mirror of
https://github.com/jhd3197/ServerKit.git
synced 2026-11-09 13:35:12 +09:00
Juan DenisandClaude Opus 5
3fb4242736
privileged_cmd prepended a bare `sudo`. Nothing here runs attached to a terminal and run_privileged captures output, so on a non-root host a password prompt is both invisible and unanswerable — sudo blocks forever and takes its caller with it. This hung backend startup outright: the metadata guard's `iptables -C DOCKER-USER` probe sat unanswered and the server never bound its port. Emit `sudo -n` so the call fails immediately with a non-zero exit, which every caller already handles. Production runs as root (_needs_sudo() is false) which is why this stayed hidden, but any non-root install without passwordless sudo would hang on boot. An explicitly-sudo command passed in by a caller is still forwarded untouched; the regression test pins non-interactive sudo across all four invocation shapes. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>