Host state requires a deploy account that can write /var/lib/onebox

未关闭

#207 创建于 2026年9月23日 0 条评论 0 个 reaction 已指派 0 人在 GitHub 查看

还没有人认领这个 Issue。

评估

难度: 3/5
预计耗时: 1-2 天
新手友好度: 65/100

Issue 类型: 缺陷
描述清晰度: 描述清楚
活跃度: 活跃
技术栈: docker, go, shell
领域: cli, devops, infrastructure

调研方向

Look at the host lock acquisition code, likely in a file like internal/host/lock.go or similar. The acquireHostLock function attempts to create /var/lib/onebox/_host. Examine the preflight check that reports this issue. The fix involves modifying the host state directory logic, possibly adding a host-level configuration or improving the error message and documentation. Test by setting up a non-root deploy account and running the bootstrap command.

由索引模型根据 Issue 内容生成。

描述

bug

Problem

Since #206, host state (owner record, host lock, host journal, proxy) always lives at /var/lib/onebox/_host, whatever basePath says. That is what keeps a host to one application, but it means a deploy account that owns its basePath and cannot write /var/lib can no longer bootstrap: acquireHostLock fails on mkdir -p /var/lib/onebox/_host.

Before #206, _host sat under basePath, so a non-root account with basePath: /home/deploy/onebox worked.

Preflight now reports it (host state check), but no project setting fixes it. The only override, ONEBOX_TEST_HOST_STATE_DIR, is test-only by design.

Options

Document that the deploy account must be able to create /var/lib/onebox/_host, and have ob bootstrap say how to pre-create it with the right owner.
Or add a host-level (not project-level) setting for the host state directory, so it cannot differ per application on one host.

主要语言: Go
星标: 3
派生: 0
平均合并: 2 小时 44 分钟
30 天内合并 PR: 49