mirror of
https://github.com/Rain-kl/OpenFlare.git
synced 2026-09-30 22:26:38 +08:00
ryan
2f60329886
代码质量全量清理，零行为变化：golangci 扩展集 13 类 linter（gosec/modernize/perfsprint/canonicalheader/usestdlibvars/wastedassign/intrange/errorlint/forcetypeassert/recvcheck/exhaustive/unparam）全量修复，测试代码质量（testifylint/thelper/usetesting）25→0，frpc 进程生命周期真 bug（进程组击杀）、全仓 go test -race 6 类数据竞争（含 1 个生产竞争）、SPDX license 头补齐 131 文件、前端测试套件 next-intl 迁移后 44 失败→全绿、过期 swagger 文档重新生成、pnpm-workspace 构建审批。 Experiments: #2-#17, #18, #20, #21, #23 Metric: total_issues 108 → 8 (-92.6%)
33 lines
1.1 KiB
Go
33 lines
1.1 KiB
Go
// Copyright 2026 Arctel.net
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package nginx
|
|
|
|
import (
|
|
"github.com/Rain-kl/Wavelet/internal/apps/agent/runtimeuser"
|
|
)
|
|
|
|
// OpenFlareRuntimeUser is the shared OS account for the agent process and
|
|
// OpenResty worker processes.
|
|
const OpenFlareRuntimeUser = runtimeuser.Name
|
|
|
|
// OpenRestyWorkerUser is an alias kept for internal call sites.
|
|
const OpenRestyWorkerUser = runtimeuser.Name
|
|
|
|
// EnsureWorldTraversablePath makes targetDir and its ancestors world-traversable.
|
|
func EnsureWorldTraversablePath(targetDir string) error {
|
|
return runtimeuser.EnsurePathOwnership(targetDir, nginxDirPerm, nginxConfigFilePerm)
|
|
}
|
|
|
|
// EnsureWorkerReadableTree normalizes ownership and modes under root for the
|
|
// shared runtime user.
|
|
func EnsureWorkerReadableTree(rootDir string) error {
|
|
return runtimeuser.EnsurePathOwnership(rootDir, nginxDirPerm, nginxConfigFilePerm)
|
|
}
|
|
|
|
// EnsureWorkerReadAccess makes agent-managed runtime paths accessible to the
|
|
// shared runtime user.
|
|
func (m *Manager) EnsureWorkerReadAccess() error {
|
|
return m.ensureOpenRestyWorkerReadAccess()
|
|
}
|