Repository navigation
[awf-feature-surfacing] Align runner.installation schema and generated reference with rootless installer behavior #75999
Description
Overview
runner.installation was added in commit 5147c4e to select CLI installation privilege independently of runner topology. Its schema description and generated frontmatter reference now disagree with the current Linux installer behavior and the dedicated runner guidance.
Key issue
The schema says rootless installation uses ~/.local/bin and defaults to privileged installation outside ARC/DinD. Current Linux installers use the job-scoped $RUNNER_TEMP/gh-aw/bin directory, and when no installation mode is specified they fall back to rootless if neither root nor passwordless sudo is available. The generated full frontmatter reference repeats the stale schema text. This can lead authors and editor users to expect the wrong install path or sudo requirement.
Evidence
pkg/parser/schemas/main_workflow_schema.json(runner.installation, near line 3329): describes~/.local/binand a privileged default outside ARC/DinD.docs/src/content/docs/reference/frontmatter-full.md(near line 2549): repeats that description.actions/setup/sh/install_privileges.sh: selects$RUNNER_TEMP/gh-aw/binfor Linux rootless installation and falls back when passwordless sudo is unavailable.actions/setup/sh/install_copilot_cli.shandactions/setup/sh/install_threat_detect_binary.sh: call the shared privilege and path setup..github/aw/syntax-core.md(runner.installation) anddocs/src/content/docs/reference/self-hosted-runners.mddescribe the current path and fallback.
Next actions
- P1: Update the
runner.installationschema description to state the Linux job-scoped path and the actual no-sudo fallback. Clarify how an explicitprivilegedsetting behaves when sudo is unavailable. - P1: Regenerate the full frontmatter reference and editor metadata derived from the schema so both surfaces agree with the installer and runner guidance.
- P2: Add a focused consistency check for the schema description and generated reference to catch stale path and default claims.
Generated by 🧭 Daily AWF Spec Compiler Surfacing Review · codex · gpt60 · ~63 AIC · ⌖ ~9 AIC · ⊞ 15.8K · ◷
- expires on Nov 15, 2026, 2:21 PM UTC-08:00
Activity
lpcox commentedon Nov 9, 2026
🔗 AWF tracking issue: #aw_track2