nyrn
/
openclaw
mirror of https://github.com/openclaw/openclaw.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openclaw/scripts
History
Charlie Niño 26db298d3e
fix: sed escaping and UID mismatch in Podman Quadlet setup (#26414) 
* fix: sed escaping and UID mismatch in Podman Quadlet setup

Fix two bugs in the Podman/Quadlet installation path:

1. setup-podman.sh line 227: Remove `/` from sed escape character class.
   The sed substitution uses `|` as delimiter, so `/` doesn't need
   escaping. Including it causes paths like `/home/openclaw` to become
   `\/home\/openclaw`, which Podman rejects as invalid volume names.

2. openclaw.container.in: Add `User=%U:%G` after `UserNS=keep-id`.
   The Dockerfile sets `USER node` (UID 1000), but the `openclaw` system
   user created by setup-podman.sh may get a different UID (e.g., 1001).
   Without `User=%U:%G`, the container process runs as UID 1000 and
   cannot read config files owned by the openclaw user.

Closes #26400

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* scripts: extract quadlet sed replacement escaping helper

* podman: document quadlet user mapping rationale

* scripts: correct sed replacement escaping for pipe delimiter

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>
 		2026-02-28 09:20:18 -08:00
..
dev feat: ACP thread-bound agents (#23580) 2026-02-26 11:00:09 +01:00
docker fix(ci): stabilize install smoke in docker 2026-02-21 20:39:34 +01:00
docs-i18n chore(security): bump qs and golang.org/x/net 2026-02-14 21:22:46 +01:00
e2e chore: silence onboard warning noise 2026-02-26 22:47:35 +01:00
podman fix: sed escaping and UID mismatch in Podman Quadlet setup (#26414) 2026-02-28 09:20:18 -08:00
pre-commit refactor: centralize pre-commit file filtering 2026-02-16 03:42:11 +01:00
repro
…
shell-helpers fix(clawdock): include docker-compose.extra.yml in helper commands (#17094) 2026-02-19 03:40:47 -08:00
systemd
…
auth-monitor.sh
…
bench-model.ts
…
build-and-run-mac.sh
…
build-docs-list.mjs
…
build_icon.sh
…
bundle-a2ui.sh Chore: harden A2UI bundle dependency resolution (#22507) 2026-02-21 13:16:31 +05:30
canvas-a2ui-copy.ts
…
changelog-to-html.sh
…
check-channel-agnostic-boundaries.mjs feat: ACP thread-bound agents (#23580) 2026-02-26 11:00:09 +01:00
check-composite-action-input-interpolation.py ci: harden workflow action input handling 2026-02-19 15:27:48 +01:00
check-no-pairing-store-group-auth.mjs refactor: unify dm policy store reads and reason codes 2026-02-26 17:47:57 +01:00
check-no-random-messaging-tmp.mjs refactor(tmp): harden temp boundary guardrails 2026-02-24 23:51:10 +00:00
check-no-raw-channel-fetch.mjs fix: pass rootId to streaming card in Feishu topic groups (openclaw#28346) thanks @Sid-Qin 2026-02-27 20:20:53 -06:00
check-no-raw-window-open.mjs refactor: tighten external-link policy and window.open guard 2026-02-24 15:05:31 +00:00
check-pairing-account-scope.mjs refactor(security): enforce account-scoped pairing APIs 2026-02-26 21:57:52 +01:00
check-ts-max-loc.ts
…
claude-auth-status.sh
…
clawlog.sh
…
clawtributors-map.json
…
codesign-mac-app.sh
…
codespell-dictionary.txt docs: add custom spellcheck dictionary and fix docs typos (#22457) 2026-02-21 01:35:35 -05:00
codespell-ignore.txt fix(ci): make docs spellcheck fallback deterministic 2026-02-21 15:08:28 +01:00
committer
…
copy-export-html-templates.ts refactor: bundle export-html templates instead of reading from node_modules 2026-02-17 00:00:57 +01:00
copy-hook-metadata.ts
…
create-dmg.sh
…
cron_usage_report.ts fix(ci): restore main lint/typecheck after direct merges 2026-02-16 23:26:11 +00:00
debug-claude-usage.ts
…
docs-link-audit.mjs
…
docs-list.js
…
docs-spellcheck.sh fix(ci): make docs spellcheck fallback deterministic 2026-02-21 15:08:28 +01:00
firecrawl-compare.ts
…
generate-host-env-security-policy-swift.mjs refactor(security): enforce v1 node exec approval binding 2026-02-26 18:09:01 +01:00
ghsa-patch.mjs refactor(security): enforce v1 node exec approval binding 2026-02-26 18:09:01 +01:00
ios-configure-signing.sh fix(ios): auto-generate local signing overrides (#20716) 2026-02-19 15:48:46 +08:00
ios-team-id.sh fix(ios): normalize team IDs before preferred match 2026-02-24 15:02:27 +00:00
label-open-issues.ts
…
make_appcast.sh fix: support legacy and beta prerelease version formats 2026-02-24 02:05:37 +00:00
mobile-reauth.sh
…
notarize-mac-artifact.sh
…
package-mac-app.sh fix(macos): derive canonical APP_BUILD after deps install 2026-02-28 10:04:25 +05:30
package-mac-dist.sh fix(macos): set release bundle ID so Sparkle auto-update works (#19750) 2026-02-20 12:08:10 +05:30
pr merge-pr: use short squash merge banner 2026-02-27 21:41:24 +00:00
pr-merge chore: fix root_dir resolution/stale scripts during PR review 2026-02-13 15:09:39 -05:00
pr-prepare chore: fix root_dir resolution/stale scripts during PR review 2026-02-13 15:09:39 -05:00
pr-review chore: fix root_dir resolution/stale scripts during PR review 2026-02-13 15:09:39 -05:00
protocol-gen-swift.ts fix: stabilize swift protocol generation and flaky tests 2026-02-21 16:53:46 +01:00
protocol-gen.ts
…
readability-basic-compare.ts
…
recover-orphaned-processes.sh fix: reset stale execution state after SIGUSR1 in-process restart (#15195) 2026-02-13 15:30:09 -05:00
release-check.ts fix(release): enforce lane floor for calver appcast entries 2026-02-28 10:28:53 +05:30
restart-mac.sh refactor: replace bot.molt identifiers with ai.openclaw 2026-02-25 05:03:24 +00:00
run-node.d.mts chore: Fix types in tests 33/N. 2026-02-17 15:50:07 +09:00
run-node.mjs fix(gateway): remove watch-mode build/start race (#18782) 2026-02-17 11:24:08 +09:00
run-openclaw-podman.sh fix(podman): default run-openclaw-podman bind to loopback (land #27491, thanks @robbyczgw-cla) 2026-02-26 12:13:20 +00:00
sandbox-browser-entrypoint.sh fix(security): harden sandbox browser network defaults 2026-02-21 14:02:53 +01:00
sandbox-browser-setup.sh
…
sandbox-common-setup.sh refactor(sandbox): add sandbox-common dockerfile 2026-02-15 00:57:13 +01:00
sandbox-setup.sh
…
setup-auth-system.sh
…
sparkle-build.ts fix(release): unify sparkle build policy and defaults 2026-02-28 10:04:25 +05:30
sqlite-vec-smoke.mjs
…
sync-labels.ts
…
sync-moonshot-docs.ts
…
sync-plugin-versions.ts fix(feishu): restore group command fallback and plugin deps 2026-02-22 19:13:19 +01:00
termux-auth-widget.sh
…
termux-quick-auth.sh
…
termux-sync-widget.sh
…
test-cleanup-docker.sh
…
test-force.ts
…
test-install-sh-docker.sh test(installer): drop legacy gum env from docker smoke 2026-02-22 18:44:21 +01:00
test-install-sh-e2e-docker.sh
…
test-live-gateway-models-docker.sh test: cap docker live model sweeps and harden timeouts 2026-02-25 02:48:34 +00:00
test-live-models-docker.sh test: cap docker live model sweeps and harden timeouts 2026-02-25 02:48:34 +00:00
test-parallel.mjs CI: shard Windows test lane for faster CI critical path (#27234) 2026-02-26 00:33:36 -06:00
test-shell-completion.ts style: align formatting with oxfmt 0.33 2026-02-18 01:34:35 +00:00
ui.js fix(scripts): harden Windows UI spawn behavior 2026-02-16 20:49:09 -05:00
update-clawtributors.ts scripts: exclude unresolved clawtributors from README 2026-02-24 02:55:02 +00:00
update-clawtributors.types.ts
…
vitest-slowest.mjs
…
watch-node.d.mts chore: Fix types in tests 33/N. 2026-02-17 15:50:07 +09:00
watch-node.mjs fix(gateway): remove watch-mode build/start race (#18782) 2026-02-17 11:24:08 +09:00
write-build-info.ts
…
write-cli-compat.ts fix (cli): harden daemon compat shim for minimal bundle exports 2026-02-14 20:53:32 -08:00
write-plugin-sdk-entry-dts.ts fix(slack): download all files in multi-image messages (#15447) 2026-02-14 14:16:02 +01:00
zai-fallback-repro.ts
…