0.20.16rc1

peterschmidt85
2026-03-27T16:52:10Z

Fix SELinux denials and "Text file busy" on SSH fleet provisioning (#…

…3712)

The shim binary download uses cp to copy from /tmp to /usr/local/bin/.
This causes two issues:

1. "Text file busy" (ETXTBSY) when re-provisioning without cleanup,
because cp tries to write to a running executable. Revert to mv
which atomically replaces the directory entry.

2. On SELinux-enforcing hosts (RHEL, Rocky), mv from /tmp preserves
the user_tmp_t context. Add chcon to set the correct bin_t context.
No-op on non-SELinux systems via 2>/dev/null || true.

Co-authored-by: Andrey Cheptsov <andrey.cheptsov@github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>