惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

H
Help Net Security
T
ThreatConnect
SecWiki News
SecWiki News
F
Future of Privacy Forum
AWS News Blog
AWS News Blog
C
Cisco Blogs
A
Arctic Wolf
Vercel News
Vercel News
The GitHub Blog
The GitHub Blog
Scott Helme
Scott Helme
V
V2EX
博客园 - 叶小钗
阮一峰的网络日志
阮一峰的网络日志
K
Kaspersky official blog
G
Google Developers Blog
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
P
Privacy International News Feed
C
Cyber Attacks, Cyber Crime and Cyber Security
N
News | PayPal Newsroom
Schneier on Security
Schneier on Security
NISL@THU
NISL@THU
Microsoft Azure Blog
Microsoft Azure Blog
量子位
The Hacker News
The Hacker News
Stack Overflow Blog
Stack Overflow Blog
Security Latest
Security Latest
M
Microsoft Research Blog - Microsoft Research
Google Online Security Blog
Google Online Security Blog
博客园_首页
C
CXSECURITY Database RSS Feed - CXSecurity.com
I
InfoQ
Google DeepMind News
Google DeepMind News
Y
Y Combinator Blog
The Cloudflare Blog
Microsoft Security Blog
Microsoft Security Blog
Martin Fowler
Martin Fowler
Cisco Talos Blog
Cisco Talos Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
T
Troy Hunt's Blog
F
Fox-IT International blog
S
Security @ Cisco Blogs
博客园 - 司徒正美
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
C
Comments on: Blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
L
LINUX DO - 最新话题
GbyAI
GbyAI
Project Zero
Project Zero
腾讯CDC
T
Tailwind CSS Blog

Recent Commits to openclaw:main

fix(cron): accept opaque session target keys · openclaw/openclaw@c9364f0 fix: honor skill source install aliases (#84842) fix(test): avoid message tool bundled channel loads · openclaw/openclaw@6421808 chore: bump OpenClaw to 2026.5.26 fix: stabilize discord voice receive recovery · openclaw/openclaw@321f06a perf: reduce session and auth cache hotpath work (#86678) · openclaw/openclaw@ee51169 fix(qa): stream gateway gauntlet prebuild output fix(cli): route plugin packaging recovery hints · openclaw/openclaw@56633e4 perf(agents): reuse model manifest context · openclaw/openclaw@ea2496b fix(diagnostics): expose missing telemetry signals (#86682) · openclaw/openclaw@ef8619d perf: avoid extra session snapshot cloning · openclaw/openclaw@71e9eaa fix: avoid compaction checkpoint transcript copies (#86666) · openclaw/openclaw@c59635a fix: preserve code mode failure output test: avoid message tool discovery in send helper · openclaw/openclaw@1514cc8 fix(scripts): bound guard inventory file reads · openclaw/openclaw@6defcb0 fix(test): isolate kitchen sink rpc home env feat(signal): support reaction approvals (#85894) fix(scripts): bound source scan file reads · openclaw/openclaw@57748a6 test(ollama): support cloud api live smoke · openclaw/openclaw@2a6b4ed test: serialize agents tools vitest files · openclaw/openclaw@978a2d0 fix(auto-reply): use context-aware overflow reserve hints (#84399) · openclaw/openclaw@3a4f2b1 feat(gateway): forward OpenAI sampling params (#84094) · openclaw/openclaw@6c7b3f3 perf: cache model cost indexes · openclaw/openclaw@068924e fix: hide unsupported best effort message option · openclaw/openclaw@5dc7043 refactor: reuse realtime output activity in google meet (#86665) fix(test): harden bundled plugin install sweep · openclaw/openclaw@84929e4 fix: prefer source public artifacts in source checkouts · openclaw/openclaw@c87957d test: type child process spawn mock · openclaw/openclaw@65a2105 test(installer): cover rocky cli installs · openclaw/openclaw@fe33747 docs: update changelog for landed fixes · openclaw/openclaw@da831e2 fix: dampen repeated device-required probes · openclaw/openclaw@399c692 fix(ui): keep local file markdown links inert · openclaw/openclaw@fc2d2d5 fix(update): avoid duplicate plugin smoke failures · openclaw/openclaw@342bde2 fix(gateway): cap retained compaction checkpoint bytes · openclaw/openclaw@d7361ef fix: stabilize tests and reduce plugin memory churn · openclaw/openclaw@c1a026a perf: reduce runtime metadata hotpath churn · openclaw/openclaw@1d21224 refactor: share realtime output activity tracking (#86661) fix(memory-wiki): bound compile page reads (#86660) · openclaw/openclaw@acbdb8c test(qa-matrix): use larger media coverage jpeg fix(cli): reject unknown command help roots (#81083) (thanks @YB0y) · openclaw/openclaw@bec7d56 test: improve test profiling helpers · openclaw/openclaw@68ab48b perf: reduce fuzzy matching allocations · openclaw/openclaw@ec7ad3b perf: reduce runtime cache churn · openclaw/openclaw@1531fe2 refactor: reuse forced consult coordinator in discord voice (#86656) · openclaw/openclaw@0164fd5 fix(scripts): drain codex-cli metadata stdout (#84239) (thanks @Iftek… fix(test): avoid discord voice tts activation tax · openclaw/openclaw@75ac0b5 fix(codex): disable native thread personality (#85891) (thanks @lastg… · openclaw/openclaw@0f35ec2 Refactor realtime voice turn context tracking (#86650) fix(discord): surface silent reply-delivery skips and remove runtime.… · openclaw/openclaw@3a48366 test(discord): cover deliver-lambda abort-skip path via processDiscor… · openclaw/openclaw@48adcb1 docs: update changelog for landed bug fixes · openclaw/openclaw@75c6cf2 test(qa-matrix): use valid media coverage jpeg · openclaw/openclaw@0f54221 fix(gmail-watcher): strip listeners from old process after settleProc… · openclaw/openclaw@0a38932 fix(gmail-watcher): prevent TDZ in settleProcess and guard exit handl… · openclaw/openclaw@94968c8 fix(hooks): stop existing Gmail watcher before re-entry to prevent leaks fix(codex): honor yolo app-server approval policy · openclaw/openclaw@7b30291 fix(usage-cost): invalidate durable cache on missing-cost semantics c… · openclaw/openclaw@9c79a0f fix(usage-cost): preserve transport-recorded positive cost for unpric… · openclaw/openclaw@6e85869 fix(usage-cost): only flag catalog-default zeros, preserve operator-c… · openclaw/openclaw@1670249 fix: treat zero-rate usage cost as unknown · openclaw/openclaw@116c600 fix(usage-cost): surface unpriced-model spend as missingCostEntries i… · openclaw/openclaw@1cc0a96 fix(irc): normalize channel route ids · openclaw/openclaw@9cb1e47 test(irc): cover transient channel join · openclaw/openclaw@c4c80ce fix(irc): store inbound channel routes as channel:#name and join befo… · openclaw/openclaw@63dee51 fix(test): harden macos onboarding e2e · openclaw/openclaw@cd96542 fix(agents): strip markdown code spans from IDENTITY.md values and la… · openclaw/openclaw@55c9a6b perf: reduce runtime cache churn · openclaw/openclaw@5b6d03e fix(pi-runner): flush blocks after compaction retry (#85288) (thanks … · openclaw/openclaw@0d4575a fix(gateway): abort stale agent runs on restart · openclaw/openclaw@a122d80 fix(ui): harden control e2e browser setup · openclaw/openclaw@4424daf fix(telegram): keep overlapping DM replies deliverable (#85361) (than… · openclaw/openclaw@0f67dfd fix(openai): route compaction through Codex auth provider (#86408) · openclaw/openclaw@f4cfa01 refactor: share realtime forced consult coordination · openclaw/openclaw@5dccba7 test(qa-lab): add runtime confidence reports build: refresh dependency pins (#86628) · openclaw/openclaw@cda7c30 test: port release validation stabilizers · openclaw/openclaw@9f7485e fix(cron): stop forcing message tool for delivery · openclaw/openclaw@c51fa0d fix(google): omit request config with cached content test: stabilize release validation test harnesses fix(test): bound kitchen sink command output · openclaw/openclaw@f1197ed fix(discord): stabilize realtime wake-name feedback test(config): guard legacy agentRuntime regression perf: precompute audio resample kernels fix(codex): allow env api-key app-server bootstrap · openclaw/openclaw@009b18c refactor: reuse shared coercion helpers (#86419) · openclaw/openclaw@77d9ac3 fix(cron): preserve runtime snapshot for isolated delivery · openclaw/openclaw@a98660e fix(test): model active assistant failover attempts · openclaw/openclaw@c55bee5 docs: update changelog for bug sweep landings test: fix mock signatures for tsgo · openclaw/openclaw@aa05c5c docs: document fail-closed behavior for rejected modelPatterns · openclaw/openclaw@36f269d fix(security): guard plugin modelPatterns with compileSafeRegex · openclaw/openclaw@117e082 docs(manifest): note safe-regex validation for modelPatterns · openclaw/openclaw@e7c7ee4 style: use bracket notation for __openclaw to satisfy no-underscore-d… · openclaw/openclaw@9a6c161 fix(security): escape field names in transcript regex extraction · openclaw/openclaw@fe8d99d test: tighten oversized metadata assertion to check exact id in __ope… · openclaw/openclaw@aff8e64 fix(logging): exit on stdout/stderr EPIPE instead of spinning · openclaw/openclaw@2aa5f17 fix(logging): preserve failure exit on EPIPE · openclaw/openclaw@623a60a fix(logging): keep string failure codes on EPIPE · openclaw/openclaw@78a1e7d fix(scripts): docs-spellcheck.sh fails on bash 3.2 with set -u · openclaw/openclaw@fef57f9 fix(docs): keep spellcheck bash 3.2-compatible · openclaw/openclaw@778fa87
test(onboard): guard docker e2e resources · openclaw/openclaw@80aa6d7
vincentkoc · 2026-05-26 · via Recent Commits to openclaw:main
Original file line numberDiff line numberDiff line change

@@ -5,12 +5,43 @@ ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"

55

source "$ROOT_DIR/scripts/lib/docker-e2e-image.sh"

66

IMAGE_NAME="$(docker_e2e_resolve_image "openclaw-onboard-e2e" OPENCLAW_ONBOARD_E2E_IMAGE)"

77

OPENCLAW_TEST_STATE_FUNCTION_B64="$(docker_e2e_test_state_function_b64)"

8+

MAX_MEMORY_MIB="${OPENCLAW_ONBOARD_MAX_MEMORY_MIB:-2048}"

9+

MAX_CPU_PERCENT="${OPENCLAW_ONBOARD_MAX_CPU_PERCENT:-1200}"

10+

CONTAINER_NAME="openclaw-onboard-e2e-$$"

11+

RUN_LOG="$(mktemp "${TMPDIR:-/tmp}/openclaw-onboard.XXXXXX")"

12+

STATS_LOG="$(mktemp "${TMPDIR:-/tmp}/openclaw-onboard-stats.XXXXXX")"

13+
14+

cleanup() {

15+

docker rm -f "$CONTAINER_NAME" >/dev/null 2>&1 || true

16+

}

17+

trap cleanup EXIT

818
919

docker_e2e_build_or_reuse "$IMAGE_NAME" onboard

1020
1121

echo "Running onboarding E2E..."

12-

docker_e2e_run_with_harness -t \

22+

docker rm -f "$CONTAINER_NAME" >/dev/null 2>&1 || true

23+

docker_e2e_harness_mount_args

24+

docker run --name "$CONTAINER_NAME" "${DOCKER_E2E_HARNESS_ARGS[@]}" -t \

1325

-e "OPENCLAW_TEST_STATE_FUNCTION_B64=$OPENCLAW_TEST_STATE_FUNCTION_B64" \

14-

"$IMAGE_NAME" bash scripts/e2e/lib/onboard/scenario.sh

26+

"$IMAGE_NAME" bash scripts/e2e/lib/onboard/scenario.sh >"$RUN_LOG" 2>&1 &

27+

docker_pid="$!"

28+
29+

while kill -0 "$docker_pid" 2>/dev/null; do

30+

if docker inspect "$CONTAINER_NAME" >/dev/null 2>&1; then

31+

docker stats --no-stream --format '{{json .}}' "$CONTAINER_NAME" >>"$STATS_LOG" 2>/dev/null || true

32+

fi

33+

sleep 2

34+

done

35+
36+

set +e

37+

wait "$docker_pid"

38+

run_status="$?"

39+

set -e

40+
41+

cat "$RUN_LOG"

42+
43+

node scripts/e2e/lib/docker-stats/assert-resource-ceiling.mjs "$STATS_LOG" "$MAX_MEMORY_MIB" "$MAX_CPU_PERCENT" onboard

1544
45+

rm -f "$RUN_LOG" "$STATS_LOG"

1646

echo "E2E complete."

47+

exit "$run_status"

Original file line numberDiff line numberDiff line change

@@ -18,6 +18,7 @@ const OPENAI_WEB_SEARCH_MINIMAL_SCENARIO_PATH =

1818

const OPENAI_WEB_SEARCH_MINIMAL_CLIENT_PATH =

1919

"scripts/e2e/lib/openai-web-search-minimal/client.mjs";

2020

const OPENWEBUI_DOCKER_E2E_PATH = "scripts/e2e/openwebui-docker.sh";

21+

const ONBOARD_DOCKER_E2E_PATH = "scripts/e2e/onboard-docker.sh";

2122

const PLUGIN_BINDING_COMMAND_ESCAPE_DOCKER_E2E_PATH =

2223

"scripts/e2e/plugin-binding-command-escape-docker.sh";

2324

const PLUGIN_BINDING_COMMAND_ESCAPE_DOCKERFILE_PATH =

@@ -114,6 +115,17 @@ describe("docker build helper", () => {

114115

expect(dockerfile).toContain("procps");

115116

});

116117
118+

it("keeps onboarding Docker E2E resource-guarded", () => {

119+

const runner = readFileSync(ONBOARD_DOCKER_E2E_PATH, "utf8");

120+
121+

expect(runner).toContain("OPENCLAW_ONBOARD_MAX_MEMORY_MIB");

122+

expect(runner).toContain("OPENCLAW_ONBOARD_MAX_CPU_PERCENT");

123+

expect(runner).toContain("--name \"$CONTAINER_NAME\"");

124+

expect(runner).toContain("docker stats --no-stream");

125+

expect(runner).toContain("assert-resource-ceiling.mjs");

126+

expect(runner).not.toContain("docker_e2e_run_with_harness -t");

127+

});

128+
117129

it("copies root lifecycle scripts before cleanup-smoke installs dependencies", () => {

118130

const dockerfile = readFileSync(CLEANUP_SMOKE_DOCKERFILE_PATH, "utf8");

119131

const installIndex = dockerfile.indexOf("pnpm install --frozen-lockfile");