lfg2025/archy
1
0
Fork 0
Code Issues 11 Pull Requests Actions Packages Projects Releases 7 Wiki Activity

iso: per-device first-boot secrets + checksum emission/signing #75

Closed
lfg2025 wants to merge 0 commits from iso-first-boot-secrets into main
pull from: iso-first-boot-secrets
merge into: :main
Conversation 0 Commits - Files Changed -
lfg2025 commented 2026-07-13 12:44:10 +00:00
Owner
Copy Link
Copy Source
  • archipelago-first-boot-secrets.service: regenerates TLS keypair (hostname SAN) + SSH host keys on first boot, staging-first swap, marker-guarded, enabled on the installed target (§F critical)
  • builder emits .sha256 after xorriso; scripts/sign-iso-checksums.sh signs {artifact,sha256,size} with the release-root ceremony (§F)
  • tracker ticked with shas

🤖 Generated with Claude Code

- archipelago-first-boot-secrets.service: regenerates TLS keypair (hostname SAN) + SSH host keys on first boot, staging-first swap, marker-guarded, enabled on the installed target (§F critical) - builder emits <iso>.sha256 after xorriso; scripts/sign-iso-checksums.sh signs {artifact,sha256,size} with the release-root ceremony (§F) - tracker ticked with shas 🤖 Generated with [Claude Code](https://claude.com/claude-code)
chaum closed this pull request 2026-07-13 12:49:40 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
companion-agent
Companion-app agent's handover list (node-side parts tracked separately)
 queued
Triaged, next in this session's queue after current release work
 roadmap
Feature/effort item, deliberately unscheduled — needs scoping + a slot, not a fix today
 waiting-external
Waiting on a person outside this session (tester, operator)
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
chaum ssmithx lfg2025
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: lfg2025/archy#75