jason.woltje
04e1ce24cc
Remove the R1 slot-controller ties from the C2-14 fixture: the ROW227_CONTROL_ROOT check, the native permit wait in bindLaunch, the fixture-cleanup.json write, the priority.mjs preload and the owned-bwrap.sh override. The launcher uses its own bwrap. The shell runs the driver from an explicit env -i environment (PATH, LANG, a sandbox HOME, XDG dirs and TMPDIR, MOSAIC_CONFIG, no global git config) as its own process group. On a signal the driver gets 3 s by the clock, then its group and any process whose cwd is in the sandbox get SIGKILL, inside the landing gate's 5 s grace. The fixture credentials are defined only in scripts/case2/fixture-credentials.mjs. The new scripts/case2/leak-check.mjs reads them from there and never prints them.
9 lines
565 B
JavaScript
9 lines
565 B
JavaScript
// Made-up fixture credentials for C2-14 (#1728). Never a live credential. No other file under
|
|
// scripts/ holds them: the driver (which hands them to the fake Gitea), the fixture launcher (the
|
|
// fake pi/zai key) and the shell's leak check import them from here.
|
|
export const FETCH_TOKEN = 'fx227-fetch-q7-2270';
|
|
export const SEAT_TOKEN = 'fx227-seat-q7-2270';
|
|
export const HUMAN_TOKEN = 'fx227-human-q7-2270';
|
|
export const FAKE_ZAI_KEY = 'fx227-zai-q7-2270';
|
|
export const FIXTURE_CREDENTIALS = Object.freeze([FETCH_TOKEN, SEAT_TOKEN, HUMAN_TOKEN, FAKE_ZAI_KEY]);
|