fix(template): enforce init fail-fast and category metadata

Author: JSONbored

Dockerfile

@@ -85,6 +85,7 @@ EXPOSE 3000
 
 ENV SKYLIGHT_ENABLED=false
 ENV S6_CMD_WAIT_FOR_SERVICES_MAXTIME=300000
+ENV S6_BEHAVIOUR_IF_STAGE2_FAILS=2
 
 HEALTHCHECK --interval=30s --timeout=10s --start-period=180s --retries=3 \
   CMD curl -fsS http://localhost:3000/up >/dev/null || exit 1

scripts/validate-template.py

@@ -176,8 +176,8 @@
     "Full changelog and release notes:",
 )
 ALLOWED_CATEGORY_TOKENS = {
-    "Productivity",
-    "Tools-Utilities",
+    "Productivity:",
+    "Tools:Utilities",
 }
 
 

sure-aio.xml

@@ -45,7 +45,7 @@
 - Always publish on manual main workflow dispatch
 - Let manual publish proceed when smoke test is skipped
 - Trigger package publish for aio tag alignment</Changes>
-  <Category>Productivity Tools-Utilities</Category>
+  <Category>Productivity: Tools:Utilities</Category>
   <WebUI>http://[IP]:[PORT:3000]</WebUI>
   <TemplateURL>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/sure-aio.xml</TemplateURL>
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/sure.png</Icon>

tests/template/test_container_contract.py

@@ -77,6 +77,7 @@ def test_unraid_metadata_contract_is_complete_and_unprivileged() -> None:
         "Project",
         "TemplateURL",
         "Icon",
+        "Category",
         "WebUI",
     ):
         value = root.findtext(tag)
@@ -153,6 +154,7 @@ def test_dockerfile_has_runtime_safety_contract() -> None:
     assert "curl -fsS" in dockerfile  # nosec B101
     assert 'ENTRYPOINT ["/init"]' in dockerfile  # nosec B101
     assert "S6_CMD_WAIT_FOR_SERVICES_MAXTIME" in dockerfile  # nosec B101
+    assert "S6_BEHAVIOUR_IF_STAGE2_FAILS=2" in dockerfile  # nosec B101
 
 
 def test_docker_socket_mount_is_advanced_and_documented_when_present() -> None: