Repository navigation
test(devcontainer): cover config volume parent ownership - #200
Merged
lurtz merged 2 commits intoNov 5, 2026
Merged
Conversation
This was referenced Nov 4, 2026
AlexanderLanin
marked this pull request as ready for review
November 4, 2026 13:30
AlexanderLanin
requested review from
FScholPer,
lurtz and
opajonk
as code owners
November 4, 2026 13:30
lurtz
reviewed
Nov 4, 2026
Contributor
There was a problem hiding this comment.
isn't it enough to check at https://github.com/etas-contrib/score_devcontainer/blob/03dbcd18f51005c247a45cb6fb14e3b07326a5ce/src/s-core-devcontainer/.devcontainer/s-core-local/tests/test_default.sh that the directories have the expected permissions set?
etas-contrib-automation Bot
pushed a commit
to etas-contrib/score_devcontainer
that referenced
this pull request
Nov 5, 2026
…lipse-score#198) ## Why Adding or removing a tool currently means following several installation scripts and separate version files. Maintainers need one place to see which tools each environment provides, and to change that selection without rewriting installation steps. For developers, basedpyright and pytest become available to all DevContainer users alongside pre-commit, rather than being installed into one user's home directory. They also gain Bazel targets using the same package versions. Invalid selections, missing declared dependencies and unsupported platform artifacts are reported before installation starts. ## What changes - **Tool selection:** `tools/environments.json` lists the directly managed tools for the two existing container features and this repository's own setup. - **Package definitions:** `tools/providers.json` holds Python/npm packages, APT policies and special setup metadata. Native release versions and checksums stay in the existing lockfiles; Bazel reads Python definitions from the same JSON source. - **Installation:** each setup requests its selection with one installer call. The installer manages temporary build packages, tool setup, cleanup and required privileges, while npm retains the development user's environment. Tool-specific setup lives beside the installer. - **Cleanup and fixes:** remove the replaced YAML definitions and yq bootstrap, and repair config/state parent ownership without changing existing private permissions. Existing tool versions and APT policies are retained. Distribution-selected packages still follow Ubuntu; the change does not make those packages exactly pinned. Part of eclipse-score#190; builds on eclipse-score#196. --- ## Possible split if this is too large If this PR is too large to review as one change, we could split it into the following independently usable steps. Extractions eclipse-score#200 and eclipse-score#201 are ready for review, each based directly on `main` and independent of the other. This PR retains the complete implementation until the extractions land. | PR | Scope | Result | | --- | --- | --- | | 1. Fix directory ownership (eclipse-score#200) | Repair config/state parent ownership while preserving private permissions, with regression coverage. | An independent bugfix. | | 2. Consolidate package definitions (eclipse-score#201) | Introduce `providers.json` and the Bazel adapter; replace the Python/YAML definitions and yq. Adapt existing installers to read the new metadata and expose the additional Python Bazel targets. | Shared definitions, with existing installation flows largely retained. | | 3. Migrate repository setup | Add environment selection, validation and native/Python/npm installation with privilege handling; migrate `post_create_command.sh`. | The new model is used by this repository's own setup. | | 4. Migrate container features | Add APT, temporary build dependencies and declared setup scripts; migrate both features, including system-wide Python tools, and remove their inline installation logic. | The complete behavior proposed by this PR. | Steps 2 → 3 → 4 build on each other. Step 1 is independent and should land before step 4. If step 4 is still too large, it can be split further by `bazel-feature` and `s-core-local`. Tests and documentation would accompany their respective changes; intermediate steps would keep one source for each version rather than introducing duplicate definitions.
AlexanderLanin
force-pushed
the
fix/config-volume-parent-ownership
branch
from
November 5, 2026 14:41
c501837 to
188775d
Compare
AlexanderLanin
changed the title
Member
Author
|
most of this was in #198, just the test was missing |
lurtz
approved these changes
Nov 5, 2026
|
🎉 This PR is included in version 1.12.0 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The config-volume ownership repair merged in #198 needs regression coverage so development users can continue creating state directories below
~/.localwhile existing private permissions are preserved.Add a small check to the existing
s-core-local/tests/test_default.sh: create root-owned configuration parents in a temporary home directory, run the repair script, and verify user ownership, preservation of mode0700, and creation of.local/state.The ownership fix itself is already on
main; this PR only adds the test. Part of #190.