fix: task 文件大小上限 8MiB → 256MiB(修舰队自升级 SIGXFSZ) - #10
Merged
Conversation
The 8 MiB RLIMIT_FSIZE capped every file a task script could write — including the agent's own release binary during a self-update. The 2026-08-12 fleet upgrade died to SIGXFSZ (exit 153, 'File size limit exceeded') on 18 of 20 attempted nodes. The server-side update script now lifts the inherited cap itself (the only fix that reaches agents already deployed); this raise is the belt-and-braces for non-update tasks and for future agents once their update has run. 256 MiB still bounds runaway writes.
govulncheck flags the sing-box stats gRPC client path under the pinned v1.72.2. Unrelated to the rlimit change; the vuln DB entry postdates the last release. protobuf rides to v1.36.11. Full suite green.
lr00rl
added a commit
that referenced
this pull request
Aug 17, 2026
Land the reviewed design-18 E3 node-agent work: partial chain state cannot escape host recovery. The branch carries main's #10 task-size fix, so this merge also reconciles the main/integration lanes. Feature commits preserved exactly as reviewed (PR #15, CI SUCCESS on the exact head). Constraint: Integrate only the exact PR #15 head without amending reviewed commits Rejected: GitHub squash merge | it would destroy the reviewed Lore history Confidence: high Scope-risk: moderate Reversibility: clean Directive: Keep exact-head topology for future backports Tested: PR #15 CI SUCCESS on exact head; gates recorded in .omx/ultragoal G002 evidence Not-tested: Release, deployment, and fleet rollout remain out of scope
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
8 MiB 的 RLIMIT_FSIZE 把任务脚本能写的所有文件都限制在 8MiB 内——包括自升级时要下载的 agent 发布二进制。2026-08-12 舰队升级因此在 18/20 台节点上 SIGXFSZ(exit 153)。服务端升级脚本已改为自提权(对已部署 agent 生效);本 PR 是 agent 侧的补足,随下一版 agent 生效。256MiB 仍然挡住失控写。