mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 12:32:43 +00:00
Marc-André Bombeck
b5866694c8
The previous resilience pass switched curl errors into a graceful fallback path but the script still ran `find` against `dirname $tmp_tarball` (`/tmp` on Linux runners). GitHub Actions runners populate `/tmp` with `systemd-private-*` directories that are mode 700; `find` walks them, returns exit code 1 on permission-denied, and under `set -e` aborts the script before our fallback branches can fire. Switch each edition to a per-call `mktemp -d` working directory. The tarball downloads + extracts + finds all happen inside an isolated directory the script owns. `find` never crosses into shared `/tmp` state, so permission-denied stops being a class of failure. Also drop the post-fetch cleanup `find` for date-stamped extraction dirs — those now live inside `$work_dir` which gets `rm -rf`'d in every branch. Verified locally with both a populated download and a bogus key on a Linux container; both paths exit 0, the bogus-key path writes `.empty`, the populated path skips the marker.