Skip to content

fix: allow root execution in container/sandbox/CI environments #9

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
echoVic merged 1 commit into from
Feb 9, 2026
Merged

fix: allow root execution in container/sandbox/CI environments #9

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
43 changes: 29 additions & 14 deletions packages/cli/src/blade.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,21 +40,36 @@ if (debugIndex !== -1) {

export async function main() {
// 🛡️ 防止使用 sudo 运行（避免创建 root 拥有的文件）
// 但允许在容器/沙箱/CI 等天然 root 环境中运行
if (process.getuid && process.getuid() === 0) {
console.error('');
console.error('❌ 请不要使用 sudo 运行 blade');
console.error('');
console.error('原因：');
console.error(' 使用 sudo 会创建属于 root 的配置文件，');
console.error(' 导致普通用户无法访问。');
console.error('');
console.error('正确用法：');
console.error(' blade # 直接运行，不要加 sudo');
console.error('');
console.error('如果遇到权限错误，请运行：');
console.error(' sudo chown -R $USER:$USER ~/.blade/');
console.error('');
process.exit(1);
const isSudo = !!process.env.SUDO_USER;
const isContainer =
!!process.env.container ||
!!process.env.DOCKER_CONTAINER ||
!!process.env.KUBERNETES_SERVICE_HOST;
const isCI = !!process.env.CI;
const isAllowRoot = !!process.env.BLADE_ALLOW_ROOT;

// 只有通过 sudo 提权运行时才阻止，天然 root 环境放行
if (isSudo && !isAllowRoot) {
console.error('');
console.error('❌ 请不要使用 sudo 运行 blade');
console.error('');
console.error('原因：');
console.error(' 使用 sudo 会创建属于 root 的配置文件，');
console.error(' 导致普通用户无法访问。');
console.error('');
console.error('正确用法：');
console.error(' blade # 直接运行，不要加 sudo');
console.error('');
console.error('如果遇到权限错误，请运行：');
console.error(' sudo chown -R $USER:$USER ~/.blade/');
console.error('');
console.error('如果你确实需要以 root 运行（容器/CI），设置环境变量：');
console.error(' BLADE_ALLOW_ROOT=1 blade');
console.error('');
process.exit(1);
}
}

// 初始化优雅退出处理器（捕获 uncaughtException/unhandledRejection/SIGTERM）
Expand Down