Add home tmpfs, env_file and pi sandbox parity #9

Merged

mathieu merged 1 commit from lain/pi-sandbox-parity-20261102210032 into main

2026-11-02 21:22:29 +00:00

Lain commented

2026-11-02 21:09:43 +00:00

Collaborator

Brings the options the pi wrapper relied on into dash:

home: tmpfs gives an empty, ephemeral home directory
env_file: KEY=VALUE file passed with podman --env-file
AQUA_CONFIG is set alongside AQUA_GLOBAL_CONFIG
started from $HOME, an empty temporary directory is the working directory
the entrypoint writes ~/.profile in place, so bind-mounted profiles work
tests and README/example updates

Verified: go vet, and the config, sandbox and assets tests pass. Not yet run: a real podman build and run of the image, and a --dry-run diff against the pi script.

Brings the options the pi wrapper relied on into dash: - home: tmpfs gives an empty, ephemeral home directory - env_file: KEY=VALUE file passed with podman --env-file - AQUA_CONFIG is set alongside AQUA_GLOBAL_CONFIG - started from $HOME, an empty temporary directory is the working directory - the entrypoint writes ~/.profile in place, so bind-mounted profiles work - tests and README/example updates Verified: go vet, and the config, sandbox and assets tests pass. Not yet run: a real podman build and run of the image, and a --dry-run diff against the pi script.

Lain added 1 commit

2026-11-02 21:09:43 +00:00

Add home tmpfs, env_file, AQUA_CONFIG and temp cwd for pi parity

ci / test (pull_request) Successful in 1m16s

Details

905cc73373

- home: persistent|tmpfs; tmpfs mounts an empty ephemeral $HOME
- env_file: KEY=VALUE file passed with podman --env-file
- AQUA_CONFIG mirrors AQUA_GLOBAL_CONFIG
- started from $HOME, mount an empty temporary directory as cwd
- entrypoint writes ~/.profile in place so bind-mounted profiles work
- tests and docs for the new options