• v1.8.0 4b54e50a0d

    Make database chmod best-effort for rootless podman

    kyle released this 2026-04-03 16:32:52 +00:00 | 0 commits to master since this release

    os.Chmod(path, 0600) fails inside rootless podman containers because
    fchmod is denied in the user namespace. This was fatal — the database
    wouldn't open, crashing the service.

    Changed to best-effort: log nothing on failure, database functions
    correctly without the permission tightening. The file is already
    protected by the container's volume mount and the host filesystem
    permissions.

    Root cause of the 2026-04-03 incident recovery failure — MCR and
    Metacrypt couldn't start until their databases were deleted and
    recreated.

    Co-Authored-By: Claude Opus 4.6 (1M context) noreply@anthropic.com

    Downloads