eeymoo/claw-code
1
0
Fork 0
mirror of https://github.com/instructkr/claw-code.git synced 2026-08-25 00:00:38 +08:00
Code Issues Packages Projects Releases Wiki Activity
1,686 Commits 191 Branches 0 Tags
277fdda89433b28f451ed9acea3012541eafba2a
Commit Graph
2 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
linkst 277fdda894 fix(sandbox): fall back to --map-auto when root-user mapping is restricted 
Plain `unshare --user --map-root-user` fails on kernels and containers
that block unprivileged writes to /proc/self/uid_map (e.g. GitHub Actions,
restricted AppArmor profiles). On those systems util-linux delegates to the
setuid newuidmap/newgidmap helpers when --map-auto is also present.

Add the combined form as a fallback candidate and build the launcher args
from the probed mapping, so systems without newuidmap/newgidmap or a
/etc/subuid range keep using the plain form.
 2026-07-31 17:09:00 +08:00
linkst 1c8338ea66 refactor(sandbox): extract unshare mapping probe into cached helper 
No behavior change. Move the inline probe out of
unshare_user_namespace_works into a reusable unshare_probe helper and a
cached working_unshare_mapping() that picks the first working candidate
from UNSHARE_MAPPING_CANDIDATES, so the launcher and the capability probe
share one code path.
 2026-07-31 17:08:51 +08:00