Skip to content

builder-upgrade: reset oversized persona keybags; require a desktop session on return - #96

Merged
rcurranmoz merged 1 commit into
mainfrom
builder-upgrade-persona-keybag
Oct 29, 2026
Merged

rcurranmoz merged 1 commit into
mainfrom
builder-upgrade-persona-keybag

Conversation

@rcurranmoz

Copy link
Copy Markdown
Collaborator

r8-138, r8-180, r8-198 and r8-200 came back from the macOS 15 upgrade with the task user at the console but no desktop session (no Dock/Finder/WindowManager). generic-worker checked in and plain builds passed, but every generate-profile hung to its 2h max-run-time; r8-180 burned 11 in a row.

Cause: /private/var/db/keybags/persona.kb was 9-23 MB on those hosts (1-20 KB elsewhere). usermanagerd loads it whole at startup and macOS 15 gives it a 15 MB jetsam limit, so it's killed within milliseconds, every 10s, and loginwindow never finishes the login. Moving the file aside and rebooting rebuilt it at 1.1 KB and fixed all three hosts tried so far. FileVault is off on all of them.

  • step_reset_persona_keybag (after the OS upgrade): moves persona.kb to /var/root/persona-aside/ when it's over 1 MB; the return reboot rebuilds it.
  • step_return now waits for the task user's Dock after autologin, and fails with the usermanagerd state if it never shows, instead of trusting the console owner.

r8-199 (next) has a 23 MB one.

…ession on return

Some builders carry a 9-23 MB /private/var/db/keybags/persona.kb from years of
per-task users. usermanagerd loads it whole, and macOS 15 caps it at 15 MB, so
jetsam kills it every 10s and loginwindow never finishes the task user's login.
gw still checks in and builds pass, but GUI tasks (generate-profile) hang to
max-run-time: r8-138/180/198/200.

Move persona.kb aside when it's over 1 MB (the return reboot rebuilds it), and
have step_return wait for the task user's Dock instead of trusting the console
owner.
@rcurranmoz
rcurranmoz requested a review from a team as a code owner October 29, 2026 16:45
@rcurranmoz
rcurranmoz merged commit 69fdfe5 into main Oct 29, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant