d395aaf574
- Switch apply_resolved_profile from per-file bind mounts to one
directory-level bind mount per ResolvedMount target.
- Stage all configured files under instance_dir/mounts/<sanitized_target>
and bind-mount that directory, so Docker no longer creates a root-owned
parent directory such as ~/.config.
- Propagate read-only mode ('ro') as the 'readonly' flag on volume entries.
- Update unit tests to expect directory-level mounts and add coverage for
readonly/writable flags.
Quality gates: python3 -m py_compile, pytest (313 passed, 34 skipped),
npm run typecheck, npm run lint.
439 B
439 B
Tasks
- Identify the per-file mount staging in
apply_resolved_profileas the root cause. - Refactor
apply_resolved_profileto stage one directory per mount target and bind-mount the directory. - Propagate read-only mode to the volume entry.
- Update
TestApplyResolvedProfileunit tests to assert directory-level mounts. - Run backend quality gates (
py_compile,pytest). - Commit, merge to
dev, push.