clawdie/colibri
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 43

docs: truss analysis of jail-spawn Permission Denied + debugging reference #132

Merged
clawdie merged 1 commit from docs/truss-spawn-analysis into main 2026-06-21 17:23:45 +02:00
Conversation 0 Commits 1 Files changed 2 +50
clawdie commented 2026-06-21 17:23:26 +02:00
Owner
Copy link

Two root causes found via truss:

  1. Bare command names (sudo, jexec) unresolved under daemon(8) PATH
    → fixed by resolve_program() in PR #131
  2. Jail staging directory owned by root, unwritable by clawdie
    → fixed by chmod 777 <jail_root>/var/run/colibri-stage

Trace saved at /tmp/daemon.truss (1964 lines, successful spawn).

Two root causes found via truss: 1. Bare command names (sudo, jexec) unresolved under daemon(8) PATH → fixed by resolve_program() in PR #131 2. Jail staging directory owned by root, unwritable by clawdie → fixed by chmod 777 <jail_root>/var/run/colibri-stage Trace saved at /tmp/daemon.truss (1964 lines, successful spawn).
clawdie added 1 commit 2026-06-21 17:23:29 +02:00
docs: truss analysis of jail-spawn Permission Denied + debugging reference
Some checks failed
CI / rust (pull_request) Has been cancelled
Details
CI / markdown (pull_request) Has been cancelled
Details
CI / port (pull_request) Has been cancelled
Details
CI / agent-jail-pkgs (pull_request) Has been cancelled
Details
9814ce8afb 
Two root causes found via truss:
1. Bare command names (sudo, jexec) unresolved under daemon(8) PATH
   → fixed by resolve_program() in PR #131
2. Jail staging directory owned by root, unwritable by clawdie
   → fixed by chmod 777 <jail_root>/var/run/colibri-stage

Trace saved at /tmp/daemon.truss (1964 lines, successful spawn).
clawdie merged commit 36718c151a into main 2026-06-21 17:23:45 +02:00
clawdie deleted branch docs/truss-spawn-analysis 2026-06-21 17:23:46 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
first-proof blocker

gates the first proven end-to-end

  
hardening

security/robustness follow-up, not a first-proof gate

No labels
first-proof blocker
hardening
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: clawdie/colibri#132
No description provided.
Delete branch "docs/truss-spawn-analysis"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?