Skip to content

fix: move docker-credential-osxkeychain back to /usr/local/bin - #1803

Merged
shashank-boyapally merged 8 commits into
mainfrom
oskeychain-path-fix
Sep 15, 2026
Merged

shashank-boyapally merged 8 commits into
mainfrom
oskeychain-path-fix

Conversation

@Swapnanil-Gupta

@Swapnanil-Gupta Swapnanil-Gupta commented Aug 26, 2026

Copy link
Copy Markdown
Contributor

Issue #, if available:

Description of changes:
#1785 moved docker-credential-osxkeychain to /opt/finch/bin from /usr/local/bin. So any runner that does not have /opt/finch/bin in PATH will fail to find docker-credential-osxkeychain and fall back to plain text creds.

This PR fixes it by:

Testing done:

  • I've reviewed the guidance in CONTRIBUTING.md

License Acceptance

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Signed-off-by: Swapnanil-Gupta <swpnlg@amazon.com>
Signed-off-by: Swapnanil-Gupta <swpnlg@amazon.com>
Signed-off-by: Swapnanil-Gupta <swpnlg@amazon.com>
@Swapnanil-Gupta
Swapnanil-Gupta force-pushed the oskeychain-path-fix branch 6 times, most recently from 9b31306 to b3b377d Compare August 28, 2026 21:00
@Swapnanil-Gupta Swapnanil-Gupta changed the title fix: look for docker-credential-osxkeychain in /opt/finch/bin first fix: move docker-credential-osxkeychain back to /usr/local/bin Aug 28, 2026
@Swapnanil-Gupta
Swapnanil-Gupta force-pushed the oskeychain-path-fix branch 3 times, most recently from ed7e297 to 37c7deb Compare August 28, 2026 21:56
Signed-off-by: Swapnanil-Gupta <swpnlg@amazon.com>
@coderbirju
coderbirju marked this pull request as ready for review September 9, 2026 18:52
…tainer running on WS2025

- cmd/finch/nerdctl_windows.go: resolveIP queried the WSL adapter as
  "vEthernet (WSL)", but Windows Server 2025 renamed it to
  "vEthernet (WSL (Hyper-V firewall))". On WS2025 the old name matches no
  adapter, so host-gateway resolved to an empty IP and `run --add-host
  test-host:host-gateway` failed. Updated the adapter name (and the two unit
  test mocks) to match. Verified the adapter name empirically on a WS2025 host
  (netsh reports "vEthernet (WSL (Hyper-V firewall))") and via
  go test ./cmd/finch/ on Windows Server 2025.

- e2e/vm/additional_disk_test.go: after recreating the VM, `start` returns
  before the container task is running, so the immediate `exec` failed with
  "cannot exec in a stopped state" for the whole 15s window. Wait for
  {{.State.Running}}==true before exec'ing, matching the pattern already used in
  cosign_test.go and finch_config_file_remote_test.go.

Signed-off-by: Arjun Yogidas <arjunry@amazon.com>
coderbirju and others added 3 commits September 10, 2026 19:17
wsl --list exits 1 when no distributions are installed (expected on a
fresh/recreated WS2025 runner), which failed the Remove Finch VM step
before build/test could run. Force exit 0, harden Remove-Item, and drop
the invalid 'timeout 60s'.

Signed-off-by: Arjun Yogidas <arjunry@amazon.com>
…dapters

The WSL host adapter name differs by Windows version:
  - Server 2022 / older WSL:              "vEthernet (WSL)"
  - Server 2025 / Win11 22H2+ (mirrored): "vEthernet (WSL (Hyper-V firewall))"

resolveIP hardcoded the 2025 name, so `finch run --add-host X:host-gateway`
failed with "exit status 1" on Server 2022 runners (netsh couldn't find the
interface). Try both adapter names and use the first that yields an address,
so it works on both. Also invoke netsh.exe directly instead of via "cmd /C"
(routing the quoted, parenthesized interface name through cmd mangles the
argument) and surface the netsh output on failure. Unit tests updated to match.

Signed-off-by: ShashankReddy Boyapally <shasboy@amazon.com>
Signed-off-by: ShashankReddy Boyapally <shasboy@amazon.com>
@shashank-boyapally
shashank-boyapally merged commit 8065f30 into main Sep 15, 2026
146 of 152 checks passed
@shashank-boyapally
shashank-boyapally deleted the oskeychain-path-fix branch September 15, 2026 16:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants