ci: fix scheduled link-check sweep crashing on ubuntu-24.04 sandbox restriction - #728
Merged
Conversation
…estriction The sweep job runs linkspector directly via npx, unlike the PR job which goes through action-linkspector. ubuntu-24.04 runners restrict unprivileged user namespaces via AppArmor, which Chromium's sandbox needs to launch; action-linkspector already works around this internally, but the bare npx invocation did not, so every scheduled/manual sweep run crashed with "No usable sandbox!" instead of producing a report. ## Summary - Add a step to the sweep job that disables the AppArmor user-namespace restriction before running linkspector, mirroring the workaround action-linkspector applies for the PR job. ## Test plan - [ ] Trigger the workflow manually (workflow_dispatch) and confirm the sweep job completes and produces JSON output instead of crashing. 🤖 Developed with assistance from [Claude Code](https://claude.ai/code) Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Member
Author
|
Ran this manually before opening PR, worked OK. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
The scheduled/manual "Sweep all blog links" job runs linkspector directly via
npx, unlike the PR job, which goes throughumbrelladocs/action-linkspector.ubuntu-24.04runners restrict unprivileged user namespaces via AppArmor, which Chromium's sandbox needs to launch;action-linkspectoralready works around this internally, but the barenpxinvocation did not, so every scheduled sweep run crashed with "No usable sandbox!" instead of producing a report. Everypull_requestrun of this workflow passed while everyschedulerun failed with the identical crash, which pointed at the difference between the two jobs.action-linkspectorapplies for the PR job.Test plan
🤖 Developed with assistance from Claude Code