kevinveenbirkenbachandClaude Opus 5.5 fd05f85d44 fix(install): stage the package build workspace with tar, not rsync ...

Run 41743807934 lost Matrix#2, Workspace (debian:13), Gitea#0 and Wazuh#0
to the full job budget right after "Preparing build workspace". On runner
image 20261101 the kernel stacks every container onto
docker-default//&unconfined, which refuses every in-container kill(); the
host journal logs apparmor="DENIED" operation="signal" comm="rsync"
signal=usr2. rsync's local copy waits for exactly that SIGUSR2 and sleeps
until the job is killed.

scripts/install/stage.sh copies the tree through a tar pipe, which sends
no signal; --format=posix keeps nanosecond mtimes. package.sh uses it on
the arch and debian paths and installs tar instead of rsync.

Copying this repository both ways gives identical content, modes, types,
link targets and mtimes on all 11306 entries. test_stage.py runs stage.sh
under a seccomp filter that fails every signal syscall with EACCES; the
old rsync copy hangs past its timeout under the same filter.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-04 17:35:08 +01:00

..

cli

fix(sys-ctl-hlth-runtime): bound the engine calls and catch hidden PHP runtimes

2026-10-29 15:32:57 +01:00

group_vars

fix(svc-prx-openresty): size worker_connections independently of pids_limit

2026-10-31 03:00:03 +01:00

library

fix(database_query): keep psql's command tags out of the returned rows

2026-10-22 20:36:32 +02:00

plugins

test(lookup): restore sys.modules after loading the sso plugins fresh

2026-10-31 02:17:21 +01:00

roles

style(dev-python): fold the env filter onto one line after the rename

2026-11-03 21:47:46 +01:00

scripts

fix(install): stage the package build workspace with tar, not rsync

2026-11-04 17:35:08 +01:00

utils

feat(sys-os): declare the workspace runtime images where the updater finds them

2026-11-03 19:55:32 +01:00

__init__.py

…