fix: use login shell when dropping privileges in manifest entrypoint

The generated entrypoint used a brittle  invocation that could
spawn a non-interactive bash and exit immediately, causing containers to
stop with exit code 0 right after startup.

- Switch to  so the
  container user gets a login shell and stdin/tty are preserved
- Update the unit test assertion for the new drop-privileges command

Quality gates:
- pytest tests/unit: 219 passed
- ruff: clean on changed files
- mypy: clean on changed files
This commit is contained in:
Developer
2026-06-15 10:18:52 +00:00
parent 1658767cf4
commit 94137c6586
12 changed files with 20 additions and 20 deletions
+2 -2
View File
@@ -4,10 +4,10 @@ dir: apps
index: apps/.pi-map.index.md
## role
Contains the main application entry points and executable modules for the project.
Contains the main deployable application modules that compose the project's executable entry points.
## files
## arch
Modular application structure with separate deployable units, likely following a monorepo pattern with independent app boundaries.
Modular monolith or microservices architecture where each subdirectory represents an independent application with its own configuration, dependencies, and lifecycle.
## tags
-
## symbols