c0re: chmod 0666 mcp.sock after bind so in-container agent user can connect (#658 fixup)

This commit is contained in:
müde 2026-05-30 23:15:16 +02:00
commit 8571e3243a
2 changed files with 14 additions and 0 deletions

View file

@ -23,6 +23,11 @@ pub fn start(coord: Arc<Coordinator>) -> Result<()> {
}
let listener = UnixListener::bind(&socket)
.with_context(|| format!("bind manager socket {}", socket.display()))?;
// 0666 so the in-container hm1nd user (post-#658) can connect;
// the bind source dir is manager-only on host. See agent_server.rs.
use std::os::unix::fs::PermissionsExt as _;
std::fs::set_permissions(&socket, std::fs::Permissions::from_mode(0o666))
.with_context(|| format!("chmod manager socket {}", socket.display()))?;
tracing::info!(socket = %socket.display(), "manager socket listening");
tokio::spawn(async move {