Prepare agent home for non-root harness startup#76
Merged
ptone merged 4 commits intoApr 10, 2026
Conversation
Contributor
Author
|
Tracking issue: #87 |
Contributor
Author
|
Added follow-up commit a20a5f7 on this branch to precreate ~/.scion in scion-base as well. The original harness-specific dirs (.codex, .gemini) were not enough for hosted K8s because sciontool also needs a writable shared ~/.scion/scion-env path. |
mfreeman451
changed the title
scion-gteam Bot
referenced
this pull request
in ptone/scion
Apr 12, 2026
* Precreate harness home directories * Expose codex on standard shell PATH * Skip root-only git setup in non-root containers * Precreate shared Scion home directory
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
~/.sciondirectory in the runtime imagesPATHscion-envand synchronized home stateProblem
Hosted non-root agents can fail during startup because the synchronized home layout assumes a few writable directories and init-time behaviors that only work cleanly as root. In practice this showed up as permission failures writing shared Scion state and initializing harness-specific home content.
Validation
go test ./cmd/sciontool/commandsregistry.carverauto.dev/scion/scion-codex:home-dirs-a20a5f7bFailed to write scion-env fileabsentError loading configuration: Permission deniedabsent