Issues - clawdie/colibri - Forgejo: Beyond coding. We Forge.

clawdie/colibri

New issue

colibri: gate autospawn on /var/db/colibri/.secured (honor colibri_daemon_require_secured)

#183 by clawdie was closed 2026-06-26 17:27:10 +02:00

Blocked: zot cannot autospawn — spawner uses stdin(Stdio::null())

#143 by clawdie was closed 2026-06-24 14:20:49 +02:00

Stage jail spawn files under a daemon-owned path instead of root-owned /var/run

#135 by clawdie was closed 2026-06-21 17:38:05 +02:00

Unify the clawdie npm-global PATH snippet into one shared file (image + jail)

#122 by clawdie was closed 2026-06-21 16:41:36 +02:00

add --jail flags to colibri spawn-agent (jailed spawn is raw-socket-JSON only today)

#102 by clawdie was closed 2026-06-20 22:53:13 +02:00

add register-tenant socket command + CLI verb (tenants only insertable via raw SQLite today)

#101 by clawdie was closed 2026-06-20 22:53:12 +02:00

jail bootstrap: reconcile npm package name (npm-node24 vs npm) with pkg-list-jails.txt

#98 by clawdie was closed 2026-06-20 22:53:12 +02:00

vault provision: serialize bw access (mutex) to avoid concurrent-provision races

#95 by clawdie was closed 2026-06-20 09:00:53 +02:00

tenants table: add UNIQUE constraints (jail_root_path, collection) + lifecycle tests

#93 by clawdie was closed 2026-06-20 06:38:06 +02:00

vault provision: canonicalize + enforce allowed-root containment on the jail target

#92 by clawdie was closed 2026-06-21 06:30:31 +02:00

vault provision: daemon needs login→unlock→fetch→lock per call (no standing session)

first-proof blocker

#89 by clawdie was closed 2026-06-20 06:52:36 +02:00

vault provision: hook passes collection_id but crate resolves by name → CollectionNotFound

first-proof blocker

#88 by clawdie was closed 2026-06-20 06:52:36 +02:00