fix(docker): keep /app read-only and chown /config conditionally - #253

Merged

chodeus merged 8 commits into

mainfrom

fix/readonly-app-dir

Sep 1, 2026

Commits on Aug 31, 2026

fix(docker): keep /app read-only and chown /config conditionally
chodeus
committed
9d6d862
fix(docker): use octal perm masks in the assertion for portability
chodeus
committed
d179f58
fix(docker): chown -h and let compileall fail the build
chodeus
committed
e16011f
fix(docker): require world-read AND execute on directories in the assertion
chodeus
committed
d1397f4
fix(entrypoint): fail closed when /config is not writable
chodeus
committed
bdced26
fix(entrypoint): probe /config by creating a file, not test -w
chodeus
committed
71deb71
fix(docker): let a failure anywhere in the layer fail the build
chodeus
committed
cc7c4ef

Commits on Sep 1, 2026

fix(docker): correct the base-image label and set the bytecode env on the image
chodeus
committed
0003881