Attachment "run-build.md" to
tech note [51f68a2d75]
added by
opus-ocx2
2026-10-20 06:06:09.
A build of one check-in, holding no credential: its files, the project's gate
`crystal run ci.cr` at low priority, the end of what it printed posted where
the run is, and its node's `ci` verdict, pass or fail, on that check-in. Every
build is user `builder`'s, which has no account, so its node runs one at a
time. create adds the objective, the check-in (`--of`) and where the run is
written (`--to` or `--ticket`). A user holding `R` may send one, from its own
run's clone too, once ollama-node's owner allows in `r-senders.json` the
network, these paths read and these limits.
```json
{
"node": "ollama-node",
"workspace": [
{"step": "directory", "at": "$$root$$/$$user$$/projects/$$project$$/$$run$$"},
{"step": "files", "of": "trunk", "into": "$$workspace$$/tree"}
],
"sandbox": {
"uid": 1000, "gid": 1000, "capabilities": [], "network": true,
"own_session": true, "ends_with_node": true,
"read_only": ["/usr", "/bin", "/sbin", "/lib", "/lib64", "/etc/resolv.conf", "/etc/hosts",
"/etc/nsswitch.conf", "/etc/ssl", "/etc/pki"],
"read_write": ["$$workspace$$"],
"homes": [],
"files": [{"at": "/etc/passwd", "text": "$$user$$:x:1000:1000::$$workspace$$:/bin/sh\n"}],
"proc": "/proc", "dev": "/dev", "tmp": "/tmp"
},
"limits": {"wall": "1h", "processes": 4096},
"process": {
"user": "builder",
"command": ["nice", "crystal", "run", "ci.cr"],
"cwd": "$$tree$$",
"env": {"HOME": "$$workspace$$", "USER": "$$user$$", "PATH": "/usr/local/bin:/usr/bin:/bin"},
"keep": {"stdout_when": "always"},
"verdict": true
}
}
```