Hare/yoi
1
1
Fork 0
Code Actions Packages Releases Activity

fix: keep runtime SSH sockets below path limits

Browse Source
This commit is contained in:
Hare
2026-09-04 12:48:25 +09:00
parent bb6558e7bf
commit 64c268582d
1 changed files with 25 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/worker-runtime/src/working_directory.rs
+25 -10
View File
@@ -1207,11 +1207,17 @@ impl RepositorySshAgent {
working_directory_id: &str, working_directory_id: &str,
access: &RepositorySshMaterializationAccess, access: &RepositorySshMaterializationAccess,
) -> Result<Self, WorkingDirectoryDiagnostic> { ) -> Result<Self, WorkingDirectoryDiagnostic> {
let root = runtime_root.join(".repository-agents").join(format!( let mut digest = Sha256::new();
"{}-{}", digest.update(working_directory_id.as_bytes());
sanitize_path_component(working_directory_id), digest.update([0]);
next_working_directory_id("agent") digest.update(next_working_directory_id("agent").as_bytes());
)); let agent_id = digest
.finalize()
.iter()
.take(8)
.map(|byte| format!("{byte:02x}"))
.collect::<String>();
let root = runtime_root.join(".repository-agents").join(agent_id);
fs::create_dir_all(&root).map_err(|_| { fs::create_dir_all(&root).map_err(|_| {
WorkingDirectoryDiagnostic::new( WorkingDirectoryDiagnostic::new(
"working_directory_repository_agent_failed", "working_directory_repository_agent_failed",
@@ -1862,11 +1868,20 @@ impl RepositoryCommandAccess {
repository_id: &str, repository_id: &str,
ssh: &RepositorySshMaterializationAccess, ssh: &RepositorySshMaterializationAccess,
) -> Result<Self, WorkingDirectoryDiagnostic> { ) -> Result<Self, WorkingDirectoryDiagnostic> {
let root = runtime_root.join(REPOSITORY_ACCESS_DIR).join(format!( let mut digest = Sha256::new();
"{}-{}", digest.update(operation_id.as_bytes());
sanitize_path_component(operation_id), digest.update([0]);
next_working_directory_id(repository_id) digest.update(repository_id.as_bytes());
)); digest.update([0]);
digest.update(next_working_directory_id("access").as_bytes());
let access_id = digest
.finalize()
.iter()
.take(8)
.map(|byte| format!("{byte:02x}"))
.collect::<String>();
// Keep operation-scoped Unix socket paths below sockaddr_un::sun_path on deep runtime roots.
let root = runtime_root.join(REPOSITORY_ACCESS_DIR).join(access_id);
fs::create_dir_all(&root).map_err(|_| { fs::create_dir_all(&root).map_err(|_| {
WorkingDirectoryDiagnostic::new( WorkingDirectoryDiagnostic::new(
"working_directory_repository_access_setup_failed", "working_directory_repository_access_setup_failed",