From 108aaeebd5ec5f02c4b0bf10793d9540fe73d814 Mon Sep 17 00:00:00 2001
From: Landon Cox <landon.cox@microsoft.com>
Date: Wed, 27 May 2026 07:59:44 -0700
Subject: [PATCH 1/2] fix(squid): increase healthcheck tolerance to prevent
 intermittent startup failures

The Squid container can fail its healthcheck on loaded runners when
initialization (chown, base64 decode, IPv6 check, Squid startup) takes
longer than the 7-second window. Increase start_period from 2s to 5s,
retries from 5 to 10, and interval/timeout from 1s to 2s, giving Squid
~25s total to become healthy without meaningfully slowing the happy path.

Fixes #3934

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 src/services/squid-service.ts | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/services/squid-service.ts b/src/services/squid-service.ts
index 0319e1bc..92c41d83 100644
--- a/src/services/squid-service.ts
+++ b/src/services/squid-service.ts
@@ -73,10 +73,10 @@ export function buildSquidService(params: SquidServiceParams): any {
     volumes: translatedSquidVolumes,
     healthcheck: {
       test: ['CMD', 'nc', '-z', 'localhost', '3128'],
-      interval: '1s',
-      timeout: '1s',
-      retries: 5,
-      start_period: '2s',
+      interval: '2s',
+      timeout: '2s',
+      retries: 10,
+      start_period: '5s',
     },
     ports: [`${SQUID_PORT}:${SQUID_PORT}`],
     // Security hardening: Drop unnecessary capabilities

From 1f7b8b9bc24ecb7c9704c494fcfa0483fc22c596 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 27 May 2026 15:15:08 +0000
Subject: [PATCH 2/2] test(squid): assert healthcheck timing config

---
 src/services/squid-service.test.ts | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/services/squid-service.test.ts b/src/services/squid-service.test.ts
index c2bc54ad..6f12dcd8 100644
--- a/src/services/squid-service.test.ts
+++ b/src/services/squid-service.test.ts
@@ -26,6 +26,13 @@ describe('squid service', () => {
       expect(squid.volumes).not.toContainEqual(expect.stringContaining('squid.conf'));
       expect(squid.volumes).toContain(`${mockConfig.workDir}/squid-logs:/var/log/squid:rw`);
       expect(squid.healthcheck).toBeDefined();
+      expect(squid.healthcheck).toEqual({
+        test: ['CMD', 'nc', '-z', 'localhost', '3128'],
+        interval: '2s',
+        timeout: '2s',
+        retries: 10,
+        start_period: '5s',
+      });
       expect(squid.ports).toContain('3128:3128');
     });