Repository navigation
Add a SessionStart hook for Claude Code cloud sessions - #325
matt-edmondson wants to merge 3 commits into
Conversation
The cloud image has no .NET SDK, and Ubuntu's own dotnet-sdk-10.0 is the 1xx feature band, whose compiler is too old for ktsu.Sdk.Analyzers (CS9057). The hook installs the SDK global.json asks for into ~/.dotnet, puts it on the session's PATH and restores the solution. dotnet-install.sh is tried first. The default cloud network policy blocks builds.dotnet.microsoft.com, so the SDK falls back to the layers of the mcr.microsoft.com/dotnet/sdk image, which the policy allows. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FGcrXbknJ2JWPDzNoNhPCw
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| for layer in $(jq -r '.layers[].digest' <<<"$manifest"); do | ||
| curl -fsSL -o "$work/layer.tgz" "$registry/blobs/$layer" | ||
| tar -xzf "$work/layer.tgz" -C "$root" --strip-components=3 --wildcards "$wanted" 2>/dev/null || true | ||
| done |
There was a problem hiding this comment.
Fixed in dac5d21. Each layer is now checked with sha256sum against the digest its manifest names before it is extracted. A mismatch or a non-sha256 digest stops the install.
Generated by Claude Code
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FGcrXbknJ2JWPDzNoNhPCw
df20d19 to
dac5d21
Compare
dotnet-install.sh is fetched and run with nothing to verify it against, and its host is blocked in cloud sessions anyway, so the installer now always takes the MCR route, whose layers are checked against their digests. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FGcrXbknJ2JWPDzNoNhPCw
|
|
SonarCloud's quality gate fails on 68131b1 with "C Security Rating on New Code". The only new code in this PR is the cloud-session hook scripts under I can't see which rule fired. sonarcloud.io is blocked from the session that opened this PR, and the check run has no annotations, only the summary. The finding is listed on the issues dashboard. Once someone shares the rule and line, I'll push the fix here and to the other PRs. Generated by Claude Code |
3 participants
Requested by Matt · project thread
Before: a Claude Code cloud session had no .NET SDK, so nothing here could be built or tested. Ubuntu's own
dotnet-sdk-10.0package does not help either: it is the 10.0.1xx band, which this repository'sglobal.json(10.0.400) refuses, and whose compiler is too old for ktsu.Sdk.Analyzers (CS9057).After: a SessionStart hook installs the SDK
global.jsonasks for (10.0.402 today) plus the .NET 8 and 9 runtimes into~/.dotnet, puts it on the session'sPATH, and runsdotnet restore. The older runtimes matter here:Schema.Testruns on net8.0 and net9.0 as well, and without them two of its three runs fail to launch (exit code 150).How:
.claude/hooks/install-dotnet.shtries the officialdotnet-install.shfirst. The default cloud network policy blocksbuilds.dotnet.microsoft.combut allowsmcr.microsoft.com, so it falls back to unpackingusr/share/dotnetfrom the officialmcr.microsoft.com/dotnet/sdkandruntimeimage layers. If the environment later allows the Microsoft host, the first route takes over with no change here. The hook does nothing outside cloud sessions and is a no-op once everything is installed. The same two files go to every ktsu repo in the Holotype project.Validated in a cloud container: the hook ran clean and
dotnet test --project Schema.Test/Schema.Test.csprojpassed 1632/1632 across its three target frameworks.Note: no version tag in the commit, so KtsuBuild will pick the bump from the files changed. Add
[skip ci]or a tag on merge if a release for this is unwanted.Generated by Claude Code