ocsf_json_enabled silently writes nothing with the MicroVM driver (supervisor cannot open /var/log) #3855

#!/bin/sh
# Reproduce: OpenShell v0.1.2, macOS arm64, MicroVM driver.
# `ocsf_json_enabled=true` is accepted, but no OCSF JSONL file is ever written.
#
# Uses only NVIDIA's release binaries, installed the way the Homebrew formula
# (nvidia/openshell/openshell 0.1.2) installs them. Everything lives in
# ~/openshell-repro plus OpenShell's own default state/config dirs.
# Needs: port 17670 free, no other OpenShell gateway running.
set -eu

P="$HOME/openshell-repro"
R="https://github.com/NVIDIA/OpenShell/releases/download/v0.1.2"
OS="$P/bin/openshell"

echo "== 1. Download the official v0.1.2 binaries and verify NVIDIA's checksums"
mkdir -p "$P/bin" "$P/libexec" "$P/var/openshell" "$P/var/log" "$P/dl"
cd "$P/dl"
for f in openshell-aarch64-apple-darwin.tar.gz \
         openshell-gateway-aarch64-apple-darwin.tar.gz \
         openshell-driver-vm-aarch64-apple-darwin.tar.gz \
         openshell-checksums-sha256.txt openshell-gateway-checksums-sha256.txt; do
  curl -fsSL -O "$R/$f"
done
cat openshell-checksums-sha256.txt openshell-gateway-checksums-sha256.txt \
  | grep -E ' openshell-(gateway-|driver-vm-)?aarch64-apple-darwin.tar.gz$' \
  | shasum -a 256 -c -
tar -xzf openshell-aarch64-apple-darwin.tar.gz -C "$P/bin"
tar -xzf openshell-gateway-aarch64-apple-darwin.tar.gz -C "$P/bin"
tar -xzf openshell-driver-vm-aarch64-apple-darwin.tar.gz -C "$P/libexec"
"$OS" --version

echo "== 2. Same post-install as the Homebrew formula: entitle the VM driver, make certs, default config"
cat > "$P/var/openshell/openshell-driver-vm.entitlements.plist" <<'EOF'
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.hypervisor</key>
    <true/>
</dict>
</plist>
EOF
/usr/bin/codesign --entitlements "$P/var/openshell/openshell-driver-vm.entitlements.plist" \
  --force -s - "$P/libexec/openshell-driver-vm"
"$P/bin/openshell-gateway" generate-certs --output-dir "$P/var/openshell/tls" \
  --server-san host.openshell.internal >/dev/null 2>&1
# The formula's default config, plus pinning the MicroVM driver.
cat > "$P/var/openshell/gateway.toml" <<'EOF'
[openshell]
version = 2

[openshell.gateway]
compute_driver = "vm"
EOF

echo "== 3. Start the gateway as the Homebrew service would (as your user), register the CLI"
OPENSHELL_LOCAL_TLS_DIR="$P/var/openshell/tls" nohup "$P/bin/openshell-gateway" \
  --config "$P/var/openshell/gateway.toml" \
  >"$P/var/log/gateway.out.log" 2>"$P/var/log/gateway.err.log" &
echo $! >"$P/var/gateway.pid"
i=0; until lsof -nP -iTCP:17670 -sTCP:LISTEN >/dev/null 2>&1; do i=$((i+1)); [ $i -lt 60 ] || { echo "gateway did not start"; exit 1; }; sleep 0.5; done
"$OS" gateway add https://127.0.0.1:17670 --local --name openshell >/dev/null
"$OS" status | grep -E "Status|Version"

echo "== 4. Create a sandbox (default image) with a small policy"
cat > "$P/policy.yaml" <<'EOF'
version: 1
filesystem_policy:
  include_workdir: true
  read_only: [/usr, /lib, /etc, /proc]
  read_write: [/sandbox, /tmp]
landlock:
  compatibility: best_effort
process:
  run_as_user: sandbox
  run_as_group: sandbox
network_policies:
  example:
    name: example
    endpoints:
      - host: example.com
        port: 443
    binaries:
      - path: /usr/bin/curl
EOF
"$OS" sandbox create --name ocsf-repro --policy "$P/policy.yaml" --detach --no-tty --no-auto-providers >/dev/null
i=0; until [ "$("$OS" sandbox get ocsf-repro -o json 2>/dev/null | python3 -c 'import sys,json;print(json.load(sys.stdin).get("phase"))' 2>/dev/null)" = Ready ]; do i=$((i+1)); [ $i -lt 200 ] || { echo "sandbox not ready"; exit 1; }; sleep 3; done
echo "sandbox ready"

echo "== 5. Turn on OCSF JSON export (documented setting); it is accepted"
"$OS" settings set ocsf-repro --key ocsf_json_enabled --value true
sleep 15   # the supervisor polls settings every ~10 s

echo "== 6. Cause an OCSF event after the toggle (bash is not allowed out, so this is denied)"
# Bounded: a denied connection may be refused at once or held until it times out.
"$OS" sandbox exec --name ocsf-repro --timeout 30 -- timeout 5 bash -c 'exec 3<>/dev/tcp/example.com/443' 2>&1 | tail -1 || true
sleep 3

ID=$("$OS" sandbox get ocsf-repro -o json | python3 -c 'import sys,json;print(json.load(sys.stdin)["id"])')
LOG="$HOME/.local/state/openshell/vm-driver/sandboxes/$ID/supervisor.err.log"

echo "== 7. Supervisor log: the warning, the toggle, and the event"
sed 's/\x1b\[[0-9;]*m//g' "$LOG" | grep -E "Could not open /var/log|OCSF JSONL logging toggled|DENIED" | cut -c1-150

echo "== 8. Expected an openshell-ocsf.YYYY-MM-DD.log somewhere. Count of such files:"
echo "  host /var/log:            $(ls /var/log | grep -c openshell-ocsf || true)"
echo "  OpenShell state + repro:  $(find "$HOME/.local/state/openshell" "$P" -name 'openshell-ocsf*' | wc -l | tr -d ' ')"
echo "  inside the sandbox:       $("$OS" sandbox exec --name ocsf-repro -- bash -c 'ls /var/log | grep -c openshell-ocsf' 2>/dev/null || true)"
echo "  supervisor runs as:       $(ps -Ao user,command | grep '[h]ost-runtime/openshell-supervisor' | awk '{print $1}' | head -1)"
echo
echo "Cleanup: $OS sandbox delete ocsf-repro; kill \$(cat $P/var/gateway.pid);"
echo "         rm -rf $P ~/.config/openshell ~/.local/state/openshell"