testsAndMisc/linux_configuration/scripts/single_use/features
Krzysztof kuhy Rudnicki 0091608b08 Make the gate read jail_args and refuse a suite that dies partway
Two defects found in review, both of which made checks PASS more easily, so
neither ever went red.

GATE: is_covered() hardcoded its jail flags and never read the jail_args
marker that ci_mirror.sh and shell-tests.yml both consume. The features/lib
suite needs /usr/local/share and /etc/pki and aborts under set -e without
them -- but the coverage number still printed, because kcov had already
recorded whatever the dead run reached. The gate would have graded 44 libs on
a suite that never finished. It now reads the marker, keeps the historical
defaults for suites without one, fails closed on an empty marker, and passes
--fail-on-case-error.

Negative control: stripping the binds makes the gate exit 1 and restoring
them returns exit 0. Before this commit both cases exited 0 -- the gate could
not fail on an aborting suite.

HASH CACHE: the _t_unstub helper written earlier today for the transcribe
harness was needed in features_harness.sh too. Two assertions were vacuous --
test_dwm_config's "verify still reports when dwm is absent", and
test_rpi_nc_ca's uname removal, where a cached uname left every later branch
running under a faked Darwin. All four `rm -f "$TEST_TMPDIR/bin/` sites in
the repo were audited; the other two are sound (one probes with [[ -f ]], the
other runs in a subshell).

No measured figure moved: dot_resolver_install.sh still 39/39 = 100.00% with
real absence enforced, so its off-allowlist clearance holds.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016sxxsDHWgdRhmdmzNMA6XM
2026-08-22 13:36:54 +02:00
..
lib Make the gate read jail_args and refuse a suite that dies partway 2026-08-22 13:36:54 +02:00
systemd Extract dufs cloud (web + app + scripts) to github.com/kuhyx/dufs-cloud 2026-07-12 18:38:37 +02:00
control_from_mobile.sh Split two more linux_configuration scripts; revert a third 2026-08-16 18:44:18 +02:00
install_unreal_mcp_kvick.sh refactor(linux_configuration/scripts): split all scripts into single_use/ and periodic_background/ 2026-05-15 00:32:35 +02:00
install_unreal_mcp.sh Split five more linux_configuration single_use scripts 2026-08-16 18:51:28 +02:00
keepass_consolidate.sh linux_configuration: unified multi-device KeePass sync over dufs 2026-07-12 05:00:27 +02:00
keepass_sync.sh Fix the 11 shellcheck findings that kept CI red since b83ce5d 2026-08-04 20:55:02 +02:00
keepass-open.sh linux_configuration: unified multi-device KeePass sync over dufs 2026-07-12 05:00:27 +02:00
migrate_github_to_gitea.sh Add self-hosted Gitea deployment, mirroring all GitHub repos publicly 2026-07-04 07:45:00 +02:00
raspberry_pi_flash_sd.sh Split the Pi flasher and the boot-repair test harness 2026-08-16 20:21:44 +02:00
raspberry_pi_nextcloud.sh Split three more linux_configuration giants 2026-08-16 19:43:55 +02:00
setup_activitywatch.sh Split three more scripts; make the verifier catch heredoc cuts 2026-08-16 20:16:08 +02:00
setup_dns_blocker.sh Split setup_dns_blocker.sh, a live systemd unit target 2026-08-16 21:31:03 +02:00
setup_dot_resolver.sh Split seven more linux_configuration scripts 2026-08-16 18:56:05 +02:00
setup_dwm.sh Split five more linux_configuration single_use scripts 2026-08-16 18:51:28 +02:00
setup_gitea.sh Split three near-miss linux_configuration scripts 2026-08-16 18:38:43 +02:00
setup_kcd2_dice_solver.sh Split three large linux_configuration scripts, defer a fourth 2026-08-16 19:06:16 +02:00
setup_keepass_sync.sh linux_configuration: unified multi-device KeePass sync over dufs 2026-07-12 05:00:27 +02:00
setup_local_llm.sh Split five more linux_configuration single_use scripts 2026-08-16 18:51:28 +02:00
setup_nextcloud_raspberry.sh Split setup_nextcloud_raspberry.sh 1383 -> 231 2026-08-16 19:37:07 +02:00
setup_personal_website.sh Split three more linux_configuration feature and fix scripts 2026-08-16 18:48:01 +02:00
setup_phone_wireguard.sh Park phone DNS filtering: Private DNS fails closed, so the PC cannot host it 2026-08-05 10:05:16 +02:00
setup_searxng.sh Split setup_searxng.sh 912 -> 184 2026-08-16 19:11:40 +02:00
setup_syncyomi_guard.sh syncyomi_guard: refuse a collapsed payload as the new good copy 2026-08-10 15:33:18 +02:00
setup_syncyomi.sh Split three more linux_configuration feature and fix scripts 2026-08-16 18:48:01 +02:00
setup_wireguard_ssh.sh Split three more scripts; make the verifier catch heredoc cuts 2026-08-16 20:16:08 +02:00