Roland Huss 1221b5868a fix(cli): isolate subprocess tests from host OPENSHELL_ env vars (#2523) ...

The subprocess-based integration tests inherit the full parent
environment. If the developer has OPENSHELL_GATEWAY_INSECURE=true
set in their shell, it leaks into the spawned CLI process and causes
it to connect with .with_no_client_auth(), skipping the mTLS client
certificate. The test server requires mTLS, so it responds with
CertificateRequired and the test fails.

Strip OPENSHELL_GATEWAY_INSECURE, OPENSHELL_GATEWAY,
OPENSHELL_GATEWAY_ENDPOINT, and OPENSHELL_WORKSPACE from the
subprocess environment. The test already sets --gateway and
--gateway-endpoint explicitly via CLI args, so these env vars
should not influence the subprocess behavior.

Reported-by: Seth Jennings

Signed-off-by: Roland Huß <rhuss@redhat.com>

2026-07-29 12:10:34 +00:00

..

openshell-bootstrap

fix: assorted byte-index slicing safety fixes (#2452)

2026-07-27 14:38:09 +00:00

openshell-cli

fix(cli): isolate subprocess tests from host OPENSHELL_ env vars (#2523)

2026-07-29 12:10:34 +00:00

openshell-core

feat(sandbox): use policy-first OCI image identity (#2509)

2026-07-29 05:27:21 +00:00

openshell-driver-docker

refactor(compute): make sandbox readiness gateway-owned across all drivers (#2153)

2026-07-29 10:10:53 +00:00

openshell-driver-kubernetes

feat(sandbox): use policy-first OCI image identity (#2509)

2026-07-29 05:27:21 +00:00

openshell-driver-podman

feat(sandbox): use policy-first OCI image identity (#2509)

2026-07-29 05:27:21 +00:00

openshell-driver-vm

fix(vm): reduce registry rootfs staging pressure (#2425)

2026-07-22 18:26:48 +00:00

openshell-gateway-interceptors

fix: eliminate parallel Rust test flakes (#2434)

2026-07-24 15:47:44 +00:00

openshell-ocsf

feat(supervisor-middleware): add network egress middleware (#2027)

2026-07-16 17:47:49 -07:00

openshell-policy

feat(sandbox): use policy-first OCI image identity (#2509)

2026-07-29 05:27:21 +00:00

openshell-prover

docs(prover): correct prove() exit code doc comment (#2395)

2026-07-22 10:20:39 +00:00

openshell-providers

refactor(policy): extract shared L7 endpoint validation (#2389)

2026-07-24 17:48:24 +00:00

openshell-router

fix: assorted byte-index slicing safety fixes (#2452)

2026-07-27 14:38:09 +00:00

openshell-sandbox

feat(sandbox): use policy-first OCI image identity (#2509)

2026-07-29 05:27:21 +00:00

openshell-sdk

fix(auth): report gateway authentication status (#2435)

2026-07-23 20:01:28 +00:00

openshell-server

refactor(compute): make sandbox readiness gateway-owned across all drivers (#2153)

2026-07-29 10:10:53 +00:00

openshell-server-macros

feat(server): declare gRPC auth (mode + scope + role) at the handler, enforce at the router (#1596)

2026-05-27 14:14:54 -07:00

openshell-supervisor-middleware

feat(supervisor-middleware): add network egress middleware (#2027)

2026-07-16 17:47:49 -07:00

openshell-supervisor-middleware-builtins

feat(supervisor-middleware): add network egress middleware (#2027)

2026-07-16 17:47:49 -07:00

openshell-supervisor-network

fix(proxy): retry with backoff on transient accept errors instead of exiting (#2369)

2026-07-27 18:15:10 +00:00

openshell-supervisor-process

feat(sandbox): use policy-first OCI image identity (#2509)

2026-07-29 05:27:21 +00:00

openshell-tui

refactor(tui): default create form state (#2458)

2026-07-24 16:28:42 +00:00

openshell-vfio

chore(vm): generalize crate for multi-device PCIe passthrough (#1573)

2026-05-29 15:43:32 -07:00