Rongsong Shen
b673b7c933
Previously worked around (task 6.2) by removing the one host-attrs resource (cpuf) from the default set - a custom resource=value arg using any host-attrs name would still false-mismatch at the controller layer, since inject_resources() disconnected the worker before the separate controller- check session ran, and the controller resets host-attrs resources on disconnect. Real fix: xce_test's `!<shell-command>` escape is handled in the single top-level REPL loop before context-specific dispatch, so it works in any context - including worker mode - without calling leave_ctx()/disconnecting. inject_resources() now shells out via `!` to run the controller check in-line, between resupdate and quit, while the worker's connection is still open. query_controller_resvals()'s comparison logic is unchanged - this is a pure sequencing fix. cpuf restored to DEFAULT_RESOURCE_ARGS as live proof. Live-verified: cpuf now MATCHes at the controller layer (was always a false MISMATCH before); adversarial shell-injection attempt via a malicious resource name confirmed safe (printf %q quoting); SIGTERM delivered exactly during the nested check confirmed zero orphaned/zombie processes across 4 independent runs. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| settings | ||
| specs | ||
| steering | ||