v0.294.0: off-site clean-up guard follows the policy's own constants (R-867); no image clean-up while compose pulls (R-863); stderr tail (R-864); move-aside destination logged (R-869)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-05 07:13:02 +02:00
parent 69e914534f
commit 7861bf9dde
16 changed files with 607 additions and 36 deletions
@@ -938,6 +938,7 @@ func classifyDBImage(service, image, container string) *dbServiceInfo {

 // composeExecEnv runs docker compose in the given stack directory with env vars.
 func composeExecEnv(stackDir string, env map[string]string, args ...string) ([]byte, error) {
+	defer dockerexec.BeginImageWork(args)() // R-863: no image clean-up while a restore may pull
 	cmdArgs := append([]string{"compose"}, args...)
 	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Minute)
 	defer cancel()