@cortex-context/cli 0.0.9 → 0.0.10

package/dist/index.js

@@ -18220,6 +18220,67 @@ function tryFixLxcSysctl() {
     return { applied: false };
   }
 }
+function tryConfigureCrunRuntime() {
+  const result = {
+    attempted: false,
+    crunInstalled: false,
+    daemonUpdated: false,
+    dockerRestarted: false
+  };
+  if ((0, import_os3.platform)() !== "linux") return result;
+  result.attempted = true;
+  const hasCrun = (() => {
+    try {
+      (0, import_child_process.execSync)("which crun", { stdio: "ignore" });
+      return true;
+    } catch {
+      return false;
+    }
+  })();
+  if (hasCrun) {
+    result.crunInstalled = true;
+  } else {
+    try {
+      (0, import_child_process.execSync)("apt-get install -y crun", { stdio: "ignore" });
+      result.crunInstalled = true;
+    } catch (e) {
+      result.error = `crun install: ${e instanceof Error ? e.message : String(e)}`;
+      return result;
+    }
+  }
+  const daemonPath = "/etc/docker/daemon.json";
+  let cfg = {};
+  try {
+    if ((0, import_fs5.existsSync)(daemonPath)) {
+      cfg = JSON.parse((0, import_fs5.readFileSync)(daemonPath, "utf-8"));
+    }
+  } catch {
+    cfg = {};
+  }
+  if (cfg["default-runtime"] === "crun") {
+    result.daemonUpdated = true;
+    result.dockerRestarted = true;
+    return result;
+  }
+  const runtimes = cfg["runtimes"] ?? {};
+  runtimes["crun"] = { path: "/usr/bin/crun" };
+  cfg["runtimes"] = runtimes;
+  cfg["default-runtime"] = "crun";
+  try {
+    (0, import_fs5.writeFileSync)(daemonPath, JSON.stringify(cfg, null, 2) + "\n", "utf-8");
+    result.daemonUpdated = true;
+  } catch (e) {
+    result.error = `daemon.json: ${e instanceof Error ? e.message : String(e)}`;
+    return result;
+  }
+  try {
+    (0, import_child_process.execSync)("systemctl restart docker", { stdio: "ignore" });
+    result.dockerRestarted = true;
+  } catch (e) {
+    result.error = `docker restart: ${e instanceof Error ? e.message : String(e)}`;
+  }
+  return result;
+}
 async function deployLocalStack(workspacePath, opts = {}) {
   const templatePath = (0, import_path5.join)(
     __dirname,
@@ -28181,6 +28242,20 @@ async function serverCommand(options) {
       )
     );
   }
+  const crunSetup = tryConfigureCrunRuntime();
+  if (crunSetup.attempted) {
+    if (crunSetup.dockerRestarted) {
+      console.log(
+        source_default.dim(
+          "  (configured crun as Docker runtime for LXC compatibility \u2014 daemon restarted)"
+        )
+      );
+    } else if (crunSetup.error) {
+      console.log(
+        source_default.dim(`  (crun setup skipped: ${crunSetup.error})`)
+      );
+    }
+  }
   const startSpinner = ora("  Running docker compose up -d...").start();
   const startResult = await deployLocalStack(workDir, {
     embeddings: options.embeddings ?? false
@@ -28195,33 +28270,34 @@ async function serverCommand(options) {
       console.log("");
       console.log(
         source_default.dim(
-          "  runc >= 1.1 tries to configure net.ipv4.ip_unprivileged_port_start"
+          "  runc >= 1.1 writes net.ipv4.ip_unprivileged_port_start in each new"
         )
       );
       console.log(
         source_default.dim(
-          "  inside each container's network namespace. Proxmox LXC containers"
+          "  Docker network namespace. Unprivileged Proxmox LXC blocks this write."
         )
       );
+      console.log("");
       console.log(
         source_default.dim(
-          "  block this unless the sysctl is explicitly allowed in the LXC config."
+          "  Attempted automatic fix (crun) \u2014 but it was not enough."
         )
       );
-      console.log("");
-      console.log(source_default.bold("  Fix (run on the Proxmox host):"));
-      console.log("");
-      console.log(source_default.cyan("    CTID=<your-container-id>"));
       console.log(
-        source_default.cyan(
-          '    echo "lxc.sysctl.net.ipv4.ip_unprivileged_port_start = 0" \\'
+        source_default.dim(
+          "  Manual fix: install crun and configure Docker daemon on this LXC:"
         )
       );
-      console.log(source_default.cyan("      >> /etc/pve/lxc/${CTID}.conf"));
-      console.log(source_default.cyan("    pct restart ${CTID}"));
+      console.log("");
+      console.log(source_default.cyan("    apt-get install -y crun"));
+      console.log(source_default.cyan("    cat > /etc/docker/daemon.json << 'EOF'"));
+      console.log(source_default.cyan('    {"default-runtime":"crun","runtimes":{"crun":{"path":"/usr/bin/crun"}}}'));
+      console.log(source_default.cyan("    EOF"));
+      console.log(source_default.cyan("    systemctl restart docker"));
       console.log("");
       console.log(
-        source_default.dim("  Then run  cortex-context server  again inside the LXC.")
+        source_default.dim("  Then run  cortex-context server  again.")
       );
     } else {
       console.log(source_default.dim(`  ${startResult.error}`));
@@ -28412,8 +28488,8 @@ async function uninstallCommand(options) {
   if (!options.keepHook && hasHook) {
     const hookPath = (0, import_path14.join)(workspacePath, ".git", "hooks", "post-commit");
     try {
-      const { readFileSync: readFileSync7 } = await import("fs");
-      const hookContent = readFileSync7(hookPath, "utf-8");
+      const { readFileSync: readFileSync8 } = await import("fs");
+      const hookContent = readFileSync8(hookPath, "utf-8");
       if (hookContent.includes("cortex-context")) {
         (0, import_fs13.unlinkSync)(hookPath);
         console.log(source_default.green("  \u2713 .git/hooks/post-commit \u2014 removed"));