mirror of
https://github.com/kuhyx/testsAndMisc.git
synced 2026-11-11 18:34:04 +01:00
Krzysztof kuhy Rudnicki
08b58794e2
ci_mirror.sh and shell-tests.yml discovered every */lib/tests/run_all.sh and invoked it bare. The features/lib suite refuses to run bare -- that guard is what stops it rewriting the real /etc -- so the pre-push gate blocked all six pending commits, and CI would have gone red on the same suite the moment they landed. A suite now DECLARES its jail requirement with a jail_args file beside its run_all.sh, holding the --bind/--seed-* flags it needs. Both consumers branch on the marker. The 105 still-allowlisted libs were scored on root ops and system writes, so most future suites will need the jail too; naming the path in two runners would drift, which is the failure ci_mirror.sh's own comments say it exists to prevent. Both branches fail closed: a marker present but empty is an error, not a skip. Verified the extracted flags reproduce the independently measured dot_resolver_install.sh 39/39 = 100.00%, and that the other five suites still pass bare. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016sxxsDHWgdRhmdmzNMA6XM |
||
|---|---|---|
| .. | ||
| lib | ||
| systemd | ||
| control_from_mobile.sh | ||
| install_unreal_mcp_kvick.sh | ||
| install_unreal_mcp.sh | ||
| keepass_consolidate.sh | ||
| keepass_sync.sh | ||
| keepass-open.sh | ||
| migrate_github_to_gitea.sh | ||
| raspberry_pi_flash_sd.sh | ||
| raspberry_pi_nextcloud.sh | ||
| setup_activitywatch.sh | ||
| setup_dns_blocker.sh | ||
| setup_dot_resolver.sh | ||
| setup_dwm.sh | ||
| setup_gitea.sh | ||
| setup_kcd2_dice_solver.sh | ||
| setup_keepass_sync.sh | ||
| setup_local_llm.sh | ||
| setup_nextcloud_raspberry.sh | ||
| setup_personal_website.sh | ||
| setup_phone_wireguard.sh | ||
| setup_searxng.sh | ||
| setup_syncyomi_guard.sh | ||
| setup_syncyomi.sh | ||
| setup_wireguard_ssh.sh | ||