docs(env-recipes): warn that snapshotting a started runtime bakes its identity (#17001)

Browse Source

Snapshotting a VM on which `orca serve` has already run captures the
runtime's user-data dir into the image. Every VM booted from that image
then shares one pairing identity and one agent-session-authority key,
which defeats the per-device token design.

Confirmed by booting two VMs from one such snapshot: both emitted
identical deviceToken and pairedDeviceId.

Adds the rule to the base-snapshot section and repeats it for the
agent-auth layer, which is the likelier place to start the runtime by
hand while smoke-testing. Says to delete the whole user-data dir rather
than a named file list, since that list drifts as Orca adds state.

...

This commit is contained in:

Neil

2026-08-28 02:37:55 -07:00

committed by GitHub

parent a4762f1c1d

commit 2b0ee06205

2 changed files with 12 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

src/cli/bundled-skill-guides.ts

+1 -1

File diff suppressed because one or more lines are too long