feat(jail): add disposable testbed provisioner and lifecycle destroy guard #22

Closed

clawdie wants to merge 0 commits from clawdie/oxy-testbed-jail into main AGit

pull from: clawdie/oxy-testbed-jail

merge into: clawdie:main

clawdie:main

clawdie:feat/poudriere-agent-vault-tarsnap-0.15.1

Conversation 0 Commits - Files changed -

clawdie commented 2026-10-29 01:05:01 +01:00

Owner

Copy link

Summary

Adds scripts/jail-testbed.sh, a repeatable disposable Bastille testbed provisioner, and extends the jail-run.sh destroy guard so jails whose exact root dataset carries clawdie:lifecycle=temp can be destroyed without a -test suffix.

The provisioner supports provision|verify|destroy|status, refuses protected production names such as cms, records disposability in metadata, writes the three-layer lineage stamp, makes the jail root readable for unprivileged Colibri probes, and stages the host Oxigraph 0.4.9 binary inside the jail.

Safety

• cms is never targeted; BUILTIN_PROTECTED_NAMES is enforced before any mutation.
• Provision/destroy require root; the helper prints the exact root-tmux command if run unprivileged.
• Destroy requires the exact-name confirmation and either a disposable name or local clawdie:lifecycle=temp; --allow-production remains the explicit override.
• Hermetic tests use only PATH shims and temporary directories.

Tests

sh scripts/tests/jail-run-test.sh
sh scripts/tests/test-jail-testbed.sh
./scripts/ci-checks.sh

## Summary Adds `scripts/jail-testbed.sh`, a repeatable disposable Bastille testbed provisioner, and extends the `jail-run.sh` destroy guard so jails whose exact root dataset carries `clawdie:lifecycle=temp` can be destroyed without a `-test` suffix. The provisioner supports `provision|verify|destroy|status`, refuses protected production names such as `cms`, records disposability in metadata, writes the three-layer lineage stamp, makes the jail root readable for unprivileged Colibri probes, and stages the host Oxigraph 0.4.9 binary inside the jail. ## Safety - `cms` is never targeted; `BUILTIN_PROTECTED_NAMES` is enforced before any mutation. - Provision/destroy require root; the helper prints the exact root-tmux command if run unprivileged. - Destroy requires the exact-name confirmation and either a disposable name or local `clawdie:lifecycle=temp`; `--allow-production` remains the explicit override. - Hermetic tests use only PATH shims and temporary directories. ## Tests ```sh sh scripts/tests/jail-run-test.sh sh scripts/tests/test-jail-testbed.sh ./scripts/ci-checks.sh ```

clawdie added 1 commit 2026-10-29 01:05:01 +01:00

feat(jail): add disposable testbed provisioner and lifecycle destroy guard ... 400e854c79

Add scripts/jail-testbed.sh (provision|verify|destroy|status) for a metadata-disposable Bastille jail. It writes a local clawdie:lifecycle tag, root-base lineage stamp, 0755 probe-readable directories, and stages the host oxigraph binary into the jail. Provisioning is idempotent and refuses protected names such as cms.

Extend jail-run.sh destroy authorization to accept a non-name-disposable jail when its exact root dataset carries local clawdie:lifecycle=temp, while retaining --allow-production as the explicit override. Add hermetic coverage for the provisioner and the new destroy path, and wire both tests into ci-checks.sh.

clawdie force-pushed clawdie/oxy-testbed-jail from 400e854c79 to b9466d1373 2026-10-29 01:17:06 +01:00 Compare

clawdie added 3 commits 2026-10-29 07:48:16 +01:00

fix(jail): enforce local ZFS lifecycle source on destroy and support Linux stat in testbed fcfa1593b6

feat(jail): add start action, prevent daemon pipe-hang on create/start, and enforce 6-arg zfs get in test shims 553c766e5c

test(jail): keep protected-name fixture inside test tempdir c02401c277

clawdie added 2 commits 2026-10-29 08:47:29 +01:00

feat(jail): rename testbed helper to jail-lifecycle.sh with scoped mount cleanup and doas escalation af693908e6

fix(jail): use foreground timeout so jail daemons cannot block create/start a8ba6e08eb

clawdie added 1 commit 2026-10-29 08:48:10 +01:00

docs(jail): install companion jail-run with lifecycle helper 2ec5737ab1

clawdie referenced this pull request 2026-10-29 12:37:48 +01:00

fix(jail-lifecycle): make create-only and reject unsafe existing state #23

clawdie added 4 commits 2026-10-29 12:38:18 +01:00

feat(jail-lifecycle): add ZFS block-sharing clone action and snapshot cleanup a2f4767b06

fix(jail-lifecycle): derive clone parent_template from ZFS origin in verify and log initial/active used 24275369a2

feat(jail-lifecycle): write and verify 9-property clawdie:* ZFS metadata schema acc4ad16ca

fix(jail-lifecycle): normalize clawdie:ip by stripping bastille iface prefix 537bf39a79

clawdie referenced this pull request 2026-10-29 13:06:17 +01:00

feat(jail): safe Oxy testbed lifecycle candidate #24

clawdie added 3 commits 2026-10-29 14:29:06 +01:00

fix(jail-lifecycle): make create-only and reject unsafe existing state d56f75c521

fix(jail-lifecycle): preflight all destination entries and reconcile configured IP d6060b8930

fix(jail-lifecycle): harden standalone verify, dependent-clone destroy, and CI gates 98822c6bd4

clawdie closed this pull request 2026-10-30 13:44:56 +01:00

All checks were successful

Hide checks

format-check / gates (pull_request) Successful in 18s

Details

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

clawdie/clawdie-iso!22

No description provided.