Session ses_2652c4d5

title:	getsentry-devbox: devenv sync fails - .devenv/sync.py not found
state:	OPEN
author:	BYK (Burak Yigit Kaya)
labels:	
comments:	0
assignees:	
projects:	
milestone:	
number:	71
--
## Problem

On a fresh `getsentry-devbox` workspace, `devenv sync` fails with:

```
/workspace/getsentry/.devenv/sync.py not found!
```

The `devenv` tool (v1.28.0) looks for `.devenv/sync.py` (with dot prefix), but:
- **getsentry** stores its sync script at `devenv/sync.py` (no dot)
- **sentry** doesn't have a `.devenv/sync.py` at all

This means a fresh workspace cannot run `devenv sync` without manual intervention.

## Workaround

Create symlinks manually:

```bash
mkdir -p /workspace/getsentry/.devenv
ln -sf /workspace/getsentry/devenv/sync.py /workspace/getsentry/.devenv/sync.py

mkdir -p /workspace/sentry/.devenv
ln -sf /workspace/getsentry/devenv/sync.py /workspace/sentry/.devenv/sync.py
```

Also needs `~/.config/sentry-devenv/config.ini`:

```ini
[devenv]
coderoot = /workspace
```

After that, ...

total 16
drwxrwxr-x 1 byk byk  196 Apr 17 09:44 .
drwxrwxr-x 1 byk byk  532 Apr 17 09:43 ..
drwxrwxr-x 1 byk byk   18 Apr 17 09:43 coder
drwxrwxr-x 1 byk byk   16 Apr 17 09:43 .config
drwxrwxr-x 1 byk byk  130 Apr 17 09:43 getsentry
drwxrwxr-x 1 byk byk  154 Apr 17 09:44 .git
drwxrwxr-x 1 byk byk   18 Apr 17 09:43 .github
-rw-rw-r-- 1 byk byk   96 Apr 17 09:43 .gitignore
drwxrwxr-x 1 byk byk   30 Apr 17 09:43 helm
drwxr-xr-x 1 byk byk   10 Apr 17 09:44 .opencode
drwxrwxr-x 1 byk byk  170 Apr 17 09:43 packer
-rw-rw-r-- 1 byk byk 9372 Apr 17 09:43 README.md
drwxrwxr-x 1 byk byk  154 Apr 17 09:43 scripts
drwxrwxr-x 1 byk byk  116 Apr 17 09:43 sentry
drwxrwxr-x 1 byk byk   56 Apr 17 09:43 shared
drwxrwxr-x 1 byk byk   34 Apr 17 09:43 terraform

<path>/home/byk/Code/getsentry/devinfra-coder-infra</path>
<type>directory</type>
<entries>
.config/
.git/
.github/
.gitignore
.opencode/
coder/
getsentry/
helm/
packer/
README.md
scripts/
sentry/
shared/
terraform/

(14 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/getsentry</path>
<type>directory</type>
<entries>
sandbox-devserver.service
sandbox-startup.service
scripts/
startup.sh

(4 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/getsentry/startup.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: #
3: # Sandbox boot-time orchestrator.
4: # Reads GCE instance metadata to determine the desired branch and devservices
5: # mode, performs a maintenance sync if the branch has changed since the image
6: # was baked, then brings up devservices.
7: #
8: # This script is executed by sandbox-startup.service (systemd oneshot) on every
9: # boot as the "sentry" user.
10: #
11: set -euo pipefail
12: 
13: # shellcheck source=shared/lib/sandbox-common.sh
14: source /opt/sandbox/lib/sandbox-common.sh
15: 
16: BAKED_BRANCH_FILE="/opt/sandbox/.baked-branch"
17: MOCKS_LOADED_MARKER="/opt/sandbox/.mocks-loaded"
18: SENTRY_DIR="/workspace/sentry"
19: GETSENTRY_DIR="/workspace/getsentry"
20: VENV_BIN="/workspace/sentry/.venv/bin"
21: DEVENV_BIN="/workspace/sentry/.devenv/bin"
22: 
23: export PATH="${VENV_BIN}:${DEVENV_BIN}:/usr/local/bin:/usr/bin:/bin"
24: 
25: ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/coder</path>
<type>directory</type>
<entries>
templates/

(1 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/coder/templates</path>
<type>directory</type>
<entries>
prod/
staging/

(2 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/coder/templates/staging</path>
<type>directory</type>
<entries>
getsentry-devbox/
sentry-devbox/
snuba-devbox/

(3 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/coder/templates/staging/getsentry-devbox</path>
<type>directory</type>
<entries>
agent-startup.sh
main.tf

(2 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/coder/templates/staging/getsentry-devbox/agent-startup.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # Coder agent startup script for Getsentry sandbox workspaces.
5: # Docker containers auto-start from the snapshot, so we just need the devserver.
6: # Returns immediately — the Coder app healthcheck shows when port 8000 is ready.
7: # The agent runs as the sentry user (switched in the GCE startup-script).
8: 
9: cd /workspace/getsentry
10: 
11: # Disable commit signing — no SSH/GPG keys on the workspace
12: git config --global commit.gpgsign false
13: 
14: # Configure git to use GitHub token for push/pull
15: if [ -n "${GITHUB_TOKEN:-}" ]; then
16:     git config --global credential.helper store
17:     echo "https://x-access-token:${GITHUB_TOKEN}@github.com" > ~/.git-credentials
18:     chmod 600 ~/.git-credentials
19: fi
20: 
21: # Resolve a ref (branch, SHA, or GitHub PR URL) and check it ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/coder/templates/staging/getsentry-devbox/main.tf</path>
<type>file</type>
<content>
1: terraform {
2:   required_version = ">= 1.0"
3: 
4:   required_providers {
5:     google = {
6:       source  = "hashicorp/google"
7:       version = "~> 6.0"
8:     }
9:     coder = {
10:       source  = "coder/coder"
11:       version = "~> 2.0"
12:     }
13:   }
14: }
15: 
16: provider "google" {
17:   project = var.project_id
18:   region  = local.region
19: }
20: 
21: ###############################################################################
22: # Variables
23: ###############################################################################
24: 
25: variable "project_id" {
26:   type    = string
27:   default = "devinfra-remote-dev"
28: }
29: 
30: variable "zone" {
31:   type    = string
32:   default = "us-central1-a"
33: }
34: 
35: variable "anthropic_api_key" {
36:   type      = string
37:   sensitive = true
38:   default   = ""
39: ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/packer</path>
<type>directory</type>
<entries>
getsentry-sandbox.pkr.hcl
sentry-sandbox.pkr.hcl
snuba-sandbox.pkr.hcl
variables.pkr.hcl

(4 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/packer/getsentry-sandbox.pkr.hcl</path>
<type>file</type>
<content>
1: source "googlecompute" "getsentry-sandbox" {
2:   project_id            = var.project_id
3:   zone                  = var.zone
4:   service_account_email = "packer-ci@${var.project_id}.iam.gserviceaccount.com"
5:   source_image_family   = "ubuntu-2404-lts-amd64"
6:   machine_type        = "e2-standard-8"
7:   disk_size           = 100
8:   disk_type           = "pd-ssd"
9:   preemptible         = false
10:   ssh_username        = "packer"
11:   state_timeout       = "30m"
12:   instance_name       = "packer-getsentry-sandbox-${formatdate("YYYYMMDDhhmmss", timestamp())}"
13:   metadata = {
14:     enable-oslogin = "false"
15:   }
16: 
17:   image_name   = "getsentry-sandbox${var.image_family_suffix}-{{timestamp}}"
18:   image_family = "getsentry-sandbox${var.image_family_suffix}"
19:   image_labels = {
20:     team    = "devinfra"
21:     purpose = "sandbox"
22:   ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared</path>
<type>directory</type>
<entries>
lib/
scripts/
sentry-features.py

(3 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/scripts</path>
<type>directory</type>
<entries>
install-ide-support.sh
install-system-deps.sh
optimize-image.sh
run-devenv-sync.sh

(4 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/scripts/run-devenv-sync.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # run-devenv-sync.sh — Run devenv sync for sentry (and optionally getsentry)
5: #
6: # Runs as sentry user. Uses `devenv sync` — the same canonical setup path
7: # used by every Sentry developer.
8: #
9: # Set SYNC_GETSENTRY=1 to also sync getsentry after sentry. getsentry depends
10: # on sentry, but `devenv sync` does NOT auto-chain across repos — we must sync
11: # sentry first, then getsentry, as two explicit steps.
12: #
13: # After sync, runs `devservices up --mode ingest` to pull and cache all
14: # Docker images needed at boot time. devenv sync only uses `--mode migrations`
15: # which pulls postgres + redis. The ingest mode also pulls kafka, clickhouse,
16: # snuba, relay, and spotlight. ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/getsentry/scripts</path>
<type>directory</type>
<entries>
maintenance-sync.sh

(1 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/getsentry/scripts/maintenance-sync.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # maintenance-sync.sh — Post-boot synchronization for sandbox environments
5: #
6: # Called from startup.sh when the target branch differs from the baked
7: # image. Runs as the 'sentry' user.
8: #
9: # Usage: maintenance-sync.sh <branch> [sentry-ref]
10: #
11: # This script:
12: # 1. Fetches and checks out the target branch in getsentry
13: # 2. Syncs sentry repo to the commit pinned in getsentry/sentry-version
14: # 3. Runs devenv sync for both repos (deps, migrations, etc.)
15: 
16: BRANCH="${1:?Usage: maintenance-sync.sh <branch> [sentry-ref]}"
17: SENTRY_REF="${2:-}"
18: 
19: SENTRY_DIR="/workspace/sentry"
20: GETSENTRY_DIR="/workspace/getsentry"
21: 
22: export PATH="${SENTRY_DIR}/.venv/bin:${SENTRY_DIR}/.devenv/bin:/usr/local/bin:${PATH}"
23: 
24: # ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/scripts/install-system-deps.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # install-system-deps.sh — Install system-level dependencies for sandbox GCE images.
5: #
6: # This script runs as root during the Packer image build. It installs:
7: #   - Docker CE (from docker.io apt repo)
8: #   - uv (via astral.sh installer)
9: #   - Base build tools and libraries
10: #
11: # It also creates the 'sentry' user and the /workspace/sentry, /workspace/getsentry layout.
12: #
13: # Python, Node.js, and pnpm are NOT installed here — devenv sync handles those
14: # from devenv/config.ini and package.json, keeping versions in sync automatically. ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/lib</path>
<type>directory</type>
<entries>
sandbox-common.sh

(1 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/lib/sandbox-common.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: # shared/lib/sandbox-common.sh — Common utilities for sandbox startup scripts.
3: # Sourced by both sentry/startup.sh and getsentry/startup.sh at runtime.
4: 
5: METADATA_URL="http://metadata.google.internal/computeMetadata/v1/instance/attributes"
6: METADATA_HEADER="Metadata-Flavor: Google"
7: READY_MARKER="/tmp/sandbox-ready"
8: 
9: log() {
10:     echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*"
11: }
12: 
13: get_metadata() {
14:     local key="$1"
15:     local default="${2:-}"
16:     local value
17:     value=$(curl -sf -H "$METADATA_HEADER" "${METADATA_URL}/${key}" 2>/dev/null) || true
18:     echo "${value:-$default}"
19: }
20: 
21: clear_ready_marker() {
22:     rm -f "$READY_MARKER"
23: }
24: 
25: signal_ready() {
26:     touch "$READY_MARKER"
27:     log "Sandbox ready"
28: }

(End of file - total 28 lines)
</content>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/sentry</path>
<type>directory</type>
<entries>
sandbox-devserver.service
sandbox-startup.service
startup.sh

(3 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/sentry/startup.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # Called by sandbox-startup.service on every boot (including resume from stop).
5: # Reads GCE instance metadata to determine branch and mode, then starts services.
6: 
7: export PATH="/workspace/sentry/.venv/bin:/workspace/sentry/.devenv/bin:/usr/local/bin:/usr/bin:/bin"
8: export SENTRY_CONF="/home/sentry/.sentry/"
9: 
10: # shellcheck source=shared/lib/sandbox-common.sh
11: source /opt/sandbox/lib/sandbox-common.sh
12: 
13: cd /workspace/sentry
14: 
15: ###############################################################################
16: # Read GCE instance metadata
17: ###############################################################################
18: SANDBOX_BRANCH=$(get_metadata "SANDBOX_BRANCH" "")
19: SANDBOX_MODE=$(get_metadata "SANDBOX_MODE" "ingest")
20: 
21: log "Sandbox startup: branch=${SANDBOX_BRANCH:-<not set>} ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/packer/sentry-sandbox.pkr.hcl</path>
<type>file</type>
<content>
1: source "googlecompute" "sentry-sandbox" {
2:   project_id            = var.project_id
3:   zone                  = var.zone
4:   service_account_email = "packer-ci@${var.project_id}.iam.gserviceaccount.com"
5:   source_image_family   = "ubuntu-2404-lts-amd64"
6:   machine_type        = "e2-standard-8"
7:   disk_size           = 100
8:   disk_type           = "pd-ssd"
9:   preemptible         = false
10:   ssh_username        = "packer"
11:   state_timeout       = "30m"
12:   instance_name       = "packer-sentry-sandbox-${formatdate("YYYYMMDDhhmmss", timestamp())}"
13:   metadata = {
14:     enable-oslogin = "false"
15:   }
16: 
17:   image_name   = "sentry-sandbox${var.image_family_suffix}-{{timestamp}}"
18:   image_family = "sentry-sandbox${var.image_family_suffix}"
19:   image_labels = {
20:     team    = "devinfra"
21:     purpose = "sandbox"
22:   }
23: }
24: ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/.config</path>
<type>directory</type>
<entries>
sudo-gcp/

(1 entries)
</entries>

<path>/home/byk/Code/getsentry/devinfra-coder-infra/README.md</path>
<type>file</type>
<content>
1: # Sentry GCE Sandbox Image
2: 
3: Packer pipeline that produces a GCE machine image with a fully working Sentry dev environment. Cold start goes from 5-10 minutes to 30-90 seconds.
4: 
5: ## What's in the image
6: 
7: - System deps: Docker CE, Python 3.13.1, Node v22.16.0, uv 0.9.28, pnpm 10.10.0
8: - Sentry repo cloned to `/workspace/sentry` with Python and JS deps installed
9: - Pre-commit hooks downloaded
10: - Docker service images pre-pulled
11: - Databases created, migrations applied, superuser seeded (`admin@sentry.io` / `admin`)
12: - Systemd units for startup and devserver
13: 
14: ## How it works
15: 
16: The core setup uses `devenv sync` — the same canonical path every Sentry developer uses locally. The build scripts just install system-level prerequisites (Docker, Python, etc.) and then let devenv handle the rest. ...

(no output)

devenv/install-devenv.sh at main · getsentry/devenv · GitHub



  
  
  
  

    
  


  


    


  
  

  
  

    







  

  




    

  

    

    

      

      

    
    
    

      
  
  




      



        


  
  
  
  

  

      

    

  

  



    

    
  


  

  

  
  

  
  
  





  

  

  
    
      
      

    
      Skip to content

      
    
      
      
      



  
  






      

          

              

  Navigation Menu

  
    Toggle navigation
  

  
    
      
          
    
            
            
  

      

      
        
    

      

      
          
            Sign in
          
              
    
        
    

Appearance settings

      
        



  
  



      
    
  

      
    


    
      
            



  
  PlatformAI CODE CREATIONGitHub CopilotWrite better code with AIGitHub SparkBuild and deploy intelligent appsGitHub ModelsManage and compare promptsMCP RegistryNewIntegrate external toolsDEVELOPER ...

from __future__ import annotations

import contextlib
import importlib.util
import os
from collections.abc import Sequence

from devenv.constants import troubleshooting_help
from devenv.lib.context import Context
from devenv.lib.modules import DevModuleInfo
from devenv.lib.modules import require_repo


@require_repo
def main(context: Context, argv: Sequence[str] | None = None) -> int:
    repo = context["repo"]
    assert repo is not None

    if not os.path.exists(f"{repo.config_path}/sync.py"):
        print(f"{repo.config_path}/sync.py not found!")
        return 1

    repo.check_minimum_version()

    spec = importlib.util.spec_from_file_location(
        "sync", f"{repo.config_path}/sync.py"
    )

    module = importlib.util.module_from_spec(spec)  # type: ignore
    spec.loader.exec_module(module)  # type: ignore

    context_compat = {
        "reporoot": repo.path,
        "repo": repo.name,
        "coderoot": context.get("code_root"),
    }

    with ...

from __future__ import annotations

from collections.abc import Callable
from collections.abc import Sequence
from dataclasses import dataclass
from typing import TypeAlias

from devenv.lib.context import Context

ExitCode: TypeAlias = "str | int | None"

Action: TypeAlias = "Callable[[Context, Sequence[str] | None], ExitCode]"


@dataclass(frozen=True)
class DevModuleInfo:
    name: str
    command: str
    help: str
    action: Action


def require(var: str, message: str) -> Callable[[Action], Action]:
    def outer(main: Action) -> Action:
        def inner(context: Context, args: Sequence[str] | None) -> ExitCode:
            if context.get(var) is None:
                raise SystemExit(message)
            return main(context, args)

        return inner

    return outer


require_repo = require("repo", "This command requires a repository")

<!DOCTYPE html>
<html
  lang="en"
  
  data-color-mode="auto" data-light-theme="light" data-dark-theme="dark"
  data-a11y-animated-images="system" data-a11y-link-underlines="true"
  
  >




  <head>
    <meta charset="utf-8">
  <link rel="dns-prefetch" href="https://github.githubassets.com">
  <link rel="dns-prefetch" href="https://avatars.githubusercontent.com">
  <link rel="dns-prefetch" href="https://github-cloud.s3.amazonaws.com">
  <link rel="dns-prefetch" href="https://user-images.githubusercontent.com/">
  <link rel="preconnect" href="https://github.githubassets.com" crossorigin>
  <link rel="preconnect" href="https://avatars.githubusercontent.com">

  


  <link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubassets.com/assets/light-0c8222dcd7a4f9b7.css" /><link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubassets.com/assets/light_high_contrast-51c0c6e0c085cc0f.css" /><link crossorigin="anonymous" ...

from __future__ import annotations

from typing import TypedDict

from devenv.lib.repository import Repository


class Context(TypedDict):
    config_path: str
    code_root: str
    repo: Repository | None

from __future__ import annotations

import importlib
import os.path
from configparser import ConfigParser

from devenv import constants
from devenv.lib.config import get_config
from devenv.lib.fs import ensure_binroot


class Repository:
    def __init__(self, root: str) -> None:
        self.path = root
        self.name = os.path.basename(root)

        # .devenv may exist but not be config_path because .devenv/bin is hard-coded, so we check for config.ini
        if os.path.exists(f"{root}/.devenv/config.ini"):
            self.config_path = f"{root}/.devenv"
        # devenv _may_ exist but not be config_path because devenv has a devenv module, so we check for config.ini
        elif os.path.exists(f"{root}/devenv/config.ini"):
            self.config_path = f"{root}/devenv"
        else:
            # new default config_path is .devenv
            self.config_path = f"{root}/.devenv"

    def __repr__(self) -> str:
        return f"Repository: {self.name}"

    def ...

[{"name":"checks","path":"devenv/checks","sha":"96bca8068d0a244f51fb1687e4fcc6bf01eeb44e","size":0,"url":"https://api.github.com/repos/getsentry/getsentry/contents/devenv/checks?ref=master","html_url":"https://github.com/getsentry/getsentry/tree/master/devenv/checks","git_url":"https://api.github.com/repos/getsentry/getsentry/git/trees/96bca8068d0a244f51fb1687e4fcc6bf01eeb44e","download_url":null,"type":"dir","_links":{"self":"https://api.github.com/repos/getsentry/getsentry/contents/devenv/checks?ref=master","git":"https://api.github.com/repos/getsentry/getsentry/git/trees/96bca8068d0a244f51fb1687e4fcc6bf01eeb44e","html":"https://github.com/getsentry/getsentry/tree/master/devenv/checks"}},{"name":"config.ini","path":"devenv/config.ini","sha":"03d2d30204f46b8524509d0a95ccf19af7fb7c9f","size":30,"url":"https://api.github.com/repos/getsentry/getsentry/contents/devenv/config.ini?ref=master","html_url":"https://github.com/getsentry/getsentry/blob/master/devenv/config.ini","git_url":"https:...

[{"name":"config.ini","path":"devenv/config.ini","sha":"6d76611cf1e9175f22ede5426fbf10a700ac7260","size":971,"url":"https://api.github.com/repos/getsentry/sentry/contents/devenv/config.ini?ref=master","html_url":"https://github.com/getsentry/sentry/blob/master/devenv/config.ini","git_url":"https://api.github.com/repos/getsentry/sentry/git/blobs/6d76611cf1e9175f22ede5426fbf10a700ac7260","download_url":"https://raw.githubusercontent.com/getsentry/sentry/master/devenv/config.ini","type":"file","_links":{"self":"https://api.github.com/repos/getsentry/sentry/contents/devenv/config.ini?ref=master","git":"https://api.github.com/repos/getsentry/sentry/git/blobs/6d76611cf1e9175f22ede5426fbf10a700ac7260","html":"https://github.com/getsentry/sentry/blob/master/devenv/config.ini"}},{"name":"post_fetch.py","path":"devenv/post_fetch.py","sha":"1bf42bc4ee8d75e76c72d162798618feb193e0fc","size":2369,"url":"https://api.github.com/repos/getsentry/sentry/contents/devenv/post_fetch.py?ref=master","html_url...

{"name":"config.ini","path":"devenv/config.ini","sha":"03d2d30204f46b8524509d0a95ccf19af7fb7c9f","size":30,"url":"https://api.github.com/repos/getsentry/getsentry/contents/devenv/config.ini?ref=master","html_url":"https://github.com/getsentry/getsentry/blob/master/devenv/config.ini","git_url":"https://api.github.com/repos/getsentry/getsentry/git/blobs/03d2d30204f46b8524509d0a95ccf19af7fb7c9f","download_url":"https://raw.githubusercontent.com/getsentry/getsentry/master/devenv/config.ini?token=AAA66PHMCRF4SC3ZFDQILZ3J4IA4M","type":"symlink","target":"../../sentry/devenv/config.ini","_links":{"self":"https://api.github.com/repos/getsentry/getsentry/contents/devenv/config.ini?ref=master","git":"https://api.github.com/repos/getsentry/getsentry/git/blobs/03d2d30204f46b8524509d0a95ccf19af7fb7c9f","html":"https://github.com/getsentry/getsentry/blob/master/devenv/config.ini"}}

(no output)

0.0.0

(no output)

7243a14 make exernal contributor env var more clear (#228)
60ebf0c chore: pin GitHub Actions to full-length commit SHAs (#227)
61b276d ref: deprecate gcloud (#224)
46198c2 feat: replace tox with uv  (#225)
58c02f1 fix(ci): install uv on linux/bootstrap runner (#223)
e8982c9 Merge branch 'release/1.28.0'
4e3d4fe release: 1.28.0
626320a deprecate devenv-managed uv (#222)
2e9a469 Merge branch 'release/1.27.0'
189b778 release: 1.27.0
42b43c3 feat: better linux support  (#220)
3801bda Merge branch 'release/1.26.1'
fc8fbaa release: 1.26.1
217300d fix: diskfree typo (#221)
a8c4c9c Merge branch 'release/1.26.0'
def613f release: 1.26.0
b68e5e6 fix: overprovision cow disk and add a simple diskfree check (#219)
da9443d Update doctor command to fix broken Colima contexts (#215)
eb2f048 chore: Add Claude agent configuration (#217)
4c12599 ref(readme): add note about devenv colima start (#213)

46198c2 feat: replace tox with uv  (#225)
58cfc68 feat: require minimum devenv version for a repo (#163)
81112fd Removed explicit typing from Repository object properties.
2b5606d Remove Path type alias and use path.basename() instead of split().
5cf67bc Added new repository and context files; a couple of tweaks to tests for future compatibility

4559818 feat: troubleshooting docs (#175)
58cfc68 feat: require minimum devenv version for a repo (#163)
21226f7 fix: chdir to reporoot before syncing (#149)
7a8cc1e Add module definition; standardize method invocation; abstract subcommand interface
fe016ca ref: remove legacy venv (#88)
cddbedf feat: call repo-local sync if available (ops POC part 3/3) (#75)
bb63503 feat: lib.venv and multiple configurable venvs (ops POC part 1/3) (#71)
1ddfa2e test: fix macos-13 (#86)
16eba6e test: pin colima to 0.6.2 for ci (#85)
486c75d feat: repo-local colima (#81)
9e145f9 test: sync (#62)
3df45a2 feat: manage colima ourselves (#59)
cd7010c ref: beta test UX feedback (#50)
95a1c6f fix: just use install-py-dev for now (#46)
18d717a feat: move venv python to per-repo configuration (#32)
3be97cc ref: switch to using existing .venv and getsentry remains separate (#31)
f32053e Making devenv python 3.8 compatible (#30)
6a9ec2d install-devenv.sh: using packaging, virtualenv, pip (#26)

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/scripts/install-ide-support.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # install-ide-support.sh — Install IDE and developer tools
5: #
6: # Installs lightweight developer productivity tools for sandbox
7: # environments. Runs as root during image build.
8: 
9: echo "=== Installing IDE and developer tools ==="
10: 
11: export DEBIAN_FRONTEND=noninteractive
12: 
13: apt-get update -qq
14: 
15: apt-get install -y --no-install-recommends \
16:     ripgrep \
17:     fd-find \
18:     bat \
19:     jq \
20:     htop \
21:     tmux \
22:     postgresql-client \
23:     redis-tools
24: 
25: # Claude Code (AI-assisted coding)
26: # npm/node are installed by devenv sync under a non-standard path; use the
27: # symlinks we placed in /usr/local/bin during the chromedriver provisioner,
28: # falling back to the devenv path if running before that step. ...

from __future__ import annotations

import argparse
import os
from collections.abc import Sequence

from devenv import bootstrap
from devenv import colima
from devenv import doctor
from devenv import fetch
from devenv import pin_gha
from devenv import sync
from devenv import update
from devenv.constants import home
from devenv.constants import troubleshooting_help
from devenv.constants import user
from devenv.constants import version
from devenv.lib.config import read_config
from devenv.lib.context import Context
from devenv.lib.fs import gitroot
from devenv.lib.modules import DevModuleInfo
from devenv.lib.modules import ExitCode
from devenv.lib.repository import Repository


def devenv(argv: Sequence[str], config_path: str) -> ExitCode:
    # determine current repo, if applicable
    fake_reporoot = os.getenv("CI_DEVENV_INTEGRATION_FAKE_REPOROOT")
    if fake_reporoot:
        current_root = fake_reporoot
    else:
        try:
            current_root = gitroot()
        except ...

from __future__ import annotations

import os
import shlex
import subprocess
from typing import Optional

from devenv.constants import home
from devenv.constants import shell
from devenv.lib import proc


def zdotdir() -> str:
    # Note that we can't simply check os.environ; the most common way of setting
    # this value, via ~/.zshenv, results in a shell variable, not an env var.
    return subprocess.run(
        [shell, "-c", "echo $ZDOTDIR"], text=True, capture_output=True
    ).stdout.strip()


def shellrc() -> str:
    if shell == "zsh":
        # The user's .zshrc may not be in ~/ if they set ZDOTDIR. See man zsh(1)
        # for more details.
        dotfile = f"{home}/.zshrc"
        if not os.path.isfile(dotfile):
            dotdir = zdotdir()
            if dotdir != "":
                dotfile = f"{dotdir}/.zshrc"
        return dotfile
    if shell == "bash":
        return f"{home}/.bashrc"
    if shell == "fish":
        return f"{home}/.config/fish/config.fish"
    ...

from __future__ import annotations

import json
import os
import shlex
import shutil
import subprocess
import tempfile
import urllib.request
import zipfile

from devenv.lib import colima, config, fs, limactl, proc

from devenv import constants


# TODO: need to replace this with a nicer process executor in devenv.lib
def run_procs(
    repo: str,
    reporoot: str,
    venv_path: str,
    _procs: tuple[tuple[str, tuple[str, ...], dict[str, str]], ...],
    verbose: bool = False,
) -> bool:
    procs: list[tuple[str, tuple[str, ...], subprocess.Popen[bytes]]] = []

    stdout = subprocess.PIPE if not verbose else None
    stderr = subprocess.STDOUT if not verbose else None

    for name, cmd, extra_env in _procs:
        print(f"⏳ {name}")
        if constants.DEBUG:
            proc.xtrace(cmd)
        env = {
            **constants.user_environ,
            **proc.base_env,
            "VIRTUAL_ENV": venv_path,
            "PATH": ...

[build-system]
requires = ["setuptools>=61.0", "wheel"]
build-backend = "setuptools.build_meta"

[project]
name = "sentry_devenv"
version = "1.28.0"
authors = [
  { name="Joshua Li", email="joshua.li@sentry.io" },
  { name="Ian Woodard", email="ian.woodard@sentry.io" },
  { name="Buck Evan", email="buck.evan@sentry.io" },
]
description = "Utilities for setting up a Sentry development environment"
readme = "README.md"
requires-python = "==3.11.4"
classifiers = [
    "Programming Language :: Python :: 3",
    "License :: OSI Approved :: Apache Software License",
    "Operating System :: OS Independent",
]
dependencies = [
  "typing_extensions",
  "sentry-sdk",
]

[tool.setuptools.package-data]
"devenv" = ["py.typed"]

[tool.setuptools.packages]
find = {}

base64: invalid input

ZnJvbSBfX2Z1dHVyZV9fIGltcG9ydCBhbm5vdGF0aW9ucwoKaW1wb3J0IGlt
cG9ydGxpYgppbXBvcnQgb3MucGF0aApmcm9tIGNvbmZpZ3BhcnNlciBpbXBv
cnQgQ29uZmlnUGFyc2VyCgpmcm9tIGRldmVudiBpbXBvcnQgY29uc3RhbnRz
CmZyb20gZGV2ZW52LmxpYi5jb25maWcgaW1wb3J0IGdldF9jb25maWcKZnJv
bSBkZXZlbnYubGliLmZzIGltcG9ydCBlbnN1cmVfYmlucm9vdAoKCmNsYXNz

from __future__ import annotations

import importlib
import os.path
from configparser import ConfigParser

from devenv import constants
from devenv.lib.config import get_config
from devenv.lib.fs import ensure_binroot


class Repository:
    def __init__(self, root: str) -> None:
        self.path = root
        self.name = os.path.basename(root)

        # .devenv may exist but not be config_path because .devenv/bin is hard-coded, so we check for config.ini
        if os.path.exists(f"{root}/.devenv/config.ini"):
            self.config_path = f"{root}/.devenv"
        # devenv _may_ exist but not be config_path because devenv has a devenv module, so we check for config.ini
        elif os.path.exists(f"{root}/devenv/config.ini"):
            self.config_path = f"{root}/devenv"
        else:
            # new default config_path is .devenv
            self.config_path = f"{root}/.devenv"

    def __repr__(self) -> str:
        return f"Repository: {self.name}"

    def ...

[devenv]
minimum_version = 1.22.0

[node]
# upstream (https://nodejs.org/dist/) is not reliable enough
# ask someone in team-devinfra to upload for you
darwin_x86_64 = https://storage.googleapis.com/sentry-dev-infra-assets/node/node-v24.14.0-darwin-x64.tar.xz
darwin_x86_64_sha256 = c17b234c4db75eeb03c3a86664428ec25ee849e1ebbe8cb05c4a70f282187866
darwin_arm64 = https://storage.googleapis.com/sentry-dev-infra-assets/node/node-v24.14.0-darwin-arm64.tar.xz
darwin_arm64_sha256 = 448f01d4dfa5a21d280cfbacf00abc22b51aad52f38db0f4886e0e5d00df541d
linux_x86_64 = https://storage.googleapis.com/sentry-dev-infra-assets/node/node-v24.14.0-linux-x64.tar.xz
linux_x86_64_sha256 = 41cd79bb7877c81605a9e68ec4c91547774f46a40c67a17e34d7179ef11729df
linux_arm64 = https://storage.googleapis.com/sentry-dev-infra-assets/node/node-v24.14.0-linux-arm64.tar.xz
linux_arm64_sha256 = e7adfca03d9173276114a6f2219df1a7d25e1bfd6bbd771d3f839118a2053094
# used for autoupdate
version = v24.14.0

False

exists: False
islink: True

from __future__ import annotations

import contextlib
import importlib.util
import os
from collections.abc import Sequence

from devenv.constants import troubleshooting_help
from devenv.lib.context import Context
from devenv.lib.modules import DevModuleInfo
from devenv.lib.modules import require_repo


@require_repo
def main(context: Context, argv: Sequence[str] | None = None) -> int:
    repo = context["repo"]
    assert repo is not None

    if not os.path.exists(f"{repo.config_path}/sync.py"):
        print(f"{repo.config_path}/sync.py not found!")
        return 1

    repo.check_minimum_version()

    spec = importlib.util.spec_from_file_location(
        "sync", f"{repo.config_path}/sync.py"
    )

    module = importlib.util.module_from_spec(spec)  # type: ignore
    spec.loader.exec_module(module)  # type: ignore

    context_compat = {
        "reporoot": repo.path,
        "repo": repo.name,
        "coderoot": context.get("code_root"),
    }

    with ...

task_id: ses_2652420c0ffeE0HpEnAXVLPOy9 (for resuming to continue this task if needed)

<task_result>
I now have a comprehensive picture. Let me compile my findings.

---

# Investigation Findings: Issue #71 — `devenv sync` failure

## Summary of the root cause

The devenv tool (upstream code in `getsentry/devenv`) resolves `sync.py` this way (`devenv/lib/repository.py`):

```python
if os.path.exists(f"{root}/.devenv/config.ini"):
    self.config_path = f"{root}/.devenv"
elif os.path.exists(f"{root}/devenv/config.ini"):
    self.config_path = f"{root}/devenv"
else:
    # new default config_path is .devenv
    self.config_path = f"{root}/.devenv"
```

Then `devenv sync` runs `{config_path}/sync.py`.

So the tool DOES fall back to `devenv/config.ini` (no dot). The issue must be that **neither** `.devenv/config.ini` **nor** `devenv/config.ini` exists in the repo being synced. Confirmed via the GitHub API:

- `getsentry/devenv/config.ini` → **`type: symlink`** → target is ...

User has answered your questions: "The issue has three distinct gaps. Which should the fix address?"="Global devenv config (Recommended), Missing .devenv/sync.py symlinks (Recommended), tools.fast_editable after uv sync (Recommended)", "Where should the fix live — packer image build, boot-time startup, or both?"="Both packer + maintenance-sync.sh", "For the .devenv/sync.py content — symlink to devenv/sync.py or a copy?"="Symlinks (Recommended)", "The global devenv config — should coderoot be a static `/workspace` or computed from the current repo?"="Static /workspace (Recommended)". You can now continue with the user's answers in mind.

from __future__ import annotations

import configparser
import functools
import os
import sys
from collections.abc import Callable
from dataclasses import dataclass
from typing import TypeAlias

from devenv.constants import CI
from devenv.constants import MACHINE


@dataclass(frozen=True)
class ConfigOpt:
    name: str
    prompt: str
    formatter: Callable[[str], str] | None = None
    default: Callable[[], str] = lambda: ""


def _path_formatter(path: str) -> str:
    return os.path.normpath(os.path.expanduser(path))


CONFIG_OPTS = {
    "coderoot": ConfigOpt(
        "coderoot",
        "# please enter the root directory you want to work in",
        _path_formatter,
        lambda: "~/code",
    )
}

Config: TypeAlias = "dict[str, dict[str, str | None]]"


def initialize_config(config_path: str, defaults: Config) -> None:
    config = configparser.ConfigParser()

    # Read existing configuration, if present
    if os.path.exists(config_path):
        config.read(config_path)
   ...

from __future__ import annotations

import importlib
import os
import shlex
import subprocess

from devenv.lib import colima, fs, limactl, proc

from devenv import constants


# TODO: need to replace this with a nicer process executor in devenv.lib
def run_procs(
    reporoot: str,
    venv_path: str,
    _procs: tuple[tuple[str, tuple[str, ...], dict[str, str]], ...],
    verbose: bool = False,
) -> bool:
    procs: list[tuple[str, tuple[str, ...], subprocess.Popen[bytes]]] = []

    stdout = subprocess.PIPE if not verbose else None
    stderr = subprocess.STDOUT if not verbose else None

    for name, cmd, extra_env in _procs:
        print(f"⏳ {name}")
        if constants.DEBUG:
            proc.xtrace(cmd)
        env = {
            **constants.user_environ,
            **proc.base_env,
            "VIRTUAL_ENV": venv_path,
            "PATH": f"{venv_path}/bin:{reporoot}/.devenv/bin:{proc.base_path}",
        }
        if extra_env:
            env = {**env, **extra_env}
       ...

124:                "getsentry fast_editable",
125:                ("python3", "-m", "tools.fast_editable", "--path", "../getsentry"),

    return parsed_version >= parsed_minimum_version


def main(context: dict[str, str]) -> int:
    minimum_version = "1.14.2"
    if not check_minimum_version(minimum_version):
        raise SystemExit(
            f"""
Hi! To reduce potential breakage we've defined a minimum
devenv version ({minimum_version}) to run sync.

Please run the following to update your global devenv:

devenv update

Then, use it to run sync this one time.

{constants.root}/bin/devenv sync
"""
        )

    reporoot = context["reporoot"]

    # TODO: context["verbose"]
    verbose = os.environ.get("SENTRY_DEVENV_VERBOSE") is not None

    if constants.DARWIN and os.path.exists(f"{constants.root}/bin/colima"):
        binroot = f"{reporoot}/.devenv/bin"
        colima.uninstall(binroot)
        limactl.uninstall(binroot)

    # no more imports from devenv past this point! ...

task_id: ses_2651b734effeKG3AusI2RdEkfm (for resuming to continue this task if needed)

<task_result>
I have all the context I need. Here's the plan:

---

# Implementation Plan for Issue #71

## Goal

Make `devenv sync` robust on fresh and long-lived `getsentry-devbox`, `sentry-devbox`, and `snuba-devbox` workspaces by:

1. Baking a global `~/.config/sentry-devenv/config.ini` so `devenv` can resolve `coderoot` from any cwd.
2. Baking `.devenv/config.ini` and `.devenv/sync.py` symlinks inside every repo so devenv's first-priority lookup always succeeds — even on old branches, dangling `devenv/config.ini` symlinks (getsentry → sentry), or when the user runs `devenv sync` from `.devenv/` mid-bootstrap.
3. Re-asserting both on every boot through `maintenance-sync.sh` (getsentry) and `startup.sh` (sentry), since branch checkouts, disk re-attaches, or volume restores can wipe them.

No Fix 3 code change. The boot-time `fast_editable` restore already exists in `getsentry/startup.sh` lines ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/packer/snuba-sandbox.pkr.hcl</path>
<type>file</type>
<content>
1: source "googlecompute" "snuba-sandbox" {
2:   project_id            = var.project_id
3:   zone                  = var.zone
4:   service_account_email = "packer-ci@${var.project_id}.iam.gserviceaccount.com"
5:   source_image_family   = "ubuntu-2404-lts-amd64"
6:   machine_type        = "e2-standard-4"
7:   disk_size           = 75
8:   disk_type           = "pd-ssd"
9:   preemptible         = false
10:   ssh_username        = "packer"
11:   state_timeout       = "30m"
12:   instance_name       = "packer-snuba-sandbox-${formatdate("YYYYMMDDhhmmss", timestamp())}"
13:   metadata = {
14:     enable-oslogin = "false"
15:   }
16: 
17:   image_name   = "snuba-sandbox${var.image_family_suffix}-{{timestamp}}"
18:   image_family = "snuba-sandbox${var.image_family_suffix}"
19:   image_labels = {
20:     team    = "devinfra"
21:     purpose = "sandbox"
22:   }
23: }
24: 
25: ...

{"name":"config.ini","path":"devenv/config.ini","sha":"ab5b797ee391f27562444b9bb6427a2c926223fb","size":34,"url":"https://api.github.com/repos/getsentry/snuba/contents/devenv/config.ini?ref=master","html_url":"https://github.com/getsentry/snuba/blob/master/devenv/config.ini","git_url":"https://api.github.com/repos/getsentry/snuba/git/blobs/ab5b797ee391f27562444b9bb6427a2c926223fb","download_url":"https://raw.githubusercontent.com/getsentry/snuba/master/devenv/config.ini","type":"file","content":"W2RldmVudl0KbWluaW11bV92ZXJzaW9uID0gMS4yMi4xCg==\n","encoding":"base64","_links":{"self":"https://api.github.com/repos/getsentry/snuba/contents/devenv/config.ini?ref=master","git":"https://api.github.com/repos/getsentry/snuba/git/blobs/ab5b797ee391f27562444b9bb6427a2c926223fb","html":"https://github.com/getsentry/snuba/blob/master/devenv/config.ini"}}---
{"name":"sync.py","path":"devenv/sync.py","sha":"370bb0e928ce395cea59ca68253472e4bd9cad62","size":1414,"url":"https://api.github.com/repos/get...

.mypy_cache
.devenv
.yalc/
---getsentry---
trace
.devenv
env
---snuba---

Found 11 matches
/home/byk/Code/getsentry/devinfra-coder-infra/packer/getsentry-sandbox.pkr.hcl:
  Line 30:     script          = "shared/scripts/install-system-deps.sh"

  Line 88:     script            = "shared/scripts/run-devenv-sync.sh"

  Line 170:     script          = "shared/scripts/install-ide-support.sh"

  Line 200:     script          = "shared/scripts/optimize-image.sh"


/home/byk/Code/getsentry/devinfra-coder-infra/packer/sentry-sandbox.pkr.hcl:
  Line 30:     script          = "shared/scripts/install-system-deps.sh"

  Line 78:     script          = "shared/scripts/run-devenv-sync.sh"

  Line 116:     script          = "shared/scripts/install-ide-support.sh"

  Line 145:     script          = "shared/scripts/optimize-image.sh"


/home/byk/Code/getsentry/devinfra-coder-infra/packer/snuba-sandbox.pkr.hcl:
  Line 30:     script          = "shared/scripts/install-system-deps.sh"

  Line 127:     script          = "shared/scripts/install-ide-support.sh"

  Line 144:     ...

Wrote file successfully.

[
  {
    "content": "Add helpers to shared/lib/sandbox-common.sh",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add bootstrap block to shared/scripts/run-devenv-sync.sh",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add Section 0 + per-checkout re-asserts to getsentry/scripts/maintenance-sync.sh",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add bootstrap + per-checkout re-assert to sentry/startup.sh",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add inline bootstrap to packer/snuba-sandbox.pkr.hcl",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add Troubleshooting section to README.md",
    "status": "pending",
    "priority": "medium"
  },
  {
    "content": "Verify syntax (bash -n, shellcheck, packer validate)",
    "status": "pending",
    "priority": "medium"
  }
]

[
  {
    "content": "Add helpers to shared/lib/sandbox-common.sh",
    "status": "in_progress",
    "priority": "high"
  },
  {
    "content": "Add bootstrap block to shared/scripts/run-devenv-sync.sh",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add Section 0 + per-checkout re-asserts to getsentry/scripts/maintenance-sync.sh",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add bootstrap + per-checkout re-assert to sentry/startup.sh",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add inline bootstrap to packer/snuba-sandbox.pkr.hcl",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add Troubleshooting section to README.md",
    "status": "pending",
    "priority": "medium"
  },
  {
    "content": "Verify syntax (bash -n, shellcheck, packer validate)",
    "status": "pending",
    "priority": "medium"
  }
]

Edit applied successfully.

[
  {
    "content": "Add helpers to shared/lib/sandbox-common.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap block to shared/scripts/run-devenv-sync.sh",
    "status": "in_progress",
    "priority": "high"
  },
  {
    "content": "Add Section 0 + per-checkout re-asserts to getsentry/scripts/maintenance-sync.sh",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add bootstrap + per-checkout re-assert to sentry/startup.sh",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add inline bootstrap to packer/snuba-sandbox.pkr.hcl",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add Troubleshooting section to README.md",
    "status": "pending",
    "priority": "medium"
  },
  {
    "content": "Verify syntax (bash -n, shellcheck, packer validate)",
    "status": "pending",
    "priority": "medium"
  }
]

Edit applied successfully.

[
  {
    "content": "Add helpers to shared/lib/sandbox-common.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap block to shared/scripts/run-devenv-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add Section 0 + per-checkout re-asserts to getsentry/scripts/maintenance-sync.sh",
    "status": "in_progress",
    "priority": "high"
  },
  {
    "content": "Add bootstrap + per-checkout re-assert to sentry/startup.sh",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add inline bootstrap to packer/snuba-sandbox.pkr.hcl",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add Troubleshooting section to README.md",
    "status": "pending",
    "priority": "medium"
  },
  {
    "content": "Verify syntax (bash -n, shellcheck, packer validate)",
    "status": "pending",
    "priority": "medium"
  }
]

<path>/home/byk/Code/getsentry/devinfra-coder-infra/getsentry/scripts/maintenance-sync.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # maintenance-sync.sh — Post-boot synchronization for sandbox environments
5: #
6: # Called from startup.sh when the target branch differs from the baked
7: # image. Runs as the 'sentry' user.
8: #
9: # Usage: maintenance-sync.sh <branch> [sentry-ref]
10: #
11: # This script:
12: # 1. Fetches and checks out the target branch in getsentry
13: # 2. Syncs sentry repo to the commit pinned in getsentry/sentry-version
14: # 3. Runs devenv sync for both repos (deps, migrations, etc.)
15: 
16: BRANCH="${1:?Usage: maintenance-sync.sh <branch> [sentry-ref]}"
17: SENTRY_REF="${2:-}"
18: 
19: SENTRY_DIR="/workspace/sentry"
20: GETSENTRY_DIR="/workspace/getsentry"
21: 
22: export PATH="${SENTRY_DIR}/.venv/bin:${SENTRY_DIR}/.devenv/bin:/usr/local/bin:${PATH}"
23: 
24: # ...

Edit applied successfully.

Edit applied successfully.

Edit applied successfully.

[
  {
    "content": "Add helpers to shared/lib/sandbox-common.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap block to shared/scripts/run-devenv-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add Section 0 + per-checkout re-asserts to getsentry/scripts/maintenance-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap + per-checkout re-assert to sentry/startup.sh",
    "status": "in_progress",
    "priority": "high"
  },
  {
    "content": "Add inline bootstrap to packer/snuba-sandbox.pkr.hcl",
    "status": "pending",
    "priority": "high"
  },
  {
    "content": "Add Troubleshooting section to README.md",
    "status": "pending",
    "priority": "medium"
  },
  {
    "content": "Verify syntax (bash -n, shellcheck, packer validate)",
    "status": "pending",
    "priority": "medium"
  }
]

<path>/home/byk/Code/getsentry/devinfra-coder-infra/sentry/startup.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # Called by sandbox-startup.service on every boot (including resume from stop).
5: # Reads GCE instance metadata to determine branch and mode, then starts services.
6: 
7: export PATH="/workspace/sentry/.venv/bin:/workspace/sentry/.devenv/bin:/usr/local/bin:/usr/bin:/bin"
8: export SENTRY_CONF="/home/sentry/.sentry/"
9: 
10: # shellcheck source=shared/lib/sandbox-common.sh
11: source /opt/sandbox/lib/sandbox-common.sh
12: 
13: cd /workspace/sentry
14: 
15: ###############################################################################
16: # Read GCE instance metadata
17: ###############################################################################
18: SANDBOX_BRANCH=$(get_metadata "SANDBOX_BRANCH" "")
19: SANDBOX_MODE=$(get_metadata "SANDBOX_MODE" "ingest")
20: 
21: log "Sandbox startup: branch=${SANDBOX_BRANCH:-<not set>} ...

Edit applied successfully.

Edit applied successfully.

[
  {
    "content": "Add helpers to shared/lib/sandbox-common.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap block to shared/scripts/run-devenv-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add Section 0 + per-checkout re-asserts to getsentry/scripts/maintenance-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap + per-checkout re-assert to sentry/startup.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add inline bootstrap to packer/snuba-sandbox.pkr.hcl",
    "status": "in_progress",
    "priority": "high"
  },
  {
    "content": "Add Troubleshooting section to README.md",
    "status": "pending",
    "priority": "medium"
  },
  {
    "content": "Verify syntax (bash -n, shellcheck, packer validate)",
    "status": "pending",
    "priority": "medium"
  }
]

<path>/home/byk/Code/getsentry/devinfra-coder-infra/packer/snuba-sandbox.pkr.hcl</path>
<type>file</type>
<content>
73:   # 5. devenv sync for snuba + build Rust extension (as sentry user)
74:   provisioner "shell" {
75:     inline = [
76:       <<-EOF
77:       set -euo pipefail
78:       export PATH="/home/linuxbrew/.linuxbrew/bin:/usr/local/bin:$HOME/.cargo/bin:$PATH"
79: 
80:       # Install devenv
81:       curl -fsSL https://raw.githubusercontent.com/getsentry/devenv/main/install-devenv.sh -o /tmp/install-devenv.sh
82:       CI=1 bash /tmp/install-devenv.sh
83:       export PATH="$HOME/.local/share/sentry-devenv/bin:$PATH"
84: 
85:       # devenv sync (installs Python, creates venv, installs deps via brew bundle)
86:       cd /workspace/snuba
87:       SENTRY_DEVENV_VERBOSE=1 devenv sync
88: 
89:       # Build Rust extension (rust_snuba via maturin)
90:       export PATH="/workspace/snuba/.venv/bin:$PATH"
91:       make install-rs-dev
92: 
93:       # Cache Docker images for ...

Edit applied successfully.

[
  {
    "content": "Add helpers to shared/lib/sandbox-common.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap block to shared/scripts/run-devenv-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add Section 0 + per-checkout re-asserts to getsentry/scripts/maintenance-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap + per-checkout re-assert to sentry/startup.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add inline bootstrap to packer/snuba-sandbox.pkr.hcl",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add Troubleshooting section to README.md",
    "status": "in_progress",
    "priority": "medium"
  },
  {
    "content": "Verify syntax (bash -n, shellcheck, packer validate)",
    "status": "pending",
    "priority": "medium"
  }
]

<path>/home/byk/Code/getsentry/devinfra-coder-infra/README.md</path>
<type>file</type>
<content>
75: 
76: ## Version pinning
77: 
78: Tool versions come from the same sources used by local dev:
79: 
80: - `devenv/config.ini` — Node, uv
81: - `package.json` `packageManager` field — pnpm
82: - Python version matches what's in the venv
83: 
84: ## File overview
85: 
86: ```
87: devinfra-coder-infra/
88: ├── .github/
89: │   └── workflows/
90: │       └── packer-build.yml              # Scheduled Packer image build (matrix: sentry + getsentry + snuba)
91: ├── packer/
92: │   ├── variables.pkr.hcl                 # Shared plugin config and variables
93: │   ├── sentry-sandbox.pkr.hcl            # Sentry image build
94: │   ├── getsentry-sandbox.pkr.hcl         # Getsentry image build

(Showing lines 75-94 of 233. Use offset=95 to continue.)
</content>

Edit applied successfully.

[
  {
    "content": "Add helpers to shared/lib/sandbox-common.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap block to shared/scripts/run-devenv-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add Section 0 + per-checkout re-asserts to getsentry/scripts/maintenance-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap + per-checkout re-assert to sentry/startup.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add inline bootstrap to packer/snuba-sandbox.pkr.hcl",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add Troubleshooting section to README.md",
    "status": "completed",
    "priority": "medium"
  },
  {
    "content": "Verify syntax (bash -n, shellcheck, packer validate)",
    "status": "in_progress",
    "priority": "medium"
  }
]

OK: sandbox-common.sh

OK: run-devenv-sync.sh

OK: maintenance-sync.sh

OK: sentry/startup.sh

OK: getsentry/startup.sh

shellcheck not installed

packer not installed

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/lib/sandbox-common.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: # shared/lib/sandbox-common.sh — Common utilities for sandbox startup scripts.
3: # Sourced by both sentry/startup.sh and getsentry/startup.sh at runtime.
4: 
5: METADATA_URL="http://metadata.google.internal/computeMetadata/v1/instance/attributes"
6: METADATA_HEADER="Metadata-Flavor: Google"
7: READY_MARKER="/tmp/sandbox-ready"
8: 
9: log() {
10:     echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*"
11: }
12: 
13: get_metadata() {
14:     local key="$1"
15:     local default="${2:-}"
16:     local value
17:     value=$(curl -sf -H "$METADATA_HEADER" "${METADATA_URL}/${key}" 2>/dev/null) || true
18:     echo "${value:-$default}"
19: }
20: 
21: clear_ready_marker() {
22:     rm -f "$READY_MARKER"
23: }
24: 
25: signal_ready() {
26:     touch "$READY_MARKER"
27:     log "Sandbox ready"
28: }
29: 
30: # ── devenv bootstrap helpers (see issue #71) ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/scripts/run-devenv-sync.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # run-devenv-sync.sh — Run devenv sync for sentry (and optionally getsentry)
5: #
6: # Runs as sentry user. Uses `devenv sync` — the same canonical setup path
7: # used by every Sentry developer.
8: #
9: # Set SYNC_GETSENTRY=1 to also sync getsentry after sentry. getsentry depends
10: # on sentry, but `devenv sync` does NOT auto-chain across repos — we must sync
11: # sentry first, then getsentry, as two explicit steps.
12: #
13: # After sync, runs `devservices up --mode ingest` to pull and cache all
14: # Docker images needed at boot time. devenv sync only uses `--mode migrations`
15: # which pulls postgres + redis. The ingest mode also pulls kafka, clickhouse,
16: # snuba, relay, and spotlight. ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/getsentry/scripts/maintenance-sync.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # maintenance-sync.sh — Post-boot synchronization for sandbox environments
5: #
6: # Called from startup.sh when the target branch differs from the baked
7: # image. Runs as the 'sentry' user.
8: #
9: # Usage: maintenance-sync.sh <branch> [sentry-ref]
10: #
11: # This script:
12: # 1. Fetches and checks out the target branch in getsentry
13: # 2. Syncs sentry repo to the commit pinned in getsentry/sentry-version
14: # 3. Runs devenv sync for both repos (deps, migrations, etc.)
15: 
16: BRANCH="${1:?Usage: maintenance-sync.sh <branch> [sentry-ref]}"
17: SENTRY_REF="${2:-}"
18: 
19: SENTRY_DIR="/workspace/sentry"
20: GETSENTRY_DIR="/workspace/getsentry"
21: 
22: export PATH="${SENTRY_DIR}/.venv/bin:${SENTRY_DIR}/.devenv/bin:/usr/local/bin:${PATH}"
23: 
24: # ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/sentry/startup.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # Called by sandbox-startup.service on every boot (including resume from stop).
5: # Reads GCE instance metadata to determine branch and mode, then starts services.
6: 
7: export PATH="/workspace/sentry/.venv/bin:/workspace/sentry/.devenv/bin:/usr/local/bin:/usr/bin:/bin"
8: export SENTRY_CONF="/home/sentry/.sentry/"
9: 
10: # shellcheck source=shared/lib/sandbox-common.sh
11: source /opt/sandbox/lib/sandbox-common.sh
12: 
13: # Bootstrap devenv config + in-repo .devenv symlinks (see issue #71)
14: ensure_global_devenv_config
15: ensure_repo_devenv_symlinks /workspace/sentry
16: 
17: cd /workspace/sentry
18: 
19: ###############################################################################
20: # Read GCE instance metadata
21: ###############################################################################
22: ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/packer/snuba-sandbox.pkr.hcl</path>
<type>file</type>
<content>
73:   # 5. devenv sync for snuba + build Rust extension (as sentry user)
74:   provisioner "shell" {
75:     inline = [
76:       <<-EOF
77:       set -euo pipefail
78:       export PATH="/home/linuxbrew/.linuxbrew/bin:/usr/local/bin:$HOME/.cargo/bin:$PATH"
79: 
80:       # Install devenv
81:       curl -fsSL https://raw.githubusercontent.com/getsentry/devenv/main/install-devenv.sh -o /tmp/install-devenv.sh
82:       CI=1 bash /tmp/install-devenv.sh
83:       export PATH="$HOME/.local/share/sentry-devenv/bin:$PATH"
84: 
85:       # Bootstrap devenv config + in-repo .devenv symlinks (issue #71)
86:       mkdir -p "$HOME/.config/sentry-devenv"
87:       printf '%s\n' '[devenv]' 'coderoot = /workspace' \
88:           > "$HOME/.config/sentry-devenv/config.ini"
89:       mkdir -p /workspace/snuba/.devenv
90:       ln -sfn ../devenv/config.ini ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/getsentry/startup.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: #
3: # Sandbox boot-time orchestrator.
4: # Reads GCE instance metadata to determine the desired branch and devservices
5: # mode, performs a maintenance sync if the branch has changed since the image
6: # was baked, then brings up devservices.
7: #
8: # This script is executed by sandbox-startup.service (systemd oneshot) on every
9: # boot as the "sentry" user.
10: #
11: set -euo pipefail
12: 
13: # shellcheck source=shared/lib/sandbox-common.sh
14: source /opt/sandbox/lib/sandbox-common.sh
15: 
16: BAKED_BRANCH_FILE="/opt/sandbox/.baked-branch"
17: MOCKS_LOADED_MARKER="/opt/sandbox/.mocks-loaded"
18: SENTRY_DIR="/workspace/sentry"
19: GETSENTRY_DIR="/workspace/getsentry"
20: VENV_BIN="/workspace/sentry/.venv/bin"
21: DEVENV_BIN="/workspace/sentry/.devenv/bin"
22: 
23: export PATH="${VENV_BIN}:${DEVENV_BIN}:/usr/local/bin:/usr/bin:/bin"
24: 
25: ...

Edit applied successfully.

OK

<path>/home/byk/Code/getsentry/devinfra-coder-infra/getsentry/startup.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: #
3: # Sandbox boot-time orchestrator.
4: # Reads GCE instance metadata to determine the desired branch and devservices
5: # mode, performs a maintenance sync if the branch has changed since the image
6: # was baked, then brings up devservices.
7: #
8: # This script is executed by sandbox-startup.service (systemd oneshot) on every
9: # boot as the "sentry" user.
10: #
11: set -euo pipefail
12: 
13: # shellcheck source=shared/lib/sandbox-common.sh
14: source /opt/sandbox/lib/sandbox-common.sh
15: 
16: # Bootstrap devenv config + in-repo .devenv symlinks (see issue #71)
17: ensure_global_devenv_config
18: ensure_repo_devenv_symlinks /workspace/sentry
19: ensure_repo_devenv_symlinks /workspace/getsentry
20: 
21: BAKED_BRANCH_FILE="/opt/sandbox/.baked-branch"
22: MOCKS_LOADED_MARKER="/opt/sandbox/.mocks-loaded"
23: SENTRY_DIR="/workspace/sentry"
24: ...

 README.md                             | 33 +++++++++++++++++++++++++++++++++
 getsentry/scripts/maintenance-sync.sh | 16 ++++++++++++++++
 getsentry/startup.sh                  |  5 +++++
 packer/snuba-sandbox.pkr.hcl          |  8 ++++++++
 sentry/startup.sh                     |  5 +++++
 shared/lib/sandbox-common.sh          | 22 ++++++++++++++++++++++
 shared/scripts/run-devenv-sync.sh     | 24 ++++++++++++++++++++++++
 7 files changed, 113 insertions(+)

diff --git a/README.md b/README.md
index d9baba3..7f50a2a 100644
--- a/README.md
+++ b/README.md
@@ -81,6 +81,39 @@ Tool versions come from the same sources used by local dev:
 - `package.json` `packageManager` field — pnpm
 - Python version matches what's in the venv
 
+## Troubleshooting
+
+### `devenv sync` fails with `.devenv/sync.py not found!`
+
+The sandbox image bakes `.devenv/config.ini` and `.devenv/sync.py` symlinks
+into each repo, plus a global `~/.config/sentry-devenv/config.ini`. If these
+are missing (e.g. after `rm -rf .devenv`), either reboot the workspace
+(the boot scripts re-assert them) or restore manually:
+
+```bash
+mkdir -p /workspace/sentry/.devenv /workspace/getsentry/.devenv
+ln -sfn ../devenv/config.ini /workspace/sentry/.devenv/config.ini
+ln -sfn ../devenv/sync.py    /workspace/sentry/.devenv/sync.py
+ln -sfn ../devenv/config.ini /workspace/getsentry/.devenv/config.ini
+ln -sfn ../devenv/sync.py    /workspace/getsentry/.devenv/sync.py
+
+mkdir -p ...

[
  {
    "content": "Add helpers to shared/lib/sandbox-common.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap block to shared/scripts/run-devenv-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add Section 0 + per-checkout re-asserts to getsentry/scripts/maintenance-sync.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap + per-checkout re-assert to sentry/startup.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add bootstrap to getsentry/startup.sh",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add inline bootstrap to packer/snuba-sandbox.pkr.hcl",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Add Troubleshooting section to README.md",
    "status": "completed",
    "priority": "medium"
  },
  {
    "content": "Verify syntax (bash -n, shellcheck, packer validate)",
    ...

main

98de96f Merge pull request #70 from getsentry/hubertdeng/sentry-sudo
3c48aef Grant sentry user passwordless sudo
295d9bd Merge pull request #69 from getsentry/hubertdeng/packer-ci-fix
2167763 Use packer-ci SA on builder VMs
37afb50 Merge pull request #68 from getsentry/hubertdeng/coder-migration-prod-followup
939f379 Fix prod NEG zones (us-central1-c not us-central1-f)
cfab1c5 Remove orphaned startup.sh.tftpl (vm.tf was deleted)
d96b41a Merge remote-tracking branch 'origin/main' into hubertdeng/coder-migration-prod-followup
4ff705d Merge pull request #67 from getsentry/hubertdeng/coder-migration-shared-staging
bf72647 Fix TARGET_SERVICE_ACCOUNT computed before arg parsing

 README.md                             | 33 +++++++++++++++++++++++++++++++++
 getsentry/scripts/maintenance-sync.sh | 16 ++++++++++++++++
 getsentry/startup.sh                  |  5 +++++
 packer/snuba-sandbox.pkr.hcl          |  8 ++++++++
 sentry/startup.sh                     |  5 +++++
 shared/lib/sandbox-common.sh          | 22 ++++++++++++++++++++++
 shared/scripts/run-devenv-sync.sh     | 24 ++++++++++++++++++++++++
 7 files changed, 113 insertions(+)

On branch main
Your branch is up to date with 'origin/main'.

Changes not staged for commit:
  (use "git add <file>..." to update what will be committed)
  (use "git restore <file>..." to discard changes in working directory)
	modified:   README.md
	modified:   getsentry/scripts/maintenance-sync.sh
	modified:   getsentry/startup.sh
	modified:   packer/snuba-sandbox.pkr.hcl
	modified:   sentry/startup.sh
	modified:   shared/lib/sandbox-common.sh
	modified:   shared/scripts/run-devenv-sync.sh

Untracked files:
  (use "git add <file>..." to include in what will be committed)
	.opencode/
	AGENTS.md

no changes added to commit (use "git add" and/or "git commit -a")

Switched to a new branch 'byk/fix-devenv-sync-symlinks'
M	README.md
M	getsentry/scripts/maintenance-sync.sh
M	getsentry/startup.sh
M	packer/snuba-sandbox.pkr.hcl
M	sentry/startup.sh
M	shared/lib/sandbox-common.sh
M	shared/scripts/run-devenv-sync.sh
branch 'byk/fix-devenv-sync-symlinks' set up to track 'origin/main'.

(no output)

[byk/fix-devenv-sync-symlinks 0ecb838] fix: bootstrap devenv .devenv symlinks to prevent sync.py not found
 8 files changed, 134 insertions(+)
 create mode 100644 AGENTS.md

(no output)

# Fix `devenv sync` on fresh devbox workspaces (issue #71)

## Problem

On a fresh `getsentry-devbox` workspace, `devenv sync` fails with:

remote: 
remote: Create a pull request for 'byk/fix-devenv-sync-symlinks' on GitHub by visiting:        
remote:      https://github.com/getsentry/devinfra-coder-infra/pull/new/byk/fix-devenv-sync-symlinks        
remote: 
To https://github.com/getsentry/devinfra-coder-infra.git
 * [new branch]      byk/fix-devenv-sync-symlinks -> byk/fix-devenv-sync-symlinks
branch 'byk/fix-devenv-sync-symlinks' set up to track 'origin/byk/fix-devenv-sync-symlinks'.
To https://github.com/getsentry/devinfra-coder-infra.git
 * [new reference]   refs/notes/commits -> refs/notes/commits

Warning: 1 uncommitted change
https://github.com/getsentry/devinfra-coder-infra/pull/72

72

IN_PROGRESS	Seer Code Review
IN_PROGRESS	Cursor Bugbot
SUCCESS	Secret Scan
SUCCESS	warden
IN_PROGRESS	semgrep-cloud-platform/scan

IN_PROGRESS	Seer Code Review
IN_PROGRESS	Cursor Bugbot
SUCCESS	Secret Scan
SUCCESS	warden
SUCCESS	semgrep-cloud-platform/scan

IN_PROGRESS	Seer Code Review
IN_PROGRESS	Cursor Bugbot
SUCCESS	Secret Scan
SUCCESS	warden
SUCCESS	semgrep-cloud-platform/scan

SUCCESS	Seer Code Review
IN_PROGRESS	Cursor Bugbot
SUCCESS	Secret Scan
SUCCESS	warden
SUCCESS	semgrep-cloud-platform/scan

SUCCESS	Seer Code Review
IN_PROGRESS	Cursor Bugbot
SUCCESS	Secret Scan
SUCCESS	warden
SUCCESS	semgrep-cloud-platform/scan

SUCCESS	Seer Code Review
IN_PROGRESS	Cursor Bugbot
SUCCESS	Secret Scan
SUCCESS	warden
SUCCESS	semgrep-cloud-platform/scan

SUCCESS	Seer Code Review
NEUTRAL	Cursor Bugbot
SUCCESS	Secret Scan
SUCCESS	warden
SUCCESS	semgrep-cloud-platform/scan

(no output)

[{"body":"### Duplicated function definition risks future divergence\n\n**Low Severity**\n\n\u003c!-- DESCRIPTION START --\u003e\n`ensure_repo_devenv_symlinks` is defined identically in both `shared/scripts/run-devenv-sync.sh` and `shared/lib/sandbox-common.sh`. The Packer provisioner ordering confirms `sandbox-common.sh` is already deployed to `/opt/sandbox/lib/` before `run-devenv-sync.sh` runs, so the local redefinition is unnecessary. If this logic ever needs a fix (e.g. adding a new symlink), both copies need updating independently, risking silent divergence.\n\u003c!-- DESCRIPTION END --\u003e\n\n\u003c!-- BUGBOT_BUG_ID: 999b3bdf-7c77-4423-90d2-d072a3387873 --\u003e\n\n\u003c!-- LOCATIONS START\nshared/scripts/run-devenv-sync.sh#L42-L49\nshared/lib/sandbox-common.sh#L43-L50\nLOCATIONS END --\u003e\n\u003cdetails\u003e\n\u003csummary\u003eAdditional Locations (1)\u003c/summary\u003e\n\n- ...

[
  {
    "content": "Address Cursor Bugbot comment: duplicated ensure_repo_devenv_symlinks function",
    "status": "in_progress",
    "priority": "high"
  }
]

<path>/home/byk/Code/getsentry/devinfra-coder-infra/packer/getsentry-sandbox.pkr.hcl</path>
<type>file</type>
<content>
46:   provisioner "file" {
47:     source      = "getsentry/sandbox-startup.service"
48:     destination = "/tmp/sandbox-startup.service"
49:   }
50: 
51:   provisioner "file" {
52:     source      = "getsentry/sandbox-devserver.service"
53:     destination = "/tmp/sandbox-devserver.service"
54:   }
55: 
56:   provisioner "file" {
57:     source      = "getsentry/startup.sh"
58:     destination = "/tmp/startup.sh"
59:   }
60: 
61:   provisioner "file" {
62:     source      = "shared/lib/sandbox-common.sh"
63:     destination = "/tmp/sandbox-common.sh"
64:   }
65: 
66:   provisioner "file" {
67:     source      = "getsentry/scripts/maintenance-sync.sh"
68:     destination = "/tmp/maintenance-sync.sh"
69:   }
70: 
71:   provisioner "shell" {
72:     inline = [
73:       "sudo mkdir -p /opt/sandbox/scripts /opt/sandbox/lib",
74:       "sudo cp /tmp/startup.sh ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/packer/sentry-sandbox.pkr.hcl</path>
<type>file</type>
<content>
56:   }
57: 
58:   provisioner "file" {
59:     source      = "shared/lib/sandbox-common.sh"
60:     destination = "/tmp/sandbox-common.sh"
61:   }
62: 
63:   provisioner "shell" {
64:     inline = [
65:       "sudo mkdir -p /opt/sandbox/lib",
66:       "sudo cp /tmp/startup.sh /opt/sandbox/startup.sh",
67:       "sudo cp /tmp/sandbox-common.sh /opt/sandbox/lib/sandbox-common.sh",
68:       "sudo chmod +x /opt/sandbox/startup.sh",
69:       "sudo cp /tmp/sandbox-startup.service /etc/systemd/system/",
70:       "sudo cp /tmp/sandbox-devserver.service /etc/systemd/system/",
71:       "sudo systemctl daemon-reload",
72:       "sudo systemctl enable sandbox-startup",
73:     ]
74:   }
75: 
76:   # 4. devenv sync (as sentry user) — migrations can take 15+ min
77:   provisioner "shell" {
78:     script          = "shared/scripts/run-devenv-sync.sh"
79:     execute_command = ...

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/scripts/run-devenv-sync.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # run-devenv-sync.sh — Run devenv sync for sentry (and optionally getsentry)
5: #
6: # Runs as sentry user. Uses `devenv sync` — the same canonical setup path
7: # used by every Sentry developer.
8: #
9: # Set SYNC_GETSENTRY=1 to also sync getsentry after sentry. getsentry depends
10: # on sentry, but `devenv sync` does NOT auto-chain across repos — we must sync
11: # sentry first, then getsentry, as two explicit steps.
12: #
13: # After sync, runs `devservices up --mode ingest` to pull and cache all
14: # Docker images needed at boot time. devenv sync only uses `--mode migrations`
15: # which pulls postgres + redis. The ingest mode also pulls kafka, clickhouse,
16: # snuba, relay, and spotlight. ...

Edit applied successfully.

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/lib/sandbox-common.sh</path>
<type>file</type>
<content>
36: ensure_global_devenv_config() {
37:     local cfg_dir="${HOME}/.config/sentry-devenv"
38:     mkdir -p "${cfg_dir}"
39:     if [[ ! -f "${cfg_dir}/config.ini" ]]; then
40:         printf '%s\n' '[devenv]' 'coderoot = /workspace' > "${cfg_dir}/config.ini"
41:     fi
42: }
43: 
44: ensure_repo_devenv_symlinks() {
45:     local repo="$1"

(Showing lines 36-45 of 50. Use offset=46 to continue.)
</content>

OK

<path>/home/byk/Code/getsentry/devinfra-coder-infra/shared/scripts/run-devenv-sync.sh</path>
<type>file</type>
<content>
1: #!/usr/bin/env bash
2: set -euo pipefail
3: 
4: # run-devenv-sync.sh — Run devenv sync for sentry (and optionally getsentry)
5: #
6: # Runs as sentry user. Uses `devenv sync` — the same canonical setup path
7: # used by every Sentry developer.
8: #
9: # Set SYNC_GETSENTRY=1 to also sync getsentry after sentry. getsentry depends
10: # on sentry, but `devenv sync` does NOT auto-chain across repos — we must sync
11: # sentry first, then getsentry, as two explicit steps.
12: #
13: # After sync, runs `devservices up --mode ingest` to pull and cache all
14: # Docker images needed at boot time. devenv sync only uses `--mode migrations`
15: # which pulls postgres + redis. The ingest mode also pulls kafka, clickhouse,
16: # snuba, relay, and spotlight. ...

[byk/fix-devenv-sync-symlinks 55da2f4] fix: remove duplicated ensure_repo_devenv_symlinks, source sandbox-common.sh
 1 file changed, 6 insertions(+), 11 deletions(-)

To https://github.com/getsentry/devinfra-coder-infra.git
   0ecb838..55da2f4  byk/fix-devenv-sync-symlinks -> byk/fix-devenv-sync-symlinks

3099651837	### Duplicated function definition risks future divergence

**Low Severity**

<!

{"url":"https://api.github.com/repos/getsentry/devinfra-coder-infra/pulls/comments/3099669093","pull_request_review_id":4128115780,"id":3099669093,"node_id":"PRRC_kwDORTPWNs64wTJl","diff_hunk":"@@ -29,6 +29,30 @@ curl -fsSL https://raw.githubusercontent.com/getsentry/devenv/main/install-deven\n CI=1 bash /tmp/install-devenv.sh\n export PATH=\"$HOME/.local/share/sentry-devenv/bin:$PATH\"\n \n+###############################################################################\n+# Bootstrap devenv config + in-repo .devenv symlinks (see issue #71)\n+#\n+# devenv 1.28.0's lookup order: .devenv/config.ini → devenv/config.ini →\n+# fallback .devenv. Materialize .devenv symlinks so the first lookup always\n+# wins regardless of whether getsentry's devenv/config.ini symlink dangles.\n+###############################################################################\n+mkdir -p \"${HOME}/.config/sentry-devenv\"\n+printf '%s\\n' '[devenv]' 'coderoot = /workspace' \\\n+    > ...

SUCCESS	Secret Scan
SUCCESS	warden
IN_PROGRESS	Seer Code Review
IN_PROGRESS	Cursor Bugbot
IN_PROGRESS	semgrep-cloud-platform/scan

SUCCESS	Secret Scan
SUCCESS	warden
IN_PROGRESS	Seer Code Review
IN_PROGRESS	Cursor Bugbot
IN_PROGRESS	semgrep-cloud-platform/scan

SUCCESS	Secret Scan
SUCCESS	warden
SUCCESS	Seer Code Review
IN_PROGRESS	Cursor Bugbot
SUCCESS	semgrep-cloud-platform/scan

SUCCESS	Secret Scan
SUCCESS	warden
SUCCESS	Seer Code Review
SUCCESS	Cursor Bugbot
SUCCESS	semgrep-cloud-platform/scan

(no output)

[]

[
  {
    "content": "Address Cursor Bugbot comment: duplicated ensure_repo_devenv_symlinks function",
    "status": "completed",
    "priority": "high"
  }
]

cursor (COMMENTED):
<!-- BUGBOT_REVIEW -->
Cursor Bugbot has reviewed your changes and found 1 potential issue.



<!-- BUGBOT_FIX_ALL -->
<a href="https://cursor.com/open?data=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImJ1Z2JvdC12MiJ9.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiQlVHQk9UX0ZJWF9BTExfSU5fQ1VSU09SIiwiZGF0YSI6eyJyZWRpc0tleSI6ImJ1Z2JvdC1tdWx0aTpjMmE2YjI2MS1jMmIwLTQ4MTYtYjg1Mi0wZTIwODc0ZDAzMTAiLCJlbmNyeXB0aW9uS2V5IjoiSjVLRzNwbnpBNFd0WmVRWUVTdG9RekNtM3VTa1hQUnZkbm13NklURVNJdyIsImJyYW5jaCI6ImJ5ay9maXgtZGV2ZW52LXN5bmMtc3ltbGlua3MiLCJyZXBvT3duZXIiOiJnZXRzZW50cnkiLCJyZXBvTmFtZSI6ImRldmluZnJhLWNvZGVyLWluZnJhIn0sImlhdCI6MTc3NjQyMjY2NiwiZXhwIjoxNzc5MDE0NjY2fQ.V_1KWCPohEMmOGIPhxWTMHTHlcAPZJ2wKA8UsrKkiykn30yMPSntlDmpFtZM0QYqT4CSS_qa4sMmt5yjGXulcjKSzSI8Szj3NOHlXCkGo5vbDjuKc04G-F3GB5dSZjgF8mxjvXWHCs_1-1CB8-tktJag9I9muqliGOM9U1_-8Z09xj4MimTtjGoD_Tjng3-sZIFDtShgz7hsNi4hdrQh06Uxk9rKEoSv5O97um_bUe3HExjj89jM139v3MyWKKU8C85IR_HX91KzuhIc_4gS4aa8x6PYBMXsGGkInM77TXDUengX5cE4CSPPYAQ2vZqeX1aJjEmrFOP8ehURlf-fQg"...

[]

[
  {
    "content": "Investigate why devenv sync works on fresh workspaces despite the reported issue",
    "status": "in_progress",
    "priority": "high"
  },
  {
    "content": "Reply to hubertdeng123's review comment with findings",
    "status": "pending",
    "priority": "high"
  }
]

title:	getsentry-devbox: devenv sync fails - .devenv/sync.py not found
state:	OPEN
author:	BYK (Burak Yigit Kaya)
labels:	
comments:	0
assignees:	
projects:	
milestone:	
number:	71
--
## Problem

On a fresh `getsentry-devbox` workspace, `devenv sync` fails with:

```
/workspace/getsentry/.devenv/sync.py not found!
```

The `devenv` tool (v1.28.0) looks for `.devenv/sync.py` (with dot prefix), but:
- **getsentry** stores its sync script at `devenv/sync.py` (no dot)
- **sentry** doesn't have a `.devenv/sync.py` at all

This means a fresh workspace cannot run `devenv sync` without manual intervention.

## Workaround

Create symlinks manually:

```bash
mkdir -p /workspace/getsentry/.devenv
ln -sf /workspace/getsentry/devenv/sync.py /workspace/getsentry/.devenv/sync.py

mkdir -p /workspace/sentry/.devenv
ln -sf /workspace/getsentry/devenv/sync.py /workspace/sentry/.devenv/sync.py
```

Also needs `~/.config/sentry-devenv/config.ini`:

```ini
[devenv]
coderoot = /workspace
```

After that, ...

[
  {
    "content": "Investigate why devenv sync works on fresh workspaces despite the reported issue",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Reply to hubertdeng123's review comment with findings",
    "status": "in_progress",
    "priority": "high"
  }
]

(no output)

https://github.com/getsentry/devinfra-coder-infra/pull/72

[
  {
    "content": "Investigate why devenv sync works on fresh workspaces despite the reported issue",
    "status": "completed",
    "priority": "high"
  },
  {
    "content": "Reply to hubertdeng123's review comment with findings",
    "status": "completed",
    "priority": "high"
  }
]

SUCCESS	Secret Scan
SUCCESS	warden
SUCCESS	Seer Code Review
SUCCESS	Cursor Bugbot
SUCCESS	semgrep-cloud-platform/scan

[]