[gspark-etri]

Background

The CSI plugin runs as root and keeps each file's mode from the manifest. The RNGD params of a furiosa-llm artifact are 0600, so in the #54/#55 run a pod running as uid 1002 got read: FAILED on model-00001-of-00004.safetensors from the onggi volume (#62).

Changes

• Before publishing a materialized artifact, including one made by delta apply, the materializer adds read permission for all to every file and read+execute to every directory (readableByAll).
• Write bits are left as they are: the volume is a read-only bind.

Verification

• New test: an artifact with a 0600 file and a 0700 directory materializes with files at least 0444 and directories at least 0555, and the content is identical.
• The materializer, rebase and full suites pass on the node; gofmt and vet are clean.

Compatibility and limits

• Artifacts already materialized keep their modes until they are materialized again. onggi pull (CLI) is unchanged and keeps the manifest's modes.

Related Issue

Closes #62

🤖 Generated with Claude Code