build-runai-model-streamer: fall back to Debian's libaio tarball

releases.pagure.org, the host upstream's Dockerfile pins, returns 404 from the runner (pagure.io was sunset in 2026). Debian mirrors the identical tarball, and the same sha256 still gates it.

Author: luhenry

.github/workflows/build-runai-model-streamer.yml

@@ -220,7 +220,13 @@ jobs:
               make -C src -j"$(nproc)" ENABLE_SHARED=0 CFLAGS="-fPIC -O2" > /dev/null
               make install ENABLE_SHARED=0 > /dev/null
               cd /tmp
-              curl -fsSL -o libaio-0.3.113.tar.gz https://releases.pagure.org/libaio/libaio-0.3.113.tar.gz
+              # Upstream pins releases.pagure.org (pagure.io was sunset in 2026 and that host now
+              # 404s from here); the same tarball is mirrored by Debian, and the checksum rejects
+              # anything else.
+              for url in https://releases.pagure.org/libaio/libaio-0.3.113.tar.gz \
+                         https://deb.debian.org/debian/pool/main/liba/libaio/libaio_0.3.113.orig.tar.gz; do
+                curl -fsSL -o libaio-0.3.113.tar.gz "$url" && break
+              done
               echo "2c44d1c5fd0d43752287c9ae1eb9c023f04ef848ea8d4aafa46e9aedb678200b  libaio-0.3.113.tar.gz" | sha256sum -c -
               tar zxf libaio-0.3.113.tar.gz
               cd libaio-0.3.113
@@ -376,4 +382,4 @@ jobs:
     with:
       artifact-pattern: runai-model-streamer-${{ matrix.version }}-py3-none-manylinux_riscv64
       gpl-sources-artifact: runai-model-streamer-${{ matrix.version }}-gpl-sources
-      gpl-sources-description: gcc
+      gpl-sources-description: gcc and the copyleft libraries bundled in the wheel