fix: initialize workspace secret volume for runtime

2026-08-14 18:13:52 +02:00
parent bd42aa5934
commit 9414a4b4dd
3 changed files with 5 additions and 1 deletions
@@ -1762,6 +1762,9 @@ if not any("workspace-secrets:/data/workspace-secrets" in str(value) for value i
 if not any(mount.get("source") == "workspace-secrets" and mount.get("target") == "/data/workspace-secrets"
           for mount in maintenance["volumes"] if isinstance(mount, dict)):
    raise SystemExit("workspace-maintenance cannot use the encrypted workspace vault")
+dockerfile = (root / "docker/core.Dockerfile").read_text()
+if "/data/workspace-secrets" not in dockerfile:
+    raise SystemExit("core image does not pre-create the workspace secret volume target")

 checked = [
    root / "docs/install/local-workspace-registry.md",