@cortex-context/cli 0.0.7 → 0.0.8

package/dist/index.js

@@ -18210,6 +18210,16 @@ var import_child_process = require("child_process");
 var import_fs5 = require("fs");
 var import_path5 = require("path");
 var import_os3 = require("os");
+function tryFixLxcSysctl() {
+  try {
+    (0, import_child_process.execSync)("sysctl -w net.ipv4.ip_unprivileged_port_start=0", {
+      stdio: "ignore"
+    });
+    return { applied: true };
+  } catch {
+    return { applied: false };
+  }
+}
 async function deployLocalStack(workspacePath) {
   const templatePath = (0, import_path5.join)(
     __dirname,
@@ -18234,9 +18244,12 @@ async function deployLocalStack(workspacePath) {
     );
     return { started: true };
   } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    const isLxcSysctlError = msg.includes("ip_unprivileged_port_start") || msg.includes("sysctl");
     return {
       started: false,
-      error: `docker compose failed: ${err instanceof Error ? err.message : String(err)}`
+      isLxcSysctlError,
+      error: `docker compose failed: ${msg}`
     };
   }
 }
@@ -28146,12 +28159,33 @@ async function serverCommand(options) {
   }
   console.log("");
   console.log(source_default.bold("  Step 3: Starting Cortex stack"));
+  const sysctlFix = tryFixLxcSysctl();
+  if (sysctlFix.applied) {
+    console.log(source_default.dim("  (applied net.ipv4.ip_unprivileged_port_start=0 for LXC compatibility)"));
+  }
   const startSpinner = ora("  Running docker compose up -d...").start();
   const startResult = await deployLocalStack(workDir);
   if (!startResult.started) {
-    startSpinner.fail(
-      source_default.red(`  \u2717 Docker Compose failed: ${startResult.error}`)
-    );
+    startSpinner.fail(source_default.red("  \u2717 Docker Compose failed"));
+    if (startResult.isLxcSysctlError) {
+      console.log("");
+      console.log(source_default.bold.yellow("  \u26A0  Proxmox LXC sysctl restriction detected"));
+      console.log("");
+      console.log(source_default.dim("  runc >= 1.1 tries to configure net.ipv4.ip_unprivileged_port_start"));
+      console.log(source_default.dim("  inside each container's network namespace. Proxmox LXC containers"));
+      console.log(source_default.dim("  block this unless the sysctl is explicitly allowed in the LXC config."));
+      console.log("");
+      console.log(source_default.bold("  Fix (run on the Proxmox host):"));
+      console.log("");
+      console.log(source_default.cyan("    CTID=<your-container-id>"));
+      console.log(source_default.cyan('    echo "lxc.sysctl.net.ipv4.ip_unprivileged_port_start = 0" \\'));
+      console.log(source_default.cyan("      >> /etc/pve/lxc/${CTID}.conf"));
+      console.log(source_default.cyan("    pct restart ${CTID}"));
+      console.log("");
+      console.log(source_default.dim("  Then run  cortex-context server  again inside the LXC."));
+    } else {
+      console.log(source_default.dim(`  ${startResult.error}`));
+    }
     process.exit(1);
   }
   startSpinner.succeed(source_default.green("  \u2713 Containers started"));