 iceBear67
|
c7afb86ebc
|
harden build scripts and fix correctness issues from audit
Security & correctness fixes following the audit in REPORT.md.
- setup-hypervisor.sh: fix broken error handling — use curl -fsSL,
check failures properly, return valid exit codes, and fetch
/releases/latest (arch-aware) instead of the possibly-draft .[0]
- entrypoint.sh: quote "$@" and build --net conditionally so empty
NET_INTERFACE/NET_MAC don't yield "tap=,mac="
- image-updater: replace tight 3s retry loop with capped exponential
backoff + periodic pull instead of hammering the registry
- sshd: set PermitRootLogin prohibit-password explicitly (key-only root)
- vm.Dockerfile: copy only host private keys at mode 600 instead of
the whole secret/* glob (drops .gitkeep/.pub from /etc/ssh)
- Makefile: stop generating redundant _pub key files
- build-image.sh: detect failure via alpine-make-vm-image's real exit
status rather than grepping stdout for "ERROR"
- remove orphaned etc/alloy/config.alloy (service not installed)
- README: correct data.raw path
- add REPORT.md audit notes (H1/H2 accepted as out-of-scope)
|
2026-07-14 17:52:24 +08:00 |
|
|
iceBear67
|
ba17c2a47b
|
fix entrypoint script
|
2026-07-13 17:38:42 +08:00 |
|
|
iceBear67
|
f42f90445b
|
fix entrypoint
|
2026-07-13 17:34:57 +08:00 |
|
|
iceBear67
|
ae5aba2109
|
fix entrypoint
|
2026-07-13 17:28:48 +08:00 |
|
|
iceBear67
|
564888b297
|
remove test.sh
|
2026-07-13 17:16:48 +08:00 |
|
|
iceBear67
|
c041cb97cd
|
introduce graceful shutdown
|
2026-07-13 17:07:50 +08:00 |
|
|
iceBear67
|
b3ebdbf536
|
pass SIGTERM to cloud hypervisor
|
2026-07-05 19:10:38 +08:00 |
|
|
iceBear67
|
bf67b8b95f
|
refactor
|
2026-07-05 13:49:09 +08:00 |
|
|
iceBear67
|
bd3df67542
|
fix and finally ran
|
2026-06-16 16:42:28 +08:00 |
|
|
iceBear67
|
71f46fb430
|
adjust fstab and mount device param
|
2026-06-15 17:42:40 +08:00 |
|
|
iceBear67
|
37d68dfcab
|
refactor: use bubble instead
|
2026-06-15 17:22:01 +08:00 |
|
|
iceBear67
|
ab9b4c7e13
|
build success
|
2026-06-05 17:56:39 +08:00 |
|
|
iceBear67
|
87e76877ca
|
init
|
2026-06-05 16:42:56 +08:00 |
|