NAME --mount type=tmpfs,target="/tmp/containers"
     steps: