didericis/bot-bottle
1
0
Fork 0
Code Issues 37 Pull Requests 4 Actions 1 Packages Releases Wiki Activity

fix(firecracker): pin the provisioned Git config
tracker-policy-pr / check-pr (pull_request) Successful in 10s
Details
test / integration-docker (pull_request) Successful in 19s
Details
lint / lint (push) Successful in 55s
Details
test / unit (pull_request) Successful in 1m32s
Details
test / integration-firecracker (pull_request) Failing after 3m4s
Details
test / coverage (pull_request) Has been skipped
Details
test / publish-infra (pull_request) Has been skipped
Details

Browse Source
This commit is contained in:
didericis (codex)
2026-07-21 18:17:29 +00:00
parent 7512e3179a
commit c2c934899c
4 changed files with 43 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bot_bottle/backend/firecracker/launch.py
+5
View File
@@ -242,6 +242,11 @@ def _agent_guest_env(plan: FirecrackerBottlePlan, host_ip: str) -> dict[str, str
"HTTPS_PROXY": proxy_url, "HTTP_PROXY": proxy_url,
"https_proxy": proxy_url, "http_proxy": proxy_url,
"NO_PROXY": no_proxy, "no_proxy": no_proxy,
# Rootfs export can leave Git's implicit XDG paths unreadable even
# after the runtime repair. Bypass that discovery and name the
# provisioned global config explicitly so insteadOf can never fall
# through to the credential-bearing upstream URL.
"GIT_CONFIG_GLOBAL": f"{plan.guest_home}/.gitconfig",
"NODE_EXTRA_CA_CERTS": AGENT_CA_PATH,
"SSL_CERT_FILE": AGENT_CA_BUNDLE,
"REQUESTS_CA_BUNDLE": AGENT_CA_BUNDLE,