Skip to content

cbsd: address critical issues#45

Merged
jecluis merged 4 commits intomainfrom
wip/cbsd-crit-fixes
Mar 12, 2026
Merged

cbsd: address critical issues#45
jecluis merged 4 commits intomainfrom
wip/cbsd-crit-fixes

Conversation

@jecluis
Copy link
Contributor

@jecluis jecluis commented Mar 7, 2026

This patch set addresses some critical issues that, although not particularly obvious, may introduce significant operational misbehavior.

Signed-off-by: Joao Eduardo Luis <joao@clyso.com>

jecluis added 4 commits March 7, 2026 22:44
Every call to Backend.redis() created a new Redis connection that
was never closed. Create the connection pool once in __init__() and
return the shared instance, adding a close() method for cleanup.

Signed-off-by: Joao Eduardo Luis <joao@clyso.com>
token_decode() and Users.create() logged full PASETO tokens at
DEBUG level. If CBS_DEBUG is set, every request leaks credentials
to the log. Remove token values from log messages entirely.

Signed-off-by: Joao Eduardo Luis <joao@clyso.com>
BuildsTracker.new() manually acquired the lock and released it
inside a nested _cleanup() function. If an uncaught exception
occurred between acquire and cleanup, the lock was never released,
permanently blocking all build operations. Restructure to use
'async with self._lock:' and extract cleanup into _fail_entry().

Signed-off-by: Joao Eduardo Luis <joao@clyso.com>
_update_components() called res.get() synchronously inside an
async task, blocking the entire asyncio event loop until the
Celery worker responded. Use asyncio.to_thread() to run the
blocking call in a separate thread.

Signed-off-by: Joao Eduardo Luis <joao@clyso.com>
@jecluis jecluis requested a review from UweSchwaeke March 7, 2026 23:00
@jecluis jecluis added bug Something isn't working cbsd Pertaining the CBS service daemon labels Mar 7, 2026
@jecluis jecluis merged commit 8f95435 into main Mar 12, 2026
@jecluis jecluis deleted the wip/cbsd-crit-fixes branch March 12, 2026 02:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working cbsd Pertaining the CBS service daemon

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants