jason.woltje
c515273db7
Lands Darkwing's round 1 candidate, manifest 573ece95a4a9 (ad1b23ab2on darkwing/row240-r3, basec771a36f4), approved by Filbert (29945, rev 2696). Nine paths: scripts/case1-hostcheck.sh (new), scripts/case1-pins.sh (new), packages/cli/systemd/mosaic-hostcheck.service (new), packages/cli/tests/case1-hostcheck.test.mjs (new), scripts/stack-upgrade.sh, packages/cli/tests/stack-upgrade.test.mjs, docs/guides/host-run-sheet.md, docs/TOOLS.md and agents/darkwing/work/queue-240/BUILD.md. File modes match the candidate. case1-hostcheck.sh and stack-upgrade.sh are 100755. case1-pins.sh is 100644, because the host check sources it. Evidence: Darkwing's first slot run failed one test, the N1 test's after hook (ENOENT once the fixture had removed its root). The fixb45852daais test-only. The second run onb45852daawas green: singles 37/0, mutants M1-M8 8 of 8 killed, cli 639/0, scripts 585/0. Sincec771a36f4no commit touches the nine paths. Sage's gate on060a17b54plus the nine paths (06:45:05Z to 06:56:21Z): packages/cli 639 pass, 0 fail, and all ten scripts/test-*.sh 585 pass, 0 fail (out/, run.log). `queue review verify-commit 240` matches the manifest on all 9 paths. Filbert's notes: N1 (the boot unit orders only mosaic-bus@mosaic-stack) and N2 (the run sheet writes the apt hook before the first --check) are in docs/plans/DEFERRED.md. N3, repeated DRIFT lines after bwrap is closed, is by design and is noted with N2.
17 lines
698 B
Desktop File
17 lines
698 B
Desktop File
# Mosaic Case 1 host check at boot (row 240, #1746; r6 B2). Root installs it as
|
|
# /etc/systemd/system/mosaic-hostcheck.service, root:root 0644, and enables it
|
|
# (docs/guides/host-run-sheet.md). It runs the drift stop before the bus starts, which covers a kernel
|
|
# or parser change that takes effect at boot. --enforce always exits 0; on drift it closes bwrap to
|
|
# root, and every role session then refuses to start.
|
|
[Unit]
|
|
Description=Mosaic Case 1 host check: the bwrap profile, the statoverride and the sysctls
|
|
After=apparmor.service
|
|
Before=[email protected]
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/usr/local/lib/mosaic-stack/hostcheck.sh --enforce
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|