Developer
d395aaf574
- Switch apply_resolved_profile from per-file bind mounts to one
directory-level bind mount per ResolvedMount target.
- Stage all configured files under instance_dir/mounts/<sanitized_target>
and bind-mount that directory, so Docker no longer creates a root-owned
parent directory such as ~/.config.
- Propagate read-only mode ('ro') as the 'readonly' flag on volume entries.
- Update unit tests to expect directory-level mounts and add coverage for
readonly/writable flags.
Quality gates: python3 -m py_compile, pytest (313 passed, 34 skipped),
npm run typecheck, npm run lint.
9 lines
439 B
Markdown
9 lines
439 B
Markdown
# Tasks
|
|
|
|
- [x] Identify the per-file mount staging in `apply_resolved_profile` as the root cause.
|
|
- [x] Refactor `apply_resolved_profile` to stage one directory per mount target and bind-mount the directory.
|
|
- [x] Propagate read-only mode to the volume entry.
|
|
- [x] Update `TestApplyResolvedProfile` unit tests to assert directory-level mounts.
|
|
- [x] Run backend quality gates (`py_compile`, `pytest`).
|
|
- [x] Commit, merge to `dev`, push.
|