app

commit 31aa4bda773675a0c7849d13dac6ddd3146bd7b1
parent 9ef3dfd3f48ccd1d4dc361f952c81c9849fead70
Author: triesap <tyson@radroots.org>
Date:   Wed, 26 Aug 2026 17:34:05 +0000

build: bind Linux JVM home

- Bind Java user.home to the retained writable container home directory.
- Prevent Skiko tests from attempting to create state beneath filesystem root.
- Keep Gradle and native caches on the governed extbuild volume.
- Guard the Linux runner contract against losing the JVM home binding.

Diffstat:
M
tools/run-linux-x86_64-development-check.sh
 | 
1
+
M
tools/xtask/src/lib.rs
 | 
1
+

2 files changed, 2 insertions(+), 0 deletions(-)
diff --git a/tools/run-linux-x86_64-development-check.sh b/tools/run-linux-x86_64-development-check.sh
@@ -80,6 +80,7 @@ docker run \
     --env CARGO_TARGET_DIR=/workspace/cargo-target \
     --env CARGO_BUILD_JOBS=2 \
     --env GRADLE_USER_HOME=/workspace/gradle-home \
+    --env JAVA_TOOL_OPTIONS=-Duser.home=/workspace/home \
     --env EXT_BUILD_GRADLE_BUILD_DIR=/workspace/gradle-build \
     --env HARVESTCIRCLE_BUILD_MODE=governed \
     --env HARVESTCIRCLE_BUILD_SOURCE_COMMIT="$source_commit" \
diff --git a/tools/xtask/src/lib.rs b/tools/xtask/src/lib.rs
@@ -917,6 +917,7 @@ fn development_integration_policy(root: &Path, findings: &mut Vec<String>) {
         "rust:1.97.1-slim-trixie@sha256:fc0648ac2962539be80bd424729a20fd80f7b64bfba7e90bbd642aed6c697c5a",
         "--platform linux/amd64",
         "EXT_BUILD_RUN_ACTIVE",
+        "--env JAVA_TOOL_OPTIONS=-Duser.home=/workspace/home",
         "cargo deny --manifest-path core/Cargo.toml check --config core/deny.toml licenses sources",
         "cargo test --manifest-path core/Cargo.toml --workspace --locked",
         "cargo clippy --manifest-path core/Cargo.toml --workspace --all-targets --locked -- -D warnings",