kevinveenbirkenbachandClaude Opus 5 efc281e327 fix(coredns): render the Corefile readable to the container user ...

mkstemp creates its file 0600 and Path.replace carries that mode into the target, so every freshly rendered Corefile was owner-only while coredns runs as nonroot. The container exits with 'open /Corefile: permission denied', name resolution dies for the whole stack, and deploys then fail at whatever they try to fetch first.

Long-running stacks hid it: coredns reads its config once at startup, so a container created before a re-render keeps working. Only new worktree stacks broke.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-09 13:11:19 +02:00

..

administration

fix(coredns): render the Corefile readable to the container user

2026-08-09 13:11:19 +02:00

build

refactor(lifecycle): single-source the CI-tested lifecycle envelope

2026-07-21 19:08:08 +02:00

console

feat(cli/console): stateful navigation, ls, and modular split

2026-05-22 13:06:38 +02:00

contributing

perf(registry): probe the image mirror before Docker Hub and cache sizes

2026-07-30 17:22:29 +02:00

core

feat(cli): role order tools under meta/roles/order

2026-07-13 01:47:52 +02:00

make

…

meta

Merge branch 'feature/swarm-nfs' into feature/svc-net-tor

2026-08-07 17:28:13 +02:00

__init__.py

…

__main__.py

…