0 Fork 0

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-06 19:01:54 +00:00

Files

T

kevinveenbirkenbachandClaude Opus 5.5 a6c3c1cc91 fix(apparmor): keep docker-default loaded when tearing AppArmor down

`security-apparmor-teardown` ran `aa-teardown`, which unloads every
profile including dockerd's in-memory `docker-default`. dockerd only loads
that profile when it starts, so every container start afterwards that
requests it fails until dockerd restarts. Since #1067 runs the teardown on
the GitHub runners, BuildKit failed each RUN of the swarm node image three
times (run 39332343490, 39 of 40 swarm jobs):

    runc run failed: unable to start container process: error during
    container init: unable to apply apparmor profile: apparmor failed to
    apply profile: write .../attr/apparmor/exec: no such file or directory

The teardown now removes each loaded profile by name through securityfs
and skips `docker-default` and child profiles, which leave with their
parent. Dev hosts gain the same: no dockerd restart is needed after
`make environment-bootstrap`.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-20 12:11:14 +02:00

container

style: apply the project formatters

2026-08-18 03:22:05 +02:00

docker

fix(cache): install CA anchors where every update-ca-trust family reads them

2026-10-15 23:45:53 +02:00

git

fix(git-hooks): run the merge-signed gate on prepare-commit-msg

2026-07-28 17:01:24 +02:00

github

feat(ci): keep GitHub-hosted runner labels current through the updater

2026-10-19 16:56:52 +02:00

image

perf(ci): fold the matrix job into the image job and stream its output

2026-09-16 21:48:12 +02:00

install

fix(install): keep the collection check inside the slice that runs it

2026-09-18 03:03:37 +02:00

inventory

style: delete every comment the comments-valid policy rejects

2026-08-18 03:22:02 +02:00

lint

fix(lint): provision the mermaid browser in install-lint, not in the parallel lint run

2026-10-13 21:31:36 +02:00

make

fix(make): stop a repeated lint target from hiding its own failure

2026-09-19 07:41:01 +02:00

README.md

Script Collection

This directory contains automation scripts used across the project.

system/ contains host and system-facing helpers.
container/ contains helpers that run inside the local container.
github/ contains GitHub workflow helper scripts.
For the canonical Make target index, see make.md.
🛠️ Organize operational helpers for development, CI, release, and maintenance
🧭 Separate responsibilities into focused subdirectories with clear scope
📚 Keep script-based workflows discoverable and easier to navigate

The scope of this folder is script organization at the repository level. Detailed responsibilities belong in the README files of the respective subdirectories.