Files

T

Developer 9f720930ea fix: run tool terminal sessions as container user instead of root

- Remove compose-level user: 0:0 override from manifest_compiler.py so the
  entrypoint can start as root, fix mount ownership, and drop privileges to
  the container user internally.
- Add get_manifest_container_user() helper to resolve the manifest-declared
  container user (with uid:gid fallback).
- Pass container user through TerminalSession, TerminalManager, and the
  terminal WebSocket handler so docker exec is invoked with --user <user>.
- Update and add unit tests for the manifest compiler and terminal session.
- Record the additional root-user fix in the fix-pi-container-mount-permissions
  OpenSpec change/tasks.

Quality gates: pytest tests/unit/ (226 passed), pytest tests/services/test_terminal_manager_multi.py (7 passed), ruff check on changed files (clean), mypy on changed files (clean)

2026-06-17 20:51:46 +00:00

1.5 KiB

Raw Blame History

apps/api/src/services (index)

dir: apps/api/src/services

role

Provides a command to swap the position of two tmux panes within a window or between windows

parent

index: apps/api/src/.pi-map.index.md map: apps/api/src/.pi-map.md

children

apps/api/src/services/config index: apps/api/src/services/config/.pi-map.index.md map: apps/api/src/services/config/.pi-map.md
apps/api/src/services/docker index: apps/api/src/services/docker/.pi-map.index.md map: apps/api/src/services/docker/.pi-map.md
apps/api/src/services/git index: apps/api/src/services/git/.pi-map.index.md map: apps/api/src/services/git/.pi-map.md
apps/api/src/services/instance index: apps/api/src/services/instance/.pi-map.index.md map: apps/api/src/services/instance/.pi-map.md
apps/api/src/services/shared index: apps/api/src/services/shared/.pi-map.index.md map: apps/api/src/services/shared/.pi-map.md
apps/api/src/services/terminal index: apps/api/src/services/terminal/.pi-map.index.md map: apps/api/src/services/terminal/.pi-map.md
apps/api/src/services/tool index: apps/api/src/services/tool/.pi-map.index.md map: apps/api/src/services/tool/.pi-map.md

files

__init__.py

links

index: apps/api/src/services/.pi-map.index.md map: apps/api/src/services/.pi-map.md

workflows

change services behavior read: __init__.py
explore services subdirectories index: apps/api/src/services/config/.pi-map.index.md, apps/api/src/services/docker/.pi-map.index.md, apps/api/src/services/git/.pi-map.index.md

1.5 KiB Raw Blame History