OpenAI Coding Assistant
35ca88d517
Share the live project cwd, DSH home and skills read-write while running guest root behind rootless QEMU and Bubblewrap. Reuse project toolchains, expose configurable SSH-forwarded web access, and launch the latest official DSH. Include the project template, operating guide, offline boot and mount tests, and shell checks.
56 lines
2.4 KiB
Bash
56 lines
2.4 KiB
Bash
#!/usr/bin/env bash
|
|
# Offline test of the real microvm.nix runner, mounts, SSH and host-side sandbox.
|
|
set -euo pipefail
|
|
launcher=$1
|
|
tmp=$(mktemp -d)
|
|
export HOME=$tmp/home DSH_HOME=$tmp/dsh DSH_AGENTS_HOME=$tmp/agents XDG_STATE_HOME=$tmp/state
|
|
mkdir -p "$HOME" "$tmp/project" "$DSH_HOME/skills" "$DSH_AGENTS_HOME/skills"
|
|
chmod 700 "$DSH_HOME"
|
|
printf 'not shared\n' > "$HOME/host-only-secret"
|
|
ln -s "$HOME/host-only-secret" "$tmp/project/escape"
|
|
cd "$tmp/project"
|
|
"$launcher" run > "$tmp/launcher.log" 2>&1 &
|
|
pid=$!
|
|
cleanup() {
|
|
status=$?
|
|
if (( status )); then
|
|
grep -h . "$tmp/launcher.log" "$XDG_STATE_HOME"/agent-vm/*/console.log | tail -80 || true
|
|
fi
|
|
"$launcher" stop >/dev/null 2>&1 || true
|
|
kill "$pid" 2>/dev/null || true
|
|
wait "$pid" 2>/dev/null || true
|
|
# Never delete real project/config data; everything here is a test fixture.
|
|
rm -rf "$tmp"
|
|
return "$status"
|
|
}
|
|
trap cleanup EXIT
|
|
ready=false
|
|
for ((i=0; i<120; i++)); do
|
|
if "$launcher" ssh true 2>/dev/null; then ready=true; break; fi
|
|
if ! kill -0 "$pid" 2>/dev/null; then break; fi
|
|
sleep 2
|
|
done
|
|
if ! $ready; then
|
|
grep -h . "$tmp/launcher.log" "$XDG_STATE_HOME"/agent-vm/*/console.log || true
|
|
exit 1
|
|
fi
|
|
[[ $("$launcher" ssh 'id -u') == 0 ]]
|
|
[[ $("$launcher" ssh pwd) == "$tmp/project" ]]
|
|
[[ $("$launcher" ssh nproc) == 4 ]]
|
|
[[ $("$launcher" ssh 'printenv AGENT_PROJECT_TEST') == shared ]]
|
|
[[ $("$launcher" ssh hello) == 'Hello, world!' ]]
|
|
"$launcher" ssh 'test ! -e /workspace/escape; test ! -e /run/host; test -d /nix/.rw-store'
|
|
"$launcher" ssh 'printf edited > /workspace/changed; printf config > /root/.dsh/config-test; printf creds > /root/.dsh/credentials-test; printf skill > /root/.dsh/skills/test.md; printf shared > /root/.agents/skills/test.md'
|
|
[[ $(< changed) == edited && $(< "$DSH_HOME/config-test") == config ]]
|
|
[[ $(< "$DSH_HOME/credentials-test") == creds && $(< "$DSH_HOME/skills/test.md") == skill ]]
|
|
[[ $(< "$DSH_AGENTS_HOME/skills/test.md") == shared ]]
|
|
[[ $(stat -c %u changed) == "$(id -u)" ]]
|
|
"$launcher" ssh 'command -v rg python3 git; findmnt /workspace; findmnt /root/.dsh'
|
|
# A second start must fail without disrupting the existing VM.
|
|
if "$launcher" run >/dev/null 2>&1; then echo 'Duplicate launch succeeded' >&2; exit 1; fi
|
|
"$launcher" stop
|
|
wait "$pid"
|
|
trap - EXIT
|
|
rm -rf "$tmp"
|
|
echo 'PASS: microVM boot, root SSH, shared toolchain, RW cwd/config/creds/skills, host ownership, symlink isolation, duplicate lock, shutdown'
|