command: ["node", "--test", "/home/jwoltje/.t3/worktrees/mosaic-stack/magica-row329/packages/cli/tests/case1-hostcheck.test.mjs"]
TMPDIR: /mnt/storage/scratch/tmp/9ioaKX
begin: {"utc": "2026-10-24T20:17:30.166+00:00", "load1": "4.56"}
launch nice: 19
✔ row 240 check: exits 0 with all seven items and a note that bubblewrap is the install pin (36.398705ms)
✔ row 240 check: exits 1 with each item failing alone, and its line names it (225.617661ms)
✔ row 240 check: item 1 fails when a package owns the profile, when dpkg -S errs, or with no pin (93.301915ms)
✔ row 240 check: item 2 fails on a loaded mosaic-bwrap, a missing unpriv_bwrap or a failed aa-status (96.328442ms)
✔ row 240 check: item 3 fails on a second file naming bwrap as a word, /{usr/,}bin/bwrap included (134.421208ms)
✔ row 240 check: item 4 reads the label under the units' no-new-privs and matches it exactly (130.592241ms)
✔ row 240 check: item 5 needs the statoverride and stat to agree (32.598167ms)
✔ row 240 check: item 6 fails on protected_hardlinks 0; item 7 fails with the floor at 732 and reads 1023 with no unit (185.496662ms)
✔ row 240 check: a bubblewrap version other than the install pin is a note, not a failure (31.533864ms)
✔ row 240 enforce: a pass with no DRIFT changes nothing and exits 0 (32.404788ms)
✔ row 240 enforce: each failure exits 0, unloads the profile, closes bwrap, writes DRIFT and one log line (343.54106ms)
✔ row 240 enforce: with DRIFT present and every item passing, it still closes bwrap (43.754565ms)
✔ row 240 enforce: no unload when aa-status lists neither bwrap profile; never writes the statoverride (319.743859ms)
✔ row 240 upstream: a candidate whose profile differs prints the difference and exits 0 (57.828205ms)
✔ row 240 boot unit: a oneshot after apparmor and before the bus that runs --enforce (0.560161ms)
✔ row 240 pins and usage: the shipped pins are r6's, the script reads the pins beside it, and bad usage exits 2 (46.904409ms)
✔ Vikunja 614 check: item 5 accepts dpkg's bare octal mode and leading-zero equivalents (65.020717ms)
✔ Vikunja 614 enforce: dpkg's bare 750 leaves bwrap open and writes no DRIFT (33.161066ms)
✔ Vikunja 614 check: item 5 refuses other modes, owners, groups, paths and malformed overrides (934.430456ms)
ℹ tests 19
ℹ suites 0
ℹ pass 19
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 2952.152201
