vhaudiquet
58cd6f6c41
pkh's process carries inheritable descriptors (async runtime, gpgme sockets, the log tee) that std passes to every child. Tools with fd-number assumptions then break on the shifted table: mmdebstrap's apt hook is `cat >&N`, and /bin/sh (dash) rejects any two-digit N with "Bad fd number" — a fresh-chroot bootstrap died with "mmdebstrap failed to run" whenever the hook pipe landed above fd 9, and succeeded from a clean shell where it lands lower. Sweep fds >= 3 pre-exec in the local driver's spawns: it is the one funnel every context spawn goes through (schroot and unshare chain through their parent, ssh execs remotely over libssh2). Verified end to end: the sid bootstrap test fails on the unfixed code under a polluted fd table and passes with the sweep under the same table.