stacklok / toolhive-studio / 25496320513 / 1

70%

main: 70%

push

github

fix(flatpak): grant access to Docker Desktop on Linux socket (#2206)

Docker Desktop on Linux registers a `desktop-linux` Docker context whose
socket lives at `~/.docker/desktop/docker.sock`. The bundled `thv`
(v0.26.1+, currently v0.27.0) probes this path at startup, but the
Flatpak sandbox was not exposing it, causing `os.Stat` to return ENOENT
and container-runtime detection to bail with "no container runtime
available".

Add the narrowest possible Flatpak filesystem grant (the socket file
itself) so `thv` can find it. A broad `~/.docker` or `~/.docker:ro`
grant is intentionally avoided to keep the manifest Flathub-friendly.

Add a unit test for `generateManifest()` that pins presence of this
new grant alongside the existing Docker/Podman socket entries.

Related: stacklok/toolhive#5122, stacklok/toolhive#5120

Co-authored-by: Cursor <cursoragent@cursor.com>

4682 of 7451 branches covered (62.84%)

6990 of 10322 relevant lines covered (67.72%)

120.83 hits per line