mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
Run 41743807934 lost Matrix#2, Workspace (debian:13), Gitea#0 and Wazuh#0 to the full job budget right after "Preparing build workspace". On runner image 20261101 the kernel stacks every container onto docker-default//&unconfined, which refuses every in-container kill(); the host journal logs apparmor="DENIED" operation="signal" comm="rsync" signal=usr2. rsync's local copy waits for exactly that SIGUSR2 and sleeps until the job is killed. scripts/install/stage.sh copies the tree through a tar pipe, which sends no signal; --format=posix keeps nanosecond mtimes. package.sh uses it on the arch and debian paths and installs tar instead of rsync. Copying this repository both ways gives identical content, modes, types, link targets and mtimes on all 11306 entries. test_stage.py runs stage.sh under a seccomp filter that fails every signal syscall with EACCES; the old rsync copy hangs past its timeout under the same filter. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>