From 16030d8e6caf10aa832035b3ca80fe96f382c485 Mon Sep 17 00:00:00 2001
From: Ruslan <ruslan@ruslan.xyz>
Date: Tue, 14 Apr 2026 00:14:43 +0300
Subject: [PATCH] =?UTF-8?q?fix(common):=20=D1=81=D1=82=D0=B0=D0=B1=D0=B8?=
 =?UTF-8?q?=D0=BB=D1=8C=D0=BD=D0=B0=D1=8F=20=D0=B3=D0=B5=D0=BD=D0=B5=D1=80?=
 =?UTF-8?q?=D0=B0=D1=86=D0=B8=D1=8F=20=D1=81=D0=BB=D1=83=D1=87=D0=B0=D0=B9?=
 =?UTF-8?q?=D0=BD=D1=8B=D1=85=20=D1=81=D1=82=D1=80=D0=BE=D0=BA=20=D0=BF?=
 =?UTF-8?q?=D1=80=D0=B8=20pipefail?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 lib/common.sh | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/lib/common.sh b/lib/common.sh
index c676acd..8f25ac0 100755
--- a/lib/common.sh
+++ b/lib/common.sh
@@ -227,5 +227,14 @@ sanitize_name() {
 
 random_alnum() {
   local len="${1:-20}"
-  tr -dc 'A-Za-z0-9' </dev/urandom | head -c "$len"
+  local out=""
+  while ((${#out} < len)); do
+    # openssl выдает конечный блок данных, что безопасно для pipefail
+    # и не приводит к SIGPIPE как в схеме с head/tr от /dev/urandom.
+    out+="$(
+      openssl rand -base64 48 2>/dev/null \
+        | tr -dc 'A-Za-z0-9'
+    )"
+  done
+  printf '%s' "${out:0:len}"
 }