Amc/Blueforce-Linux
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Blueforce-Linux/provisioning
History
emirhanmamak-blueforce fc4c87c9ab fix(offline-repo): commit the bundle pool so a clone carries the packages 
The installer resolves every pinned package as "<bundle>/pool/<source>" and the
lock rows name the files there, but built/pool was gitignored. A device that
cloned the repository therefore received the index and no packages and stopped
with "Kilitte yazılı paket depoda yok" -- the repository looked complete (2.7 MB
of index) while the payload was absent.

The bundle pool is committed now. The same blobs also live under
provisioning/offline-repo/packages/, which is the maintainer's intake directory;
Git LFS keys objects by content hash, so this is a second path and not a second
copy of the bytes.

Tests
- The suite asserts that neither the bundle's pool/ nor its index is gitignored,
  which is the condition a cloning device depends on. It passed 140/140 with the
  pool staged, and the check fails against the previous .gitignore.
2026-09-16 22:12:57 +03:00
..
autoinstall feat(field-os): provisioning layer, real ISO build, offline contracts 2026-09-16 11:14:42 +03:00
enrollment feat(field-os): provisioning layer, real ISO build, offline contracts 2026-09-16 11:14:42 +03:00
firstboot feat(install): internet-free install flow, auto-discovered local packages 2026-09-16 16:53:24 +03:00
iso feat(install): internet-free install flow, auto-discovered local packages 2026-09-16 16:53:24 +03:00
offline-repo fix(offline-repo): commit the bundle pool so a clone carries the packages 2026-09-16 22:12:57 +03:00
release feat(field-os): provisioning layer, real ISO build, offline contracts 2026-09-16 11:14:42 +03:00
README.md feat(field-os): provisioning layer, real ISO build, offline contracts 2026-09-16 11:14:42 +03:00

README.md

Blueforce OS provisioning

Bu dizin işletim sistemi provisioning kapsamının sahibidir. Mevcut scripts/install/ uygulama bootstrap'ı olarak kalır ve burada taşınmaz.

Güvenlik sınırları:

  • Bu iskelet cihaz kimliği, parola, private key, token veya bayiye özel veri içermez.
  • Autoinstall V1 disk seçmez ve silmez; interactive-sections: [storage] teknisyen seçimini zorunlu tutar.
  • Upstream ISO ve paketler örtük indirilmez. Her ISO işleminden önce açık SHA256 doğrulaması gerekir.
  • Remaster araçları xorriso yoksa veya boot metadatası desteklenmiyorsa başarısız olur.
  • Firstboot sadece sekiz haneli bayi numarası biçimini denetler; kurucu veya enrollment çağrısı yapmaz.

Kontrol:

tests/check-provisioning-static.sh

LAB doğrulaması, hedef Ubuntu sürümü, boot menüsü entegrasyonu, gerçek identity storage ve enrollment taşıma güvenliği sonraki fazların açık işleridir.