wake-alarm/scripts
Krzysztof kuhy Rudnicki a573b1b9d6 Fix two ways the vmbox harness went green while broken
Trimming the harness to the three surviving cases took `pacman -S tk` with it,
and that step was doing two jobs nobody had written down.

It was the guest's BOOT. `vm new`/`vm reset` leave a sandbox stopped and there
is no `vm up`, so the first `vm run` is what starts it; `vm repo` then failed
with "sandbox is not running". The pacman step is restored with that spelled
out, so the next person to prune it knows what else they are removing.

And tk is still genuinely required, despite the Tk alarm window being gone:
`_state` imports `gatelock.log_integrity` for the HMAC, and gatelock's
`__init__` imports tkinter at module scope, so `import gatelock` dies with
"libtk8.6.so: cannot open shared object file". Measured in the guest.

The second fix is the one that matters. `run_install` trusted `vm run`'s exit
code, but `vm run` reports the VM's verdict rather than the guest command's
status -- the same fail-open `guest_cases.sh` already guards against with its
ALL-CASES-PASSED sentinel. So install.sh died on that ImportError, the step
reported success, and the three cases downstream failed with no hint that the
install was the cause. It now confirms an INSTALL-OK marker in the output.

Harness passes: imports-from-system-python, trigger-timer-enabled,
trigger-dry-run. That run exercised the new install.sh end to end, including
its call into uninstall.sh --retired-only.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PcdngP688mW6rJye3LRkSN
2026-08-30 15:33:35 +02:00
..
vmbox Fix two ways the vmbox harness went green while broken 2026-08-30 15:33:35 +02:00
check_dependency_freshness.sh Latest stable dependencies, and the gate that keeps them there 2026-08-28 14:56:16 +02:00
check_file_length.sh Adopt the four markdown namespaces and gate them 2026-08-24 15:53:51 +02:00
check_md_naming.sh Adopt the four markdown namespaces and gate them 2026-08-24 15:53:51 +02:00
check_no_crdt_sync_override.sh phone_app: add Google sign-in support for the Firebase sync account 2026-08-14 11:26:33 +02:00
check_requirements_sync.py Add CI-mirror pre-push gate + requirements-sync check 2026-07-11 17:51:16 +02:00
ci_mirror.sh Add CI-mirror pre-push gate + requirements-sync check 2026-07-11 17:51:16 +02:00