CyberMind-FR 1001d24180 fix(#494): stop ALL units chowning the shared /run/secubox parent (systemic) ... /run/secubox parent to a module user, clobbering the canonical tmpfiles rule (1777 root root) and 502'ing cross-user socket traversal: - secubox-hub.service ExecStartPre (the active cascading culprit — fired on every (re)start, right after secubox-runtime re-applied 1777 root root) - secubox-eye-remote / metrics / metablogizer postinsts (chown parent) - secubox-eye-square postinst (chowned BOTH /run/secubox AND /var/log/secubox to secubox-eye-square — worst, #511 class) - secubox-p2p postinst (chown parent + /var/log/secubox) All now keep only mkdir as a fallback; the 1777 sticky parent lets each daemon create its own socket, and module logs go to own subdirs (eye-square/p2p) instead of owning the shared /var/log/secubox. Parent lifecycle is owned solely by tmpfiles.d + secubox-runtime.service. Bumped: hub 1.4.4, eye-remote 1.0.1, eye-square 1.0.4, metablogizer 1.2.2, metrics 1.0.4, p2p 1.7.1 (core 1.1.7 in prior commit). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> (cherry picked from commit 68d98bf1eb)		2026-06-24 09:59:11 +02:00
..
debian	fix(#494): stop ALL units chowning the shared /run/secubox parent (systemic)	2026-06-24 09:59:11 +02:00
helper
kiosk
.gitignore