Zayin/Ekklesia
3
0
Fork 0
Code Issues 1 Pull Requests 3 Actions Packages Projects Releases 8 Wiki Activity

fix: support native package verifier scratch
CI / verify (pull_request) Successful in 1m10s
Details
CI / infrastructure-smoke (pull_request) Successful in 37s
Details
CI / migration-smoke (pull_request) Successful in 1m54s
Details
CI / package-release (pull_request) Successful in 36s
Details
CI / image-build (pull_request) Successful in 52s
Details
CI / deploy-smoke (same-origin) (pull_request) Successful in 51s
Details
CI / deploy-smoke (split) (pull_request) Successful in 1m31s
Details
CI / package-publication (pull_request) Successful in 51s
Details

Browse Source
This commit is contained in:
ekklesia
2026-10-09 18:05:04 -05:00
parent c5a6cdaf6a
commit 4be046c8d0
12 changed files with 330 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/smoke-deploy.sh
+5 -2
View File
@@ -446,8 +446,11 @@ module_storage() {
install_test_module() {
local verified
verified="$(
docker run --rm --network none --read-only --tmpfs /tmp --cap-drop ALL \
--security-opt no-new-privileges \
docker run --rm --network none --read-only \
--tmpfs /tmp:rw,nosuid,nodev,noexec,size=64m \
--tmpfs /run/ekklesia-verifier:rw,nosuid,nodev,exec,size=1100m,mode=0700,uid=1000,gid=1000 \
--cap-drop ALL --security-opt no-new-privileges \
-e EKKLESIA_MODULE_VERIFIER_SCRATCH_DIR=/run/ekklesia-verifier \
-v "$daemon_work/package:/package:ro" -v "$daemon_work/staging:/staging" \
--entrypoint node "$image" core/dist/cli/verify-module-package.js "/package/${package_archive}" \
--sha256-file "/package/${package_archive}.sha256" --extract-to /staging/example 2>&1