Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity
1,816 Commits 3 Branches 6 Tags
9da4a7d2efaec17309a432d4ba2a08605a5a10eb
Commit Graph
1816 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sovran_SystemsandGitHub 250ff03135 Merge pull request #135 from naturallaw777/copilot/fix-bitcoind-i-o-error 
Fix bitcoind/electrs I/O crash when second drive mounts after service start
 2026-04-07 19:24:22 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		7eb2664124 Add mount dependency for bitcoind and electrs systemd services 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/1def4c7b-d90d-4b0c-87a7-87dc729661b1

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-08 00:23:35 +00:00
copilot-swe-agent[bot]andGitHub fe5ae3c5c0 Initial plan 2026-04-08 00:22:26 +00:00
naturallaw777 60b9347ebb updated installer.py 2026-04-07 17:59:53 -05:00
naturallaw777 f1539413a7 updated caddy.nix 2026-04-07 17:36:26 -05:00
naturallaw777 8b7779243d .iso update 2026-04-07 17:02:43 -05:00
Sovran_SystemsandGitHub f1f42a658b Merge pull request #132 from naturallaw777/copilot/fix-ownership-permissions 
Replace tmpfiles rules with systemd oneshot service for recursive ownership fix on second drive
 2026-04-07 16:41:54 -05:00
Sovran_SystemsandGitHub 21b71b3d89 Merge pull request #133 from naturallaw777/copilot/update-deployed-flake-url 
Point installer DEPLOYED_FLAKE at staging-dev branch
 2026-04-07 16:41:20 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		b7959082c9 Fix installer DEPLOYED_FLAKE to point to staging-dev branch 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/43e96fac-1140-42e5-9981-00069570967c

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 21:40:26 +00:00
copilot-swe-agent[bot]andGitHub 5de0bf62cd Initial plan 2026-04-07 21:39:42 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		6e9b165892 Replace tmpfiles rules with systemd oneshot service for recursive chown on second drive 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/96b8f8fe-5a1d-42e5-8b2d-5dd5aee96044

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 21:29:33 +00:00
copilot-swe-agent[bot]andGitHub 7bd7a23c80 Initial plan 2026-04-07 21:28:36 +00:00
Sovran_SystemsandGitHub 4454edbf2b Merge pull request #131 from naturallaw777/copilot/fix-sovran-legacy-security-check 
Replace Python `crypt` module with `openssl passwd` (Python 3.13 compatibility)
 2026-04-07 16:17:02 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		32bdb20941 fix: replace Python crypt module with openssl passwd for Python 3.13 compatibility 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/9544e3d5-f7f8-4299-9198-3b5f1f835d14

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 21:11:13 +00:00
copilot-swe-agent[bot]andGitHub 35878160a7 Initial plan 2026-04-07 21:04:58 +00:00
Sovran_SystemsandGitHub 9974daeed0 Merge pull request #130 from naturallaw777/copilot/add-sovran-auto-seal-service 
Add sovran-auto-seal: automatic first-boot seal with live-system safety guards
 2026-04-07 15:48:25 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		1b77f4b699 Add sovran-auto-seal systemd service to factory-seal.nix 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/869df8d4-3811-4a1a-b026-e978d3a81589

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 20:43:15 +00:00
copilot-swe-agent[bot]andGitHub 549e3ca233 Initial plan 2026-04-07 20:40:53 +00:00
Sovran_SystemsandGitHub d968a475fe Merge pull request #129 from naturallaw777/copilot/add-tmpfiles-rules-for-bitcoin-electrs 
[WIP] Add tmpfiles rules for Bitcoin and Electrs data directories
 2026-04-07 15:21:26 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		7beb1dbc72 Add systemd.tmpfiles.rules for Bitcoin/Electrs directory permissions 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/ea46340b-7cf5-404b-9cef-b5ed1fcb2ecb

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 20:21:07 +00:00
Sovran_SystemsandGitHub 6fb68bfa55 Merge pull request #128 from naturallaw777/copilot/fix-flake-nix-references 
[WIP] Fix flake.nix references after nixos-install cleanup
 2026-04-07 15:21:02 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		0eec097ecd fix(installer): improve error handling for deployed flake.nix write 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/b7dfaecc-2b2e-4f5f-bb9a-f97ced90e76e

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 20:20:36 +00:00
copilot-swe-agent[bot]andGitHub 645237fb94 Initial plan 2026-04-07 20:20:01 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		f66443aa93 fix(installer): write deployed flake.nix and remove flake.lock after install cleanup 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/b7dfaecc-2b2e-4f5f-bb9a-f97ced90e76e

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 20:18:36 +00:00
copilot-swe-agent[bot]andGitHub ef66497443 Initial plan 2026-04-07 20:16:57 +00:00
Sovran_SystemsandGitHub 9d9e5da628 Merge pull request #127 from naturallaw777/copilot/update-api-password-check 
Use /etc/shadow as authoritative source for factory default password detection
 2026-04-07 13:55:53 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		8633b74f56 Use /etc/shadow as source of truth for factory default password detection 
- server.py: add _is_free_password_default() helper that reads /etc/shadow
  and hashes known defaults ("free", "gosovransystems") via crypt module;
  update api_password_is_default to use it instead of reading the secrets file
- factory-seal.nix: replace file-based free-password check with shadow-based
  cryptographic check using python3 + crypt module; add pkgs.python3 to path;
  pass values via env vars to avoid shell expansion of hash $ characters

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/31e6fc93-8b4b-47af-9c47-568da0905301

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 18:50:16 +00:00
copilot-swe-agent[bot]andGitHub 38eb89538f Initial plan 2026-04-07 18:46:24 +00:00
Sovran_SystemsandGitHub 23c1c51ae2 Merge pull request #126 from naturallaw777/copilot/fix-security-warning-reappearance 
Fix legacy security warning reappearing on every reboot after password change
 2026-04-07 13:29:32 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		4328eb3363 Avoid storing password in variable to prevent process listing exposure 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c18311e4-609d-4edf-a2a1-a018baede373

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 18:27:32 +00:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		79e68e7d33 Fix security warning reappearing after every reboot 
Add two early-exit checks in sovran-legacy-security-check before the
legacy fallthrough block:
1. Exit if /var/lib/sovran/onboarding-complete exists (Hub onboarding done)
2. Exit if /var/lib/secrets/free-password exists and is not "free" (password changed)

This prevents the boot-time service from overwriting the security-status
file that /api/change-password clears after a successful password change.

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/c18311e4-609d-4edf-a2a1-a018baede373

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 18:26:54 +00:00
copilot-swe-agent[bot]andGitHub 01d009ec3b Initial plan 2026-04-07 18:25:47 +00:00
naturallaw777 a3cda9cc2e update flake 2026-04-07 13:14:21 -05:00
naturallaw777 9f7b9e8c7a update flake 2026-04-07 13:13:06 -05:00
naturallaw777 a6ca190dbf update flake and installer 2026-04-07 13:11:39 -05:00
Sovran_SystemsandGitHub df828d760a Merge pull request #125 from naturallaw777/copilot/update-security-check-for-unsealed-state 
[WIP] Update sovran-legacy-security-check to warn on unsealed state
 2026-04-07 12:50:45 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		40413118f8 Detect and warn when machine was set up without factory seal 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/169de2bb-0655-4504-a270-8c0341c0d3dd

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 17:48:38 +00:00
copilot-swe-agent[bot]andGitHub 38cdd93ef0 Initial plan 2026-04-07 17:45:41 +00:00
Sovran_SystemsandGitHub 2c99827875 Merge pull request #124 from naturallaw777/copilot/add-password-creation-step-onboarding 
Add password creation step to first-boot onboarding wizard
 2026-04-07 12:45:34 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		78b70eeada feat: add password creation step to onboarding wizard (#2) 
- Add GET /api/security/password-is-default endpoint in server.py
- Add Step 2 (Create Your Password) to onboarding wizard HTML
- Renumber old steps: Domains→3, Ports→4, Complete→5
- Add 5th step dot indicator
- Update onboarding.js: TOTAL_STEPS=5, ROLE_SKIP_STEPS=[3,4] for desktop/node
- Add loadStep2/saveStep2 for password step with smart default detection
- Rename old step functions to loadStep3/saveStep3/loadStep4
- Add password form CSS styles in onboarding.css

Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/74a30916-fb2d-4f1d-9763-e380b1aa5540

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 17:36:59 +00:00
copilot-swe-agent[bot]andGitHub 700476d823 Initial plan 2026-04-07 17:29:46 +00:00
Sovran_SystemsandGitHub 250bf83802 Merge pull request #122 from naturallaw777/copilot/fix-installer-create-password-step 
Fix installer password step: replace chroot+sh with direct chpasswd --root
 2026-04-07 12:17:24 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		99b299ece3 Fix chpasswd: run directly from host with --root /mnt, no chroot needed 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/3ff98bf4-8f62-4c81-90fd-36854e88266f

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 17:14:32 +00:00
copilot-swe-agent[bot]andGitHub 6dc591c053 Initial plan 2026-04-07 17:13:16 +00:00
Sovran_SystemsandGitHub 4f5d14ee12 Merge pull request #121 from naturallaw777/copilot/fix-change-password-form-issues 
Fix System Passwords change-password form: chpasswd path on NixOS, show/hide toggle, UX clarity
 2026-04-07 12:03:23 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		38423730c8 Fix chpasswd path on NixOS, add password toggle/hints/validation in change-password form 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/de03873d-5cdb-4929-bd4a-4d306916b525

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 17:01:54 +00:00
copilot-swe-agent[bot]andGitHub 2871586048 Initial plan 2026-04-07 16:57:23 +00:00
Sovran_SystemsandGitHub ad0723c257 Merge pull request #119 from naturallaw777/copilot/fix-change-passwords-button 
[WIP] Fix non-functional change passwords button in Hub
 2026-04-07 11:45:15 -05:00
copilot-swe-agent[bot]GitHubnaturallaw777
 		640a2c24a0 Fix Change Passwords button: add API endpoint, system password modal, fix security banner link 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/bf43bea9-9f93-4f7b-b6fd-c76714e7f25b

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-07 16:44:57 +00:00
Sovran_SystemsandGitHub 244b2763e1 Merge pull request #120 from naturallaw777/copilot/fix-installer-password-step 
[WIP] Fix installer failure at 'Create Password' step
 2026-04-07 11:44:49 -05:00