In containerized or multi-user VMs, the agent-system submodule directory
may be owned by a different user (e.g., root) than the invoking process.
When the global git config is read-only or lacks a safe.directory entry
for the submodule, git commands fail with 'detected dubious ownership'.

This breaks validate.sh (the VM gate) and causes bootstrap.sh to skip the
shared system install even when the submodule is at the exact clean pin.

Fix by injecting safe.directory via GIT_CONFIG_COUNT environment variables
at the top of validate.sh and bootstrap.sh. This propagates to all child
processes, including the shared-system submodule validation, without
needing to write to any git config file.

Tests updated:
- Verify submodule git commands use explicit -c safe.directory
- Prove commands fail without it when GIT_CONFIG_GLOBAL is /dev/null
- Preserve original gitconfig path in test environments where HOME is
  overridden to a temp directory

CHANGELOG.md updated.

hermes added 1 commit

2026-08-26 10:46:19 +00:00

fix: safely export git safe-directory configuration

VM agent setup / validate (push) Has been cancelled

Details

VM agent setup / validate (pull_request) Has been cancelled

Details

759afb742d

hermes merged commit 349be6f9bc into main

2026-08-26 10:47:09 +00:00

hermes referenced this pull request from a commit

2026-08-26 10:47:10 +00:00