Fix nixos-rebuild result symlink by passing explicit -o flag

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/52242cb6-8038-446d-bafb-9fe6666b31b9

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-04-09 03:43:45 +00:00
committed by GitHub
parent d77dde4020
commit 2bf9c6657b

View File

@@ -3091,14 +3091,14 @@ async def api_security_verify_integrity():
# Use a temp directory so the ./result symlink doesn't pollute anything # Use a temp directory so the ./result symlink doesn't pollute anything
tmpdir = tempfile.mkdtemp(prefix="sovran-verify-") tmpdir = tempfile.mkdtemp(prefix="sovran-verify-")
try: try:
result_link = os.path.join(tmpdir, "result")
result = subprocess.run( result = subprocess.run(
["/run/current-system/sw/bin/nixos-rebuild", "build", "--flake", "/etc/nixos", ["/run/current-system/sw/bin/nixos-rebuild", "build", "--flake", "/etc/nixos",
"--no-build-output"], "--no-build-output", "-o", result_link],
capture_output=True, text=True, timeout=600, capture_output=True, text=True, timeout=600,
cwd=tmpdir, cwd=tmpdir,
) )
if result.returncode == 0: if result.returncode == 0:
result_link = os.path.join(tmpdir, "result")
if os.path.islink(result_link): if os.path.islink(result_link):
expected_system_path = os.path.realpath(result_link) expected_system_path = os.path.realpath(result_link)
system_matches = (current_system_path == expected_system_path) system_matches = (current_system_path == expected_system_path)