From c6ff858f236196fd9a88928e3fbaaa62776dd188 Mon Sep 17 00:00:00 2001 From: sergio Date: Thu, 16 Jul 2026 15:22:39 -0400 Subject: [PATCH] harkaq: cpp/getent en las sondas del provisioning (coherente con base.policy) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Faltaba persistir en harkaq-farm-setup.sh las 2 sondas que añadí a base.policy al revisar needs-review (cpp=frontend gcc, getent=NSS musl). Sin esto, un worker nuevo derivaría una base.policy sin ellas y volvería a marcar irreducibles falsos (dhcpcd/strace). Co-Authored-By: Claude Opus 4.8 --- scripts/harkaq/harkaq-farm-setup.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/harkaq/harkaq-farm-setup.sh b/scripts/harkaq/harkaq-farm-setup.sh index 993eedce..b3ccdccc 100755 --- a/scripts/harkaq/harkaq-farm-setup.sh +++ b/scripts/harkaq/harkaq-farm-setup.sh @@ -51,7 +51,7 @@ $SSH "root@$IP" "cd $REMOTE && printf 'ro /usr/lib/os-release\n' >> /root/.cache/harkaq/base.policy # Sondas de compilador de Alpine: se DENIEGAN y se clasifican (D3). Concederlas dejaría a # zig/configure usar el gcc de Alpine por detrás — justo lo que la campaña matar-gcc caza. - for p in /usr/bin/gcc /usr/bin/ldd /usr/bin/c89 /usr/bin/c99; do + for p in /usr/bin/gcc /usr/bin/ldd /usr/bin/c89 /usr/bin/c99 /usr/bin/cpp /usr/bin/getent; do printf '# expect %s\n' \"\$p\" >> /root/.cache/harkaq/base.policy done echo \" runtime base: \$(grep -c '^ro ' /root/.cache/harkaq/base.policy) reglas + \$(grep -c '^# expect' /root/.cache/harkaq/base.policy) esperadas\""