From a0620ffffa87f38ba663cd4a20fbf8d516a166f5 Mon Sep 17 00:00:00 2001
From: mptyl <mp@tylconsulting.it>
Date: Wed, 26 Aug 2026 03:55:18 +0200
Subject: [PATCH] fix(ci): fingerprint private server registry as root

---
 scripts/unified-deployment-smoke.sh | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/scripts/unified-deployment-smoke.sh b/scripts/unified-deployment-smoke.sh
index bbad195c..53be5201 100755
--- a/scripts/unified-deployment-smoke.sh
+++ b/scripts/unified-deployment-smoke.sh
@@ -131,7 +131,16 @@ task13_capture_failed_image_evidence() {
 }
 
 task13_registry_filesystem_fingerprint() {
-  python3 - "$1" <<'PY'
+  local root="$1"
+  local -a python=(python3)
+  if [[ "${TASK13_PROFILE:-local}" == server && "$root" == "${TASK13_SERVER_REGISTRY:-}" ]]; then
+    [[ -n "${TASK13_TMP:-}" \
+      && "$root" == "$TASK13_TMP/Server Registry" \
+      && ! -L "$root" && -d "$root" ]] \
+      || task13_fail "refusing to fingerprint an unexpected server registry path"
+    python=(sudo -n -- python3)
+  fi
+  "${python[@]}" - "$root" <<'PY'
 import hashlib
 import os
 import stat