clawdie/colibri
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 43

fix(bootstrap): chown jail /home/clawdie so daemon can write staging files #150

Merged
clawdie merged 1 commit from fix/jail-home-chown into main 2026-06-23 08:13:31 +02:00
Conversation 0 Commits 1 Files changed 1 +4
clawdie commented 2026-06-23 08:13:19 +02:00
Owner
Copy link

#136 moved staging from /var/run/colibri-stage to
/home/clawdie/.cache/colibri/stage. Bastille creates the jail's
/home/clawdie as root:wheel, so the daemon (running as clawdie)
couldn't create staging directories there. chown after binary
copy ensures the daemon owns its home directory inside the jail.

#136 moved staging from /var/run/colibri-stage to /home/clawdie/.cache/colibri/stage. Bastille creates the jail's /home/clawdie as root:wheel, so the daemon (running as clawdie) couldn't create staging directories there. chown after binary copy ensures the daemon owns its home directory inside the jail.
clawdie added 1 commit 2026-06-23 08:13:21 +02:00
fix(bootstrap): chown jail /home/clawdie so daemon can write staging files
Some checks failed
CI / rust (pull_request) Has been cancelled
Details
CI / markdown (pull_request) Has been cancelled
Details
CI / port (pull_request) Has been cancelled
Details
CI / agent-jail-pkgs (pull_request) Has been cancelled
Details
aa754ce11f 
#136 moved staging from /var/run/colibri-stage to
/home/clawdie/.cache/colibri/stage. Bastille creates the jail's
/home/clawdie as root:wheel, so the daemon (running as clawdie)
couldn't create staging directories there. chown after binary
copy ensures the daemon owns its home directory inside the jail.
clawdie merged commit 1a49485dbd into main 2026-06-23 08:13:31 +02:00
clawdie deleted branch fix/jail-home-chown 2026-06-23 08:13:31 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
first-proof blocker

gates the first proven end-to-end

  
hardening

security/robustness follow-up, not a first-proof gate

No labels
first-proof blocker
hardening
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: clawdie/colibri#150
No description provided.
Delete branch "fix/jail-home-chown"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?