[verified] feat(deploy): run v0.1.2 as non-root

2026-09-30 20:41:56 +09:00
parent bf746e0cf3
commit ee3e3852ee
13 changed files with 333 additions and 12 deletions
@@ -50,14 +50,19 @@ artifacts:
        expected_architecture: arm64
      - type: container-command
        environment:
-          JARCA_LEDGER_DB_PATH: /tmp/ledger.sqlite3
+          JARCA_LEDGER_DB_PATH: /data/ledger.sqlite3
        argv:
          - python
          - -c
          - >-
-            import platform; from jarca_ledger_mcp import service;
+            import os, pathlib, platform; from jarca_ledger_mcp import service;
+            assert os.getuid() == 1000, os.getuid();
+            assert os.getgid() == 1000, os.getgid();
+            probe = pathlib.Path("/data/.write-probe");
+            probe.write_text("ok"); probe.unlink();
            result = service.health_check();
            assert platform.machine() == "aarch64";
+            assert pathlib.Path("/data/ledger.sqlite3").is_file();
            assert result["success"], result
      - type: container-health
        name_template: "jarca-mcp-{run_id}"