ci(mantis): preserve proof env for codex user · openclaw/openclaw@4a6349c
obviyus
·
2026-05-11
·
via Recent Commits to openclaw:main
| Original file line number | Diff line number | Diff line change |
|---|
@@ -346,7 +346,13 @@ jobs:
|
346 | 346 | run: | |
347 | 347 | set -euo pipefail |
348 | 348 | sudo useradd --create-home --shell /bin/bash codex |
349 | | - printf '%s\n' 'Defaults env_keep += "CODEX_HOME CODEX_INTERNAL_ORIGINATOR_OVERRIDE"' | sudo tee /etc/sudoers.d/mantis-codex-env >/dev/null |
| 349 | + { |
| 350 | + printf '%s\n' 'Defaults env_keep += "CODEX_HOME CODEX_INTERNAL_ORIGINATOR_OVERRIDE"' |
| 351 | + printf '%s\n' 'Defaults env_keep += "BASELINE_REF BASELINE_SHA CANDIDATE_REF CANDIDATE_SHA"' |
| 352 | + printf '%s\n' 'Defaults env_keep += "CRABBOX_ACCESS_CLIENT_ID CRABBOX_ACCESS_CLIENT_SECRET CRABBOX_COORDINATOR CRABBOX_COORDINATOR_TOKEN CRABBOX_LEASE_ID CRABBOX_PROVIDER"' |
| 353 | + printf '%s\n' 'Defaults env_keep += "GH_TOKEN MANTIS_INSTRUCTIONS MANTIS_OUTPUT_DIR MANTIS_PR_NUMBER"' |
| 354 | + printf '%s\n' 'Defaults env_keep += "OPENCLAW_BUILD_PRIVATE_QA OPENCLAW_ENABLE_PRIVATE_QA_CLI OPENCLAW_QA_CONVEX_SECRET_CI OPENCLAW_QA_CONVEX_SITE_URL OPENCLAW_QA_MANTIS_CRABBOX_COORDINATOR OPENCLAW_QA_MANTIS_CRABBOX_COORDINATOR_TOKEN"' |
| 355 | + } | sudo tee /etc/sudoers.d/mantis-codex-env >/dev/null |
350 | 356 | sudo chmod 0440 /etc/sudoers.d/mantis-codex-env |
351 | 357 | codex_home="/tmp/mantis-codex-home-${GITHUB_RUN_ID}" |
352 | 358 | sudo install -d -m 0770 -o codex -g codex "$codex_home" |
|
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。
