Files

T

Developer a4e6c46a47 fix: run manifest containers as root and drop privileges in entrypoint

The compose file was forcing the container to run as uid 1001, so the
entrypoint could not create /workspace even with sudo configured.

- Remove Dockerfile USER directive so containers start as root
- Make compile_compose use user: 0:0 when the manifest declares a user
- Make the entrypoint drop to the container user via  after setup,
  preserving environment variables and command arguments
- Update unit tests to assert root startup and privilege drop

Quality gates:
- pytest tests/unit: 210 passed
- ruff: clean on changed files
- mypy: clean on changed files

2026-06-14 21:32:27 +00:00

427 B

Raw Blame History

apps (index)

dir: apps

role

Contains the deployable application entry points and main executables for the project.

parent

index: ./.pi-map.index.md map: ./.pi-map.md

children

apps/api index: apps/api/.pi-map.index.md map: apps/api/.pi-map.md
apps/web index: apps/web/.pi-map.index.md map: apps/web/.pi-map.md

files

links

index: apps/.pi-map.index.md map: apps/.pi-map.md

427 B

Raw Blame History

apps (index)

role

parent

children

files

links

workflows

dirty

427 B Raw Blame History

apps (index)

role

parent

children

files

links

workflows

dirty

427 B

Raw Blame History