runspec-linux 0.7.0__tar.gz → 0.8.0__tar.gz

{runspec_linux-0.7.0 → runspec_linux-0.8.0}/CHANGELOG.md

@@ -1,5 +1,15 @@
 # runspec-linux Changelog
 
+## [0.8.0] — 2026-08-07
+
+The Docker runnables can now run as another user. `list-containers`,
+`container-logs`, and `restart-container` gain the mutually-exclusive
+`--run-as <user>` / `--sudo` pair (+ `--become-method sudo|su`) — the same
+`exclusive`-group escalation the service/log runnables use — so they work where
+the Docker socket needs root or `docker`-group membership (`--sudo` runs docker
+as root). Requires `runspec-linux-core >= 0.5.0`.
+
+
 ## [0.7.0] — 2026-08-01
 
 Enhancements for corporate application support, devops, and performance work.

{runspec_linux-0.7.0 → runspec_linux-0.8.0}/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: runspec-linux
-Version: 0.7.0
+Version: 0.8.0
 Summary: Linux system admin runnables for runspec
 Requires-Python: >=3.10
 Requires-Dist: runspec-fs-core>=0.2.0
-Requires-Dist: runspec-linux-core>=0.4.0
+Requires-Dist: runspec-linux-core>=0.5.0
 Requires-Dist: runspec-webops-core>=0.1.0
 Requires-Dist: runspec>=0.44.0
 Provides-Extra: dev

{runspec_linux-0.7.0 → runspec_linux-0.8.0}/pyproject.toml

@@ -4,12 +4,12 @@ build-backend = "hatchling.build"
 
 [project]
 name = "runspec-linux"
-version = "0.7.0"
+version = "0.8.0"
 requires-python = ">=3.10"
 description = "Linux system admin runnables for runspec"
 dependencies = [
     "runspec>=0.44.0",
-    "runspec-linux-core>=0.4.0",
+    "runspec-linux-core>=0.5.0",
     "runspec-webops-core>=0.1.0",
     "runspec-fs-core>=0.2.0",
 ]

{runspec_linux-0.7.0 → runspec_linux-0.8.0}/runspec_linux/containers.py

@@ -5,12 +5,15 @@ import runspec as rs
 from runspec_linux_core import container_logs, list_containers, restart_container
 from runspec_linux_core.errors import CommandError
 
+from runspec_linux._escalation import resolve_escalation
+
 
 def main_list_containers() -> None:
     spec = rs.parse("list-containers")
     include_all = spec.all.value
+    run_as, method = resolve_escalation(spec)
     try:
-        print(json.dumps(list_containers(include_all)))
+        print(json.dumps(list_containers(include_all, run_as=run_as, become_method=method)))
     except Exception as e:
         # Includes ToolNotFoundError (docker absent) and CommandError (docker ps failed).
         print(json.dumps({"error": str(e)}))
@@ -21,8 +24,9 @@ def main_container_logs() -> None:
     spec = rs.parse("container-logs")
     container = spec.container.value
     lines = spec.lines.value
+    run_as, method = resolve_escalation(spec)
     try:
-        print(json.dumps(container_logs(container, lines)))
+        print(json.dumps(container_logs(container, lines, run_as=run_as, become_method=method)))
     except Exception as e:
         print(json.dumps({"error": str(e)}))
         sys.exit(1)
@@ -31,8 +35,9 @@ def main_container_logs() -> None:
 def main_restart_container() -> None:
     spec = rs.parse("restart-container")
     container = spec.container.value
+    run_as, method = resolve_escalation(spec)
     try:
-        print(json.dumps(restart_container(container)))
+        print(json.dumps(restart_container(container, run_as=run_as, become_method=method)))
     except CommandError as e:
         print(json.dumps({"container": container, "restarted": False, "error": str(e)}))
         sys.exit(1)

{runspec_linux-0.7.0 → runspec_linux-0.8.0}/runspec_linux/runspec.toml

@@ -355,6 +355,27 @@ short       = "-a"
 description = "Include stopped containers"
 default     = false
 
+# Escalation: the Docker daemon socket is usually root/docker-group owned.
+[list-containers.args.run-as]
+type        = "str"
+description = "Run docker as this specific OS user (via sudo -n -u / su). Mutually exclusive with --sudo."
+required    = false
+
+[list-containers.args.sudo]
+type        = "flag"
+description = "Run docker as root (via sudo). Mutually exclusive with --run-as."
+default     = false
+
+[list-containers.args.become-method]
+type        = "choice"
+options     = ["sudo", "su"]
+description = "How to escalate for --run-as/--sudo: sudo (passwordless, -n) or su."
+default     = "sudo"
+
+[list-containers.groups.escalation]
+exclusive   = true
+args        = ["run-as", "sudo"]
+
 [container-logs]
 serve       = ["local"]
 description = "Fetch recent log output from a Docker container"
@@ -372,6 +393,27 @@ short       = "-n"
 description = "Number of lines to return"
 default     = 50
 
+# Escalation: the Docker daemon socket is usually root/docker-group owned.
+[container-logs.args.run-as]
+type        = "str"
+description = "Run docker as this specific OS user (via sudo -n -u / su). Mutually exclusive with --sudo."
+required    = false
+
+[container-logs.args.sudo]
+type        = "flag"
+description = "Run docker as root (via sudo). Mutually exclusive with --run-as."
+default     = false
+
+[container-logs.args.become-method]
+type        = "choice"
+options     = ["sudo", "su"]
+description = "How to escalate for --run-as/--sudo: sudo (passwordless, -n) or su."
+default     = "sudo"
+
+[container-logs.groups.escalation]
+exclusive   = true
+args        = ["run-as", "sudo"]
+
 [restart-container]
 serve       = ["local"]
 description = "Restart a Docker container"
@@ -383,6 +425,27 @@ type        = "str"
 short       = "-c"
 description = "Container name or ID"
 
+# Escalation: the Docker daemon socket is usually root/docker-group owned.
+[restart-container.args.run-as]
+type        = "str"
+description = "Run docker as this specific OS user (via sudo -n -u / su). Mutually exclusive with --sudo."
+required    = false
+
+[restart-container.args.sudo]
+type        = "flag"
+description = "Run docker as root (via sudo). Mutually exclusive with --run-as."
+default     = false
+
+[restart-container.args.become-method]
+type        = "choice"
+options     = ["sudo", "su"]
+description = "How to escalate for --run-as/--sudo: sudo (passwordless, -n) or su."
+default     = "sudo"
+
+[restart-container.groups.escalation]
+exclusive   = true
+args        = ["run-as", "sudo"]
+
 # ── Packages ──────────────────────────────────────────────────────────────────
 
 [list-packages]