Conversation
On Ubuntu 23.10 and later porta needs an AppArmor profile to give a command its own namespaces, and with the tarball that was a manual step. Each release now carries porta_<version>_<arch>.deb for amd64 and arm64: its postinst writes and loads /etc/apparmor.d/usr.bin.porta, granting userns to /usr/bin/porta alone, where the host restricts user namespaces and its AppArmor can read the rule; the postrm takes it away. The packages are in the signed checksums and attested, and CI and the release's verify job install one, see the namespaces, and remove it. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
…rms finish On a busy macOS runner the log can hold a refusal back past every retry, and the footer test failed the run for the log's lag; the Ubuntu job was then cancelled with it. The test now asks the log itself: a record it does not hold yet is left unverified and said so, a record it holds must reach the footer. CI no longer cancels one platform when the other fails. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
.debper release (amd64, arm64):/usr/bin/porta, and on Ubuntu 23.10+ a postinst that loads the AppArmor profile giving porta its namespaces; removing the package takes the profile away. Listed in the signed checksums and attested; CI and the release's verify job install it and see the namespaces.🤖 Generated with Claude Code