Sovran_Systems/Sovran_SystemsOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: Sovran_Systems/Sovran_SystemsOS:466582bcdc7900bc558d81208422e27e88df5c1f
Branches Tags
Sovran_Systems/Sovran_SystemsOS:main Sovran_Systems/Sovran_SystemsOS:stable Sovran_Systems/Sovran_SystemsOS:staging-dev
Sovran_Systems/Sovran_SystemsOS:v1.0.0
..
compare: Sovran_Systems/Sovran_SystemsOS:1cd5bd4496379b495f7c13879446bbbb43806695
Branches Tags
Sovran_Systems/Sovran_SystemsOS:stable Sovran_Systems/Sovran_SystemsOS:staging-dev Sovran_Systems/Sovran_SystemsOS:main
Sovran_Systems/Sovran_SystemsOS:v1.0.0

3 Commits
466582bcdc .. 1cd5bd4496

Author SHA1 Message Date
Sovran Systems 1cd5bd4496 Merge pull request #283 from naturallaw777/copilot/fix-free-password-setup-script 
fix(credentials): enforce boot ordering and error visibility for password-setup services
 2026-04-29 19:54:14 -05:00
copilot-swe-agent[bot] 6512bf4356 fix: add set -euo pipefail and boot ordering to password-setup services 
Agent-Logs-Url: https://github.com/naturallaw777/staging_alpha/sessions/2f9c39e8-d673-4314-bff7-28f1fffd48a0

Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
 2026-04-30 00:52:17 +00:00
copilot-swe-agent[bot] 7da0463dce Initial plan 2026-04-30 00:51:11 +00:00
1 changed files with 4 additions and 0 deletions
Expand all files Collapse all files
modules/credentials.nix
+4
View File
@@ -127,6 +127,7 @@ in
}; };
path = [ pkgs.shadow pkgs.coreutils ]; path = [ pkgs.shadow pkgs.coreutils ];
script = '' script = ''
set -euo pipefail
SECRET_FILE="/var/lib/secrets/root-password" SECRET_FILE="/var/lib/secrets/root-password"
if [ ! -f "$SECRET_FILE" ]; then if [ ! -f "$SECRET_FILE" ]; then
mkdir -p /var/lib/secrets mkdir -p /var/lib/secrets
@@ -158,12 +159,15 @@ in
systemd.services.free-password-setup = { systemd.services.free-password-setup = {
description = "Generate and set a random 'free' user password"; description = "Generate and set a random 'free' user password";
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
before = [ "display-manager.service" ];
after = [ "systemd-user-sessions.service" ];
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "oneshot";
RemainAfterExit = true; RemainAfterExit = true;
}; };
path = [ pkgs.shadow pkgs.coreutils ]; path = [ pkgs.shadow pkgs.coreutils ];
script = '' script = ''
set -euo pipefail
SECRET_FILE="/var/lib/secrets/free-password" SECRET_FILE="/var/lib/secrets/free-password"
PENDING_FILE="/var/lib/secrets/free-password-migration-pending" PENDING_FILE="/var/lib/secrets/free-password-migration-pending"