forked from heavy-duty/rig
c44a645670
The clean-file fast path exited before the sshd -T assertion, so matching bytes alone bought the 'root already closed' claim. Two ways that lies: an earlier-sorting drop-in wins the first-wins fight while our file sits pretty, and a prior run that died between install and restart leaves a daemon that never read the file — sshd -T can't see that one either, since it re-parses disk rather than interrogating the running daemon. Now the no-op is taken only when the bytes match AND systemd says sshd started strictly after the newest mtime across everything sshd reads (main config, drop-in dir, drop-ins); anything less restarts behind the same sshd -t gate, and the effective-config assertion runs on every path before any success claim. Harness pins both: assert-before-claim ordering and the daemon-start-vs-config-mtime proof. Addresses PR #27 review (clean-file fast path convergence). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| lib | ||
| bootstrap.sh | ||
| coolify-backup-install.sh | ||
| coolify-install.sh | ||
| runner-install.sh | ||
| runner-remove.sh | ||
| runner-repoint.sh | ||
| runner-status.sh | ||
| users-apply.sh | ||
| users-close-root.sh | ||
| users-status.sh | ||