Skip to content

fix(agent): preserve auth refresh across privilege drop - #50

Merged
Cvv9 merged 1 commit into
mainfrom
codex/fix-agent-auth-drop
Aug 11, 2026
Merged

fix(agent): preserve auth refresh across privilege drop#50
Cvv9 merged 1 commit into
mainfrom
codex/fix-agent-auth-drop

Conversation

@Cvv9

@Cvv9 Cvv9 commented Aug 11, 2026

Copy link
Copy Markdown
Owner

What changed

  • preserve the root-phase Codex auth refresh across the entrypoint's privilege-drop re-exec
  • prevent the unprivileged phase from rereading the deliberately root-only mounted secret
  • clear the internal handoff marker before starting Buzz/Codex

Why

The previous refresh fix copied the mounted secret correctly as root, then re-executed the entrypoint as
ode. The second pass attempted the same copy again and all nine production agent containers crash-looped on the root-only

Signed-off-by: Cvv9 <Varun.cumbamangalam@oralens.com>
@Cvv9
Cvv9 merged commit de9100c into main Aug 11, 2026
3 checks passed
@Cvv9
Cvv9 deleted the codex/fix-agent-auth-drop branch August 11, 2026 17:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant