Run-wrapper for services. (dart-lang#9423)

Author: isoos

CHANGELOG.md

@@ -10,6 +10,7 @@ AppEngine version, listed here to ease deployment and troubleshooting.
  * Bump runtimeVersion to `2026.06.03`.
  * Upgraded stable Dart analysis SDK to `3.12.1`
  * Upgraded stable Flutter analysis SDK to `3.44.1`.
+ * Note: started to use `tool/run-wrapper.sh`
 
 ## `20260601t084200-all`
  * Bump runtimeVersion to `2026.06.01`.

Dockerfile.app

@@ -70,6 +70,10 @@ COPY --from=go-build /project/pkg/signature_verifier/signature_verifier /project
 COPY --from=build /project/app/search_index.dill /project/app/search_index.dill
 COPY --from=build /project/app/sdk_isolate_index.dill /project/app/sdk_isolate_index.dill
 
+COPY --from=build /bin/sh /bin/sh
+COPY --from=build /bin/sleep /bin/sleep
+COPY --from=build /project/tool/run-wrapper.sh /project/tool/run-wrapper.sh
+
 WORKDIR /project/app
 EXPOSE 8080
-ENTRYPOINT ["/usr/lib/dart/bin/dart", "/project/app/server.jit"]
+ENTRYPOINT ["/project/tool/run-wrapper.sh", "/usr/lib/dart/bin/dart", "/project/app/server.jit"]

Dockerfile.worker

@@ -76,4 +76,4 @@ ENV SANDBOX_RUNNER="${PUB_WORKER_BUILD_DIR}/sandbox_runner"
 
 # This container image is launched by cloud-init, and cloud-init is responsible
 # for shutting down the VM when the container exits.
-ENTRYPOINT ["pub_worker"]
+ENTRYPOINT ["/home/worker/pub-dev/tool/run-wrapper.sh", "pub_worker"]

tool/run-wrapper.sh

@@ -0,0 +1,18 @@
+#!/bin/sh
+# Wrapper script that runs a command and logs exit status to stderr,
+# sleeping 10 seconds before exiting to allow log collection.
+
+set -u
+
+"$@"
+EXIT_CODE=$?
+
+if [ "$EXIT_CODE" -eq 0 ]; then
+  echo '{"message": "[pub-run-wrapper-exited]", "severity": "NOTICE", "component": "pub-run-wrapper"}' >&2
+  sleep 3
+else
+  echo '{"message": "[pub-run-wrapper-failed] exit code $EXIT_CODE", "severity": "CRITICAL", "component": "pub-run-wrapper"}' >&2
+  sleep 10
+fi
+
+exit "$EXIT_CODE"