The LaunchAgent's default PATH (/usr/bin:/bin:/usr/sbin:/sbin) doesn't include /usr/local/bin where docker-credential-desktop lives. Trivy's OCI client reads ~/.docker/config.json which specifies credsStore:desktop, then fails to find the credential helper. Add /usr/local/bin to PATH. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
29 lines
858 B
Django/Jinja
29 lines
858 B
Django/Jinja
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!-- {{ ansible_managed }} -->
|
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
<plist version="1.0">
|
|
<dict>
|
|
<key>Label</key>
|
|
<string>mcquack.eblume.zot</string>
|
|
<key>ProgramArguments</key>
|
|
<array>
|
|
<!-- ABSOLUTE PATH to built binary in ~/code/3rd/zot -->
|
|
<string>{{ zot_binary }}</string>
|
|
<string>serve</string>
|
|
<string>{{ zot_config_dir }}/config.json</string>
|
|
</array>
|
|
<key>RunAtLoad</key>
|
|
<true/>
|
|
<key>KeepAlive</key>
|
|
<true/>
|
|
<key>EnvironmentVariables</key>
|
|
<dict>
|
|
<key>PATH</key>
|
|
<string>/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin</string>
|
|
</dict>
|
|
<key>StandardOutPath</key>
|
|
<string>{{ zot_log_dir }}/mcquack.zot.out.log</string>
|
|
<key>StandardErrorPath</key>
|
|
<string>{{ zot_log_dir }}/mcquack.zot.err.log</string>
|
|
</dict>
|
|
</plist>
|