Skip to content

fix(packages): expose public output to clients - #50

Merged
jmgilman merged 1 commit into
mainfrom
fix/package-output-root-permissions
Aug 22, 2026
Merged

jmgilman merged 1 commit into
mainfrom
fix/package-output-root-permissions

Conversation

@jmgilman

Copy link
Copy Markdown
Contributor

Summary

  • keep source and work scratch roots private
  • make the generated public repository root traversable by unprivileged package-manager helpers
  • cover scratch-root permission boundaries in the package-repository command test

Verification

  • go test ./internal/cli
  • production replay failure showed Debian sqv could not traverse the bind-mounted 0750 output root

@jmgilman
jmgilman force-pushed the fix/package-output-root-permissions branch from 341129e to 1860163 Compare August 22, 2026 02:33
@jmgilman
jmgilman merged commit abd33a0 into main Aug 22, 2026
3 checks passed
@jmgilman
jmgilman deleted the fix/package-output-root-permissions branch August 22, 2026 02:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant