bingshuo/guanghu-ice-heart
Watch
1
0
Fork
You've already forked guanghu-ice-heart
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

fix(persona): preserve daily receipt ownership

Browse source
This commit is contained in:
冰朔 2026-08-07 16:45:34 +08:00
commit cd9901e02f
2 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
server-tools/persona-team-handshake/deploy-on-demand-lifecycle.sh
View file

@ -68,8 +68,8 @@ test ! -e "${receipt}"
/guanghu/bin/ghctl authorize /guanghu/current install_world_version | /guanghu/bin/ghctl authorize /guanghu/current install_world_version |
grep -q '^GUANGHU_ACTION_AUTHORIZED$' grep -q '^GUANGHU_ACTION_AUTHORIZED$'
install -d -o root -g root -m 0700 \ install -d -o guanghu -g guanghu -m 0750 "${receipt_root}"
"${receipt_root}" "${backup_root}" install -d -o root -g root -m 0700 "${backup_root}"
for unit in "${units[@]}"; do for unit in "${units[@]}"; do
if test -f "/etc/systemd/system/${unit}"; then if test -f "/etc/systemd/system/${unit}"; then
cp "/etc/systemd/system/${unit}" "${temporary}/${unit}" cp "/etc/systemd/system/${unit}" "${temporary}/${unit}"

4
server-tools/persona-team-handshake/fifth-domain-daily-orchestrator.test.mjs
View file

@ -250,6 +250,10 @@ test("daily dispatcher unit is hardened and restricted to exact persona reposito
/ghctl authorize \/guanghu\/current install_world_version/u, /ghctl authorize \/guanghu\/current install_world_version/u,
); );
assert.match(deployScript, /systemctl disable "\$\{handshakes\[@\]\}"/u); assert.match(deployScript, /systemctl disable "\$\{handshakes\[@\]\}"/u);
assert.match(
deployScript,
/install -d -o guanghu -g guanghu -m 0750 "\$\{receipt_root\}"/u,
);
assert.match( assert.match(
deployScript, deployScript,
/systemctl start zhuyuan-persona-fifth-domain-daily\.service/u, /systemctl start zhuyuan-persona-fifth-domain-daily\.service/u,