ENV from Dockerfile is not preserved inside the Firecracker MicroVM

[marvinroger]

Hi there! 👋🏻

I'm honored to be the first person to write an issue in this repo, as this is honestly an awesome project and I'm sure it will be a great success since it solves a real problem in an elegant way, so thanks for that!

I know this project has not been announced but we like to live in the bleeding edge at my company and we're always looking forward to test new things. You're at 0.10.0 and this is open-source, so you might be at a point where feedback might be relevant to you 😉

Problem: The ENV from the sandbox.image.ref is not available at runtime.

Reproduction:

• Reference ghcr.io/buildkite/cleanroom-base/debian@sha256:4d6b3a4eb2a6fe5e23f7a3f01352363968c7f71bb032b23c0d0701364836f49b, which contains ENV PATH="/root/.local/share/mise/shims:${PATH}"
• Run cleanroom exec --repo-url "<REPO_URL>" --repo-commit "<REPO_COMMIT>" -- bash -c 'echo $PATH'
• See the PATH is /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin, which does not include the mise shims. The net effect is that the mise installed tools are not available.

Cleanroom version: 0.10.0

OS: Ubuntu 24.04.3

Cleanroom config:

backends:
  firecracker:
    binary_path: firecracker
    services:
      docker:
        startup_timeout_seconds: 20
        storage_driver: overlay2
    snapshots:
      enabled: true
    vcpus: 2
    memory_mib: 16384
    launch_seconds: 30