Step 4 of clawdie-enable-mother.sh rewrote provider.env in place with `cat "$tmp" >"$f"`, which truncates the live secrets file before streaming the new content. A crash, signal, disk-full, or concurrent read during that window leaves provider.env empty or partial — and the colibri_daemon prestart sources it for the provider key + BW_* creds. Switch to the write-temp-then-rename pattern already used for external-mcp.json in step 3: mktemp in provider.env's own directory (so the rename stays on one filesystem and is atomic), chmod 0600 before the swap, then mv. A reader now always sees a complete file, old or new. Also add jq to the disk-install extras so disk-deployed hosts can run the script post-deploy (step 3 hard-requires jq; the live image already ships it). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| .gitkeep | ||
| npm-globals.txt | ||
| pkg-list-desktop-base.txt | ||
| pkg-list-disk-install-extras.txt | ||
| pkg-list-host.txt | ||
| pkg-list-jails.txt | ||
| pkg-list-live-operator.txt | ||
| pkg-list-nvidia-390.txt | ||
| pkg-list-nvidia-470.txt | ||
| pkg-list-nvidia-590.txt | ||
| pkg-list-nvidia-all.txt | ||
| pkg-list-nvidia.txt | ||
| pkg-list-xfce-theming.txt | ||
| pkg-list-xfce.txt | ||