Repository navigation
App Store: libraries and tools, installed once and switched on per user - #145
Closed
vickeykumar wants to merge 1 commit into
Closed
vickeykumar wants to merge 1 commit into
vickeykumar wants to merge 1 commit into
Conversation
…hed on per signed-in user Apps are conda-forge bundles in a shared store (/store/apps), made once by the server (micromamba, outside any terminal's sandbox); each user's list (manifest) says which ones their terminal may read and run, and the Landlock helper allows exactly those folders. Requests and failure reports go to an admin queue; every node (gateway and workers) replays the catalog at start and by polling. Page: Apps dialog, My apps, hints from the terminal's own error; Genie action store_suggest; admin App Store view; apt list for all users. Design: LLD 18 and the canvas 'App Store: all screens and actions'. Not built: object-store tarballs, Node libraries, languages and plugins. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Owner
Author
|
Moved to development: the App Store commit (1188104) is on development and in PR 144. No new branches without asking. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Libraries and tools (conda-forge) are installed once into a shared store on each server and switched on per signed-in user. The terminal's Landlock sandbox is given exactly the bundles on the user's list, so an app that is off for a user cannot be read or run.
/store/pkgs(cache),/store/apps/<name>-<ver>(a complete conda prefix, made once),/store/envs/<home>/manifest.json+env.sh.landlock-helper --store-dirreads the manifest before it restricts itself; a bad entry stops the terminal. Checked by hand with the real helper on Landlock./store/sync(worker token) every minute.store_suggest.Tests: appstore, server, landlock Go tests; widget and page script tests; browser tests (the signed-in screens run against stand-in answers, a browser test cannot sign in). The browser suite on the Mac test container had 7 failures that are Mac/container-only (Cmd symbol, REPLs that need /tmp, load flakes); CI decides.
🤖 Generated with Claude Code