@getmonoceros/workbench 1.6.8 → 1.6.10

package/dist/bin.js

@@ -2697,6 +2697,34 @@ async function detectDockerMode(options = {}) {
     return "rootful";
   }
 }
+function formatRootlessNotSupportedError() {
+  return [
+    `Monoceros requires Docker in "rootful" mode.`,
+    ``,
+    `You're running Docker in "rootless" mode right now. That setup`,
+    `runs the daemon without root privileges \u2014 sounds safer, but it`,
+    `doesn't play well with the way Monoceros shares files between`,
+    `your host and the container. Specifically: files created inside`,
+    `the container (cloned repos, new commits, build output) end up`,
+    `with ownership that your normal host user can't edit without`,
+    `sudo. That breaks the "edit on host, run in container" loop the`,
+    `entire workflow is built around.`,
+    ``,
+    `To fix, switch back to standard rootful Docker:`,
+    ``,
+    cyan2(`  systemctl --user disable --now docker.service docker.socket`),
+    cyan2(`  dockerd-rootless-setuptool.sh uninstall`),
+    cyan2(`  rm -rf ~/.local/share/docker`),
+    cyan2(`  unset DOCKER_HOST`),
+    cyan2(`  sudo systemctl enable --now docker`),
+    cyan2(`  sudo usermod -aG docker $USER`),
+    ``,
+    `Verify with ${cyan2("docker info | grep -i rootless")} \u2014 it should`,
+    `produce no output. Then re-run.`,
+    ``,
+    `Background: see ${cyan2("docs/docker-on-linux.md")} in the workbench repo.`
+  ].join("\n");
+}
 
 // src/devcontainer/identity.ts
 import { spawn as spawn6 } from "child_process";
@@ -2852,17 +2880,22 @@ ${sectionLine(label)}
   );
   validateOptions(createOpts);
   logger.success(`yml validated ${dim(`(${prettyPath(ymlPath)})`)}`);
+  const hasRepos = (createOpts.repos ?? []).length > 0;
+  const hasContainerGitUser = parsed.config.git?.user !== void 0;
+  const hasDefaultGitUser = globalConfig?.defaults?.git?.user !== void 0;
   const idLogger = {
     info: logger.info,
     warn: logger.warn ?? logger.info
   };
-  await collectGitIdentity(targetDir, {
-    ...opts.identitySpawn ? { spawn: opts.identitySpawn } : {},
-    ...opts.identityPrompt ? { prompt: opts.identityPrompt } : {},
-    ...parsed.config.git?.user ? { containerOverride: parsed.config.git.user } : {},
-    ...globalConfig?.defaults?.git?.user ? { defaults: globalConfig.defaults.git.user } : {},
-    logger: idLogger
-  });
+  if (hasRepos || hasContainerGitUser || hasDefaultGitUser) {
+    await collectGitIdentity(targetDir, {
+      ...opts.identitySpawn ? { spawn: opts.identitySpawn } : {},
+      ...opts.identityPrompt ? { prompt: opts.identityPrompt } : {},
+      ...parsed.config.git?.user ? { containerOverride: parsed.config.git.user } : {},
+      ...globalConfig?.defaults?.git?.user ? { defaults: globalConfig.defaults.git.user } : {},
+      logger: idLogger
+    });
+  }
   const hostsToFetch = uniqueHttpsHosts(createOpts.repos ?? []);
   const unknownProviderHosts = hostsToFetch.filter((h) => h.provider === "unknown").map((h) => h.host);
   if (unknownProviderHosts.length > 0) {
@@ -2892,6 +2925,9 @@ ${sectionLine(label)}
   const dockerMode = await detectDockerMode({
     ...opts.dockerInfoSpawn ? { spawn: opts.dockerInfoSpawn } : {}
   });
+  if (dockerMode === "rootless") {
+    throw new Error(formatRootlessNotSupportedError());
+  }
   await fs8.mkdir(targetDir, { recursive: true });
   await writeScaffold(createOpts, targetDir, { dockerMode });
   await writeStateFile(
@@ -2969,7 +3005,7 @@ function warnOnDeprecatedFeatureRefs(containerFeatures, globalConfig, logger) {
 }
 
 // src/version.ts
-var CLI_VERSION = true ? "1.6.8" : "dev";
+var CLI_VERSION = true ? "1.6.10" : "dev";
 
 // src/commands/_dispatch.ts
 import { consola as consola11 } from "consola";