netwatch

Author	SHA1	Message	Date
sneak	871b986978	next into main (#73 ) check / check (push) Successful in 2m3s Details Reviewed-on: #73	2026-09-29 12:04:30 +02:00
sneak	7dfb3b8c32	Merge branch 'main' into next check / check (push) Successful in 2m6s Details	2026-09-29 12:04:10 +02:00
clawbot	a5ca73c585	Container sets up its own data directory (closes #75 ) (#76 ) check / check (push) Successful in 2m6s Details Closes #75. `bin/entrypoint.sh`, which already runs as root, now makes the data directory usable before the backend starts: it creates `DATA_DIR` if missing, gives it and `/data` to the `netwatch` user (`chown -R`), and sets mode 750 on both, the mode the backend gives a directory it creates. The backend still runs as `netwatch`. The README "Running under upaas" section loses its first-run step that created and chowned the host directory and names only the path to mount. The Dockerfile's build-time `mkdir` and `chown` of `/data` are gone, since the entrypoint now does this on every start. What the diff does not show: - The host directory mounted at `/data` ends up owned by uid 1000 with mode 750, and everything under `DATA_DIR` is chowned to uid 1000 on every start. - If the directory cannot be created or chowned, the container stops with that tool's error before either process starts. Recorded runs with `--mount type=bind`: an empty directory owned by root (mode 755, and again mode 700), and one holding a `reports` directory and report file owned by uid 1001 with mode 700. Each time the container turned healthy, `netwatch-server` ran as `netwatch`, and a posted report was written to `DATA_DIR`; a second start on the root-owned and the uid 1001 directories did the same. Judgement call: `/data` itself is given to `netwatch` as well as `DATA_DIR`, so the backend can reach `DATA_DIR` inside a host directory with mode 700. Model: opus-5-5 Reviewed-on: #76 Co-authored-by: clawbot <35+clawbot@noreply.example.org>	2026-09-29 12:03:59 +02:00
sneak	bd08e901ee	next into main: netwatch as one container, ready for upaas (#49 ) check / check (push) Successful in 12s Details Reviewed-on: #49	2026-09-29 10:43:12 +02:00

Compare commits

Diff Content Not Available