Two issues caused krun_start_enter -22 (VM boot crash):
1. git-gate entrypoint missing at boot: sidecar_init.py starts all
daemons (including git-gate) immediately as PID 1. The entrypoint
was copied in via machine_cp which only runs after machine_start
returns — too late. virtiofs also can't mount files at root (/).
Fix: bake a static /git-gate-entrypoint.sh wrapper into the
Dockerfile.sidecars image that delegates to /etc/git-gate/entrypoint.sh.
For smolmachines, stage per-bottle scripts with correct in-VM names
under the git-gate state dir and virtiofs-mount to /etc/git-gate/ at
VM creation time. docker/macOS backends are unchanged (their file
bind-mount/docker cp still overrides the static wrapper).
2. Egress confdir mounted read-only: egress_entrypoint.sh writes
combined-trust.pem to confdir under set -e; mitmproxy also needs
to write its per-host cert cache there. Both fail fatally on a
read-only virtiofs mount.
Fix: change the egress confdir virtiofs mount to writable.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
didericis
62d2e86e7e