ensure metadata updates are non-critical

.github/workflows/in-container.yaml

@@ -33,13 +33,15 @@ jobs:
         run: |
           apt-get update -y && apt-get install -y sudo
 
-      - name: Set up Nix cache
-        uses: namespacelabs/nscloud-cache-action@344aba36b864a47c4bae7ea0c0aff4cda7e6d50a
+      - name: Set up NPM cache
+        uses: ./ # Uses an action in the root directory
         with:
           path: .npm
 
       - name: Run npm install
         run: npm install
 
       - name: Print cache metadata file
-        run: cat /cache/.ns/cache-metadata.json
+        run: |
+          ls -al /cache/.ns
+          cat /cache/.ns/cache-metadata.json

.github/workflows/maven.yaml

@@ -43,4 +43,6 @@ jobs:
         working-directory: ./demo
 
       - name: Print cache metadata file
-        run: cat /cache/.ns/cache-metadata.json
+        run: |
+          ls -al /cache/.ns
+          cat /cache/.ns/cache-metadata.json

.github/workflows/metadata.yaml

@@ -0,0 +1,65 @@
+name: Test metadata access
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - "*"
+  schedule:
+    - cron: "55 */6 * * *"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  invalid-metadata:
+    runs-on:
+      - namespace-profile-default
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - run: |
+          sudo mkdir -p /cache/.ns
+          sudo chown -R runner /cache
+          echo "foo" > /cache/.ns/cache-metadata.json
+
+      # Should not fail despite cache-metadata being invalid.
+      - name: Set up NPM cache
+        uses: ./ # Uses an action in the root directory
+        with:
+          path: .npm
+        env:
+          NSC_CACHE_PATH: /cache
+
+      - name: Print cache metadata file
+        run: cat /cache/.ns/cache-metadata.json
+
+  owned-by-root:
+    runs-on:
+      - namespace-profile-default
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - run: |
+          sudo mkdir -p /cache/.ns
+          sudo chown -R runner /cache
+          echo "{}" > /cache/.ns/cache-metadata.json
+
+          sudo chown -R root /cache/.ns
+
+      # Should not fail despite cache-metadata being owned by root.
+      - name: Set up NPM cache
+        uses: ./ # Uses an action in the root directory
+        with:
+          path: .npm
+        env:
+          NSC_CACHE_PATH: /cache
+
+      - name: Print cache metadata file
+        run: |
+          ls -al /cache/.ns
+          cat /cache/.ns/cache-metadata.json

.github/workflows/pnpm.yaml

@@ -35,5 +35,8 @@ jobs:
             ./node_modules/.cache
       - run: pnpm install
         working-directory: ./demo/fullstack
+
       - name: Print cache metadata file
-        run: cat /cache/.ns/cache-metadata.json
+        run: |
+          ls -al /cache/.ns
+          cat /cache/.ns/cache-metadata.json

.github/workflows/python.yaml

@@ -29,5 +29,9 @@ jobs:
           path: demo
       - run: pip install -r ./requirements.txt
         working-directory: ./demo
+
       - name: Print cache metadata file
-        run: cat /cache/.ns/cache-metadata.json
+        run: |
+          ls -al /cache/.ns
+          cat /cache/.ns/cache-metadata.json
+

.github/workflows/rust.yaml

@@ -32,4 +32,7 @@ jobs:
       - run: cargo test --locked --release --all
         working-directory: ./demo
       - name: Print cache metadata file
-        run: cat /cache/.ns/cache-metadata.json
+        run: |
+          ls -al /cache/.ns
+          cat /cache/.ns/cache-metadata.json
+

.github/workflows/yarn.yaml

@@ -32,4 +32,6 @@ jobs:
       - run: yarn workspace @project/web-app build
         working-directory: ./demo
       - name: Print cache metadata file
-        run: cat /cache/.ns/cache-metadata.json
+        run: |
+          ls -al /cache/.ns
+          cat /cache/.ns/cache-metadata.json

dist/index/index.js

@@ -27181,7 +27181,7 @@ async function getCacheUtil(cachePath) {
     const cacheUtil = parseInt(stdout.trim());
     return cacheUtil;
 }
-async function ensureCacheMetadata(cachePath) {
+function ensureCacheMetadata(cachePath) {
     const namespaceFolderPath = external_path_.join(cachePath, privateNamespaceDir);
     external_fs_.mkdirSync(namespaceFolderPath, { recursive: true });
     const metadataFilePath = external_path_.join(namespaceFolderPath, metadataFileName);
@@ -27192,12 +27192,12 @@ async function ensureCacheMetadata(cachePath) {
     const metadata = JSON.parse(rawData);
     return metadata;
 }
-async function writeCacheMetadata(cachePath, metadata) {
+function writeCacheMetadata(cachePath, metadata) {
     const namespaceFolderPath = external_path_.join(cachePath, privateNamespaceDir);
     external_fs_.mkdirSync(namespaceFolderPath, { recursive: true });
     const metadataFilePath = external_path_.join(namespaceFolderPath, metadataFileName);
     const rawData = JSON.stringify(metadata);
-    external_fs_.writeFileSync(metadataFilePath, rawData);
+    external_fs_.writeFileSync(metadataFilePath, rawData, { mode: 0o666 });
 }
 
 ;// CONCATENATED MODULE: ./src/index.ts
@@ -27236,7 +27236,7 @@ async function main() {
     }
     try {
         // Write/update cache volume metadata file
-        const metadata = await ensureCacheMetadata(localCachePath);
+        const metadata = ensureCacheMetadata(localCachePath);
         metadata.updatedAt = new Date().toISOString();
         metadata.version = 1;
         if (!metadata.userRequest) {

src/index.ts

@@ -42,7 +42,7 @@ async function main() {
 
   try {
     // Write/update cache volume metadata file
-    const metadata = await utils.ensureCacheMetadata(localCachePath);
+    const metadata = utils.ensureCacheMetadata(localCachePath);
     metadata.updatedAt = new Date().toISOString();
     metadata.version = 1;
     if (!metadata.userRequest) {

src/utils.ts

@@ -76,9 +76,7 @@ export interface CacheMount {
   mountTarget: string[];
 }
 
-export async function ensureCacheMetadata(
-  cachePath: string
-): Promise<CacheMetadata> {
+export function ensureCacheMetadata(cachePath: string): CacheMetadata {
   const namespaceFolderPath = path.join(cachePath, privateNamespaceDir);
   fs.mkdirSync(namespaceFolderPath, { recursive: true });
 
@@ -92,14 +90,11 @@ export async function ensureCacheMetadata(
   return metadata;
 }
 
-export async function writeCacheMetadata(
-  cachePath: string,
-  metadata: CacheMetadata
-) {
+export function writeCacheMetadata(cachePath: string, metadata: CacheMetadata) {
   const namespaceFolderPath = path.join(cachePath, privateNamespaceDir);
   fs.mkdirSync(namespaceFolderPath, { recursive: true });
 
   const metadataFilePath = path.join(namespaceFolderPath, metadataFileName);
   const rawData = JSON.stringify(metadata);
-  fs.writeFileSync(metadataFilePath, rawData);
+  fs.writeFileSync(metadataFilePath, rawData, { mode: 0o666 });
 }