Execute Harbor commands with Bash

[rgarcia]

summary

• execute Harbor commands through Bash instead of POSIX sh
• preserve Bash semantics used by installed-agent setup, including set -o pipefail

validation

• uv run ruff format --check .
• uv run ruff check .
• uv run ty check
• uv run pytest (13 passed)
• uv build

context

A provider-backed Harbor evaluation reached agent setup but failed before dispatch because Debian's /bin/sh rejected Harbor's Bash pipefail preamble.

---

Note

Low Risk
Narrow change to the shell wrapper for exec; low risk unless images lack Bash or scripts assumed strict POSIX sh semantics.

Overview
Hypeman exec now invokes /bin/bash -lc instead of /bin/sh -lc when running commands in the instance (workdir setup, agent commands, etc.).

This aligns remote execution with Harbor/agent setup scripts that rely on Bash features such as set -o pipefail, which Debian’s /bin/sh (dash) rejects and was breaking evaluations before dispatch.

Unit tests that assert the exec_async argv were updated to expect Bash; instance idle loop entrypoint and su … -s /bin/sh behavior are unchanged.

^{Reviewed by Cursor Bugbot for commit 8622acd. Bugbot is set up for automated code reviews on this repo. Configure here.}