Skip to content

feat: test upstream openvoxserver-ca#33 rootless fix - #314

Closed
slauger wants to merge 7 commits into
developfrom
feat/test-upstream-ca-rootless-fix
Closed

feat: test upstream openvoxserver-ca#33 rootless fix#314
slauger wants to merge 7 commits into
developfrom
feat/test-upstream-ca-rootless-fix

Conversation

@slauger

@slauger slauger commented Apr 20, 2026

Copy link
Copy Markdown
Owner

Summary

Test plan

  • CI image build passes (openvox-server image builds successfully)
  • E2E tests pass (puppetserver ca setup works rootless)
  • If successful, we can drop our patches once openvoxserver-ca#33 is merged and released

Raise memory limit from 128Mi to 256Mi and request from 64Mi to 128Mi.
The previous limits were too low, causing OOMKill under sustained
reconciliation load.

Signed-off-by: Simon Lauger <simon@lauger.de>
@slauger
slauger force-pushed the feat/test-upstream-ca-rootless-fix branch from 221dbd8 to 90f3f02 Compare April 20, 2026 21:28
slauger added 6 commits April 20, 2026 23:30
Signed-off-by: Simon Lauger <simon@lauger.de>
Replace our sed-based patches for rootless chown issues with the
upstream file_system.rb from OpenVoxProject/openvoxserver-ca#33.

The upstream PR introduces an ensure_ownership helper that skips chown
when not running as root, which covers both the file_system.rb chown
calls and the forcibly_symlink used by symlink_to_old_cadir in setup.rb.

This eliminates the need for both of our previous sed patches.

Signed-off-by: Simon Lauger <simon@lauger.de>
The PR branch lives in dotconfig404/openvoxserver-ca, not the main repo.

Signed-off-by: Simon Lauger <simon@lauger.de>
Use fixed commit hash instead of branch name to ensure reproducible builds.

Signed-off-by: Simon Lauger <simon@lauger.de>
The glob path does not expand correctly in the build container.
Use find like the original sed patch did.

Signed-off-by: Simon Lauger <simon@lauger.de>
Signed-off-by: Simon Lauger <simon@lauger.de>
@slauger
slauger force-pushed the feat/test-upstream-ca-rootless-fix branch from 90f3f02 to 2717bfe Compare April 20, 2026 21:30
@slauger slauger closed this May 15, 2026
@slauger
slauger deleted the feat/test-upstream-ca-rootless-fix branch May 20, 2026 11:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant