x-yuri

bash: interrupting commands with async subprocesses when job control is disabled

Subprocesses of async subshells don't inherit SIGINT after trap INT since bash-4.3-rc2:

h. Fixed a bug that caused SIGINT and SIGQUIT to not be trappable in asynchronous subshell commands.

https://git.savannah.gnu.org/cgit/bash.git/tree/CHANGES?h=bash-4.3-rc2&id=b6e23235f28b1c85e18e9a2b7ba8c6b6c46aecbc#n24

Before:

x-yuri

bash: interrupting commands with async subprocesses when job control is disabled

See [the new gist][d].

bash allows to override SIGINT in async subprocesses when job control is disabled since 4.3:

$ bash -c 'sleep 10 & wait'
$ ps -eHo pid,ppid,pgid,stat,ignored,args
    PID    PPID    PGID STAT          IGNORED COMMAND

x-yuri

bash: interrupting async subprocesses

a.sh:

trap - INT
while true; do
    echo -n .
    sleep 2
done

x-yuri

docker compose: depends_on

docker-compose.yml:

services:
  proxy:
    image: alpine:3.20
    command: sh -euc 'cd app; exec ./a.out'
    # command: sh -euc 'cd app; sleep 3; exec ./a.out'

x-yuri

haproxy + docker

docker-compose.yml:

services:
  haproxy:
    image: haproxy:2.9-alpine
    ports:
      - 8888:80

x-yuri

rmagick: docker

Dockerfile:

FROM ruby:2.3.8-alpine3.8 AS gems
ARG V
RUN apk add build-base imagemagick6-dev \
    && gem install rmagick -v "$V"

x-yuri

bower: CERT_HAS_EXPIRED

$ docker run --rm alpine:3.8 sh -euxc '
    apk add npm git
    npm i -g bower
    echo "{\"allow-root\": true}" > .bowerrc
    echo "{\"name\": \"whatever\", \"dependencies\": {\"underscore\": \"latest\"}}" > bower.json
    bower install
'

x-yuri

Let's Encrypt and Alpine Linux <= 3.8

Alpine Linux contains now expired [DST Root CA X3][a] certificate:

$ docker run --rm alpine:3.8 sh -euxc '
    grep "### Digital Signature Trust Co." -A 21 /etc/ssl/cert.pem
'
+ grep '### Digital Signature Trust Co.' -A 21 /etc/ssl/cert.pem
### Digital Signature Trust Co.

x-yuri

Alpine Linux <= 3.8: Let's Encrypt certs doesn't work

See this.

a.js:

const https = require('https');
https.get({host: 'registry.bower.io'}, res => {
    console.log(res.statusCode);

x-yuri

Displaying an ssl certificate from a commit

a.awk:

/BEGIN/ {
    close(cmd);
    getline cn < "/tmp/cn";
    close("/tmp/cn")
    if (cn == "DST Root CA X3") {