clawdie/colibri
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 48

fix(clawdie): rename service user to _clawdie + idempotent creation #128

Merged
clawdie merged 1 commit from fix/clawdie-idempotent-user into main 2026-06-21 15:19:52 +02:00
Conversation 0 Commits 1 Files changed 3 +45 -21
clawdie commented 2026-06-21 15:19:34 +02:00
Owner
Copy link

Two changes to the clawdie deploy binary:

  1. Service user renamed from 'clawdie' to '_clawdie' — follows FreeBSD
    daemon convention (underscore prefix). Avoids collision with the
    operator's interactive 'clawdie' user on existing hosts like OSA.

  2. User creation is now idempotent — exit code 65 (pw: user already
    exists) is treated as success via the new allowed_exit_codes field
    on Action::Run. Deploy can safely re-run without failing.

Full end-to-end test on OSA file-backed pool: all 7 steps (ZFS
datasets, user, chown, rc.d write, sysrc enable) complete.

Two changes to the clawdie deploy binary: 1. Service user renamed from 'clawdie' to '_clawdie' — follows FreeBSD daemon convention (underscore prefix). Avoids collision with the operator's interactive 'clawdie' user on existing hosts like OSA. 2. User creation is now idempotent — exit code 65 (pw: user already exists) is treated as success via the new allowed_exit_codes field on Action::Run. Deploy can safely re-run without failing. Full end-to-end test on OSA file-backed pool: all 7 steps (ZFS datasets, user, chown, rc.d write, sysrc enable) complete.
clawdie added 1 commit 2026-06-21 15:19:37 +02:00
fix(clawdie): rename service user to _clawdie + idempotent creation
Some checks failed
CI / rust (pull_request) Has been cancelled
Details
CI / markdown (pull_request) Has been cancelled
Details
CI / port (pull_request) Has been cancelled
Details
CI / agent-jail-pkgs (pull_request) Has been cancelled
Details
46dcf7d7e7 
Two changes to the clawdie deploy binary:

1. Service user renamed from 'clawdie' to '_clawdie' — follows FreeBSD
   daemon convention (underscore prefix). Avoids collision with the
   operator's interactive 'clawdie' user on existing hosts like OSA.

2. User creation is now idempotent — exit code 65 (pw: user already
   exists) is treated as success via the new allowed_exit_codes field
   on Action::Run. Deploy can safely re-run without failing.

Full end-to-end test on OSA file-backed pool: all 7 steps (ZFS
datasets, user, chown, rc.d write, sysrc enable) complete.
clawdie merged commit a7fc408bd2 into main 2026-06-21 15:19:52 +02:00
clawdie deleted branch fix/clawdie-idempotent-user 2026-06-21 15:19:52 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
first-proof blocker

gates the first proven end-to-end

  
hardening

security/robustness follow-up, not a first-proof gate

No labels
first-proof blocker
hardening
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: clawdie/colibri#128
No description provided.
Delete branch "fix/clawdie-idempotent-user"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?