Tatsh / sbclaude / 36088950133

100%

push

github

project: add a Gentoo box for ebuild work

An agent in the box could not test an ebuild. The Debian image has no
Portage, and every box is removed on exit. Dependencies emerged in one
session were gone by the next. --gentoo (config key gentoo)
runs an image built from a Gentoo stage3 with pkgcheck, pkgdev,
gentoolkit, portage-utils, and git. The image has claude and opencode
targets, as the Debian one does.

On a Gentoo host, the box copies the host's /etc/portage once. The
host's USE flags, CFLAGS, and profile are what its binary packages
were built with, and emerge only takes a binary package whose settings
match. The host repositories and PKGDIR are mounted read-only, with
--usepkg added, and DISTDIR read-write. PKGDIR and DISTDIR are the
paths portageq reports on the host. A project with profiles/repo_name
is registered as a repository at its checkout. The namespace sandboxes
need CAP_SYS_ADMIN, and the box turns them off. emerge runs as root,
and --gentoo therefore implies --sudo.

A Gentoo box is saved between sessions. When a session ends, the
container is committed to a per-project and per-agent image, and the
next box starts from it. docker commit copies the container's
environment into the saved image. A saved box therefore receives no -e
at all. Its environment, keyring secrets and docker_args included, is
written NUL-separated to a file readable by the user alone, mounted at
/run/sbclaude/env, and deleted when the session ends. The committed
image gets an empty CMD. A box abandoned by a crash is saved by the
next start. sbclaude stop stops a Gentoo box instead of removing it,
and a second concurrent box is not saved. The packaged entrypoint is
mounted over the copy in a saved state. sbclaude reset discards saved
state, and delete-image does not.

sbclaude-host-quickpkg runs quickpkg against read-only mounts of the
host's /usr and /var/db/pkg. CONTENTS limits it to the requested
packages, and the result is installed with emerge --usepkgonly... (continued)

338 of 338 branches covered (100.0%)

Branch coverage included in aggregate %.

192 of 192 new or added lines in 4 files covered. (100.0%)

1217 of 1217 relevant lines covered (100.0%)

5.0 hits per line