Skip to content

fix(phase4): use sudo for all service-owned Linux acceptance reads - #79

Merged
gitcommit90 merged 1 commit into
mainfrom
fix/linux-acceptance-sudo-reads
Aug 5, 2026
Merged

fix(phase4): use sudo for all service-owned Linux acceptance reads#79
gitcommit90 merged 1 commit into
mainfrom
fix/linux-acceptance-sudo-reads

Conversation

@gitcommit90

@gitcommit90 gitcommit90 commented Aug 5, 2026

Copy link
Copy Markdown
Owner

The acceptance runs as the ordinary hosted user, but /opt/1helm and /var/lib/1helm-oci-v1 are service/root-owned. After successful 0.0.41 and 0.0.40 installs, direct node/readlink checks reported files missing. ERR trap pinpointed line 113. Audited the entire script and fixed every service-owned read in one pass: two package.json reads via sudo cat, three current-symlink reads via sudo readlink, plus the already-fixed image-store checks. Acceptance-script only; phase4 tests pass.

Summary by CodeRabbit

  • Bug Fixes
    • Improved Linux acceptance checks by enabling required permissions when validating installations, release versions, and atomic rollbacks.
    • Preserved existing installation, update, and controlled startup-failure validation behavior.

The Linux acceptance runs as the ordinary hosted runner user and elevates only
for the real install. `/opt/1helm` and `/var/lib/1helm-oci-v1` are service/root
owned, so direct `node require(...)` and `readlink` checks report the files as
missing even after a successful install. The ERR trap pinpointed the first such
failure at the previous-Stable version check.

Audit and fix every service-owned read in the acceptance script at once:
- read both current-version package.json files through `sudo cat` and parse
  their piped JSON with the ordinary runner's node;
- run all three current-symlink readlink checks through sudo;
- retain the already-fixed sudo reads of the root-owned OCI image store.

Acceptance-script only; no product/runtime change.

Co-Authored-By: Claude <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Aug 5, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 0733be7c-2b8e-40b1-a9ee-8cb4b920ed20

📥 Commits

Reviewing files that changed from the base of the PR and between 3f359b3 and 2f3775a.

📒 Files selected for processing (1)
  • ops/platform-acceptance/linux.sh

📝 Walkthrough

Walkthrough

Linux acceptance checks now use sudo when reading root-owned release symlinks and package metadata. Installation, update, startup-failure, and rollback behavior remains unchanged.

Changes

Linux acceptance checks

Layer / File(s) Summary
Privileged release validation
ops/platform-acceptance/linux.sh
The clean-install, previous-release, updated-release, and rollback checks now use sudo for protected release data.

Estimated code review effort: 2 (Simple) | ~5 minutes

Possibly related PRs

  • gitcommit90/1Helm#77: Both changes update ops/platform-acceptance/linux.sh to use sudo for protected 1Helm release and rollback checks.
🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description explains the problem and fix, but it omits the required template sections for change type, release notes, acceptance ledger, and verification. Add the required template headings and complete the change type, release notes, acceptance ledger, and verification checklist.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly describes the main change: using sudo for service-owned Linux acceptance reads.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/linux-acceptance-sudo-reads

Comment @coderabbitai help to get the list of available commands.

@gitcommit90
gitcommit90 merged commit a103325 into main Aug 5, 2026
6 checks passed
@gitcommit90
gitcommit90 deleted the fix/linux-acceptance-sudo-reads branch August 5, 2026 01:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant