fix(hooks): mount cargo target outside bind mount via CARGO_TARGET_DIR #18

Merged

David merged 1 commit from fix/dev-371-precommit-host-owned-target into main

2026-06-19 09:49:40 +02:00

David commented

2026-06-18 17:18:35 +02:00

Owner

What

Change the pre-commit justfile recipe to mount the dev-forgejo-mcp-cargo-target named volume at /cargo-target (outside the /build bind mount) and point cargo at it with --env CARGO_TARGET_DIR=/cargo-target, instead of nesting it at /build/target. The volume name is unchanged, so the build cache still persists.

Why (DEV-371)

Mounting the named volume at /build/target nests it inside the /build host bind mount. The Docker daemon then materializes a root-owned target/ directory on the host, which requires sudo to remove and leaves stray files after running just pre-commit. Moving the mount path off the bind mount stops the daemon from creating any host-side target/.

Governance note

Applies the governance Option A standard: mount the cargo target cache outside the bind mount and select it via CARGO_TARGET_DIR.

## What Change the `pre-commit` justfile recipe to mount the `dev-forgejo-mcp-cargo-target` named volume at `/cargo-target` (outside the `/build` bind mount) and point cargo at it with `--env CARGO_TARGET_DIR=/cargo-target`, instead of nesting it at `/build/target`. The volume name is unchanged, so the build cache still persists. ## Why (DEV-371) Mounting the named volume at `/build/target` nests it inside the `/build` host bind mount. The Docker daemon then materializes a root-owned `target/` directory on the host, which requires sudo to remove and leaves stray files after running `just pre-commit`. Moving the mount path off the bind mount stops the daemon from creating any host-side `target/`. ## Governance note Applies the governance Option A standard: mount the cargo target cache outside the bind mount and select it via `CARGO_TARGET_DIR`.

David added 1 commit

2026-06-18 17:18:35 +02:00

fix(hooks): mount cargo target outside bind mount via CARGO_TARGET_DIR

Check / fmt + clippy + build + tests (pull_request) Successful in 1m3s

Details

Create release / Create release from merged PR (pull_request) Has been skipped

Details

4cc2ff5d29

Mount the cargo target cache at /cargo-target (outside the /build bind mount) and point cargo at it with CARGO_TARGET_DIR, instead of nesting the named volume at /build/target, which makes the Docker daemon create a root-owned target/ on the host that needs sudo to remove. The cache still persists in the named volume; only its mount path moves off the bind mount. Aligns with the governance Option A standard.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

#DEV-371