feat(fnos): run entirely without root and harden process lifecycle

mirror of https://github.com/langbot-app/LangBot.git synced 2026-09-23 01:46:37 +08:00

- Switch privilege model to run-as: package (zero root, per fnOS guide)
- Borrow App Store python312 instead of bundling CPython; keep bundled uv
- Move venv, HOME and caches onto the persistent data share
- Start service via setsid; stop/upgrade kill the whole process group
- Sweep stray runtime/box orphans in install/upgrade init hooks
- Track LangBot 4.10.11 (manifest baseline + upstream merge)

This commit is contained in:

“sheetung”

2026-09-18 16:03:42 +08:00

parent 79b4fe2004

commit 34f1e3d56f

10 changed files with 238 additions and 128 deletions

packaging/fnos/config/privilege

+1 -1

View File

@@ -1,5 +1,5 @@
 {
     "defaults": {
         "run-as": "root"
         "run-as": "package"
     }
 }