archy/image-recipe/configs/archipelago-kiosk.service

[Unit]
Description=Archipelago Kiosk (X11 + Chromium)
After=archipelago.service systemd-user-sessions.service network-online.target
Wants=archipelago.service network-online.target
ConditionPathExists=/usr/local/bin/archipelago-kiosk-launcher
Conflicts=getty@tty1.service

[Service]
Type=simple
# Wait up to 5 min for archipelago to serve /health. On slow hardware
# first-boot is dominated by the FileBrowser pull (unbundled ISO),
# initial archipelago state sync, and frontend settle — .198 took
# longer than 120s and chromium launched against an empty backend,
# producing a white window that only recovered on reboot. 300s gives
# slow-but-functional hardware enough headroom; TimeoutStartSec is
# bumped in lockstep so systemd doesn't kill us mid-wait.
ExecStartPre=/bin/bash -c 'for i in $(seq 1 150); do curl -sf http://localhost/health >/dev/null 2>&1 && break; sleep 2; done'
ExecStart=/usr/local/bin/archipelago-kiosk-launcher
TimeoutStartSec=360
Restart=always
RestartSec=5

# Resource guardrail (#36). On GPU-less / headless hardware chromium could spin
# software compositing at ~92% of a core, saturating the node and starving the
# backend (it caused the .198 receive timeout + deploy storms). Cap CPU + memory
# so a runaway kiosk can never take the whole machine down; Delegate so the cap
# also binds the chromium/Xorg children in this unit's cgroup.
Delegate=yes
CPUQuota=75%
MemoryMax=1500M
MemoryHigh=1200M

[Install]
WantedBy=multi-user.target
refactor: update dependencies and remove unused code - Added new dependencies: `adler2`, `crc32fast`, `flate2`, `miniz_oxide`, and `libredox`. - Updated existing dependencies: `tokio-rustls` to version 0.26.4 and `filetime` to version 0.2.27. - Removed the `backup.rs` file as it is no longer needed. - Introduced tests for configuration and credential management. - Enhanced the `identity` module to generate W3C compliant DID documents. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> 2026-03-12 00:19:30 +00:00			`[Unit]`
			`Description=Archipelago Kiosk (X11 + Chromium)`
fix(iso): 3 first-boot issues from .198 reinstall report 1. nostr-vpn still failing despite last mask attempt — confirmed in the 6th ISO's rootfs.tar: the .service file was present but not in multi-user.target.wants. Previous `systemctl mask` silently no-oped because the real file was already there. Fixed properly with explicit `rm -f` + `ln -sf /dev/null` for nostr-vpn, archipelago-wg, and archipelago-wg-address — same /dev/null symlink state that `mask` would produce on a clean install. 2. Kiosk didn't come up on first boot, only on reboot. Extended the ExecStartPre health-poll from 30s → 120s (unbundled ISO takes longer to settle on first boot: archipelago initializes state, pulls FileBrowser, frontend settles), raised TimeoutStartSec to 180s, and added After=systemd-user-sessions.service + After=network-online.target so X / Chromium aren't racing. 3. /init: line 29: can't create /root/etc/network/interfaces error on installer boot — debootstrap --variant=minbase omits ifupdown so the target has no /etc/network/ directory, and live-boot's init tries to seed it. Non-fatal but noisy. Added ifupdown + isc-dhcp-client to the debootstrap --include list. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> 2026-04-19 09:54:12 -04:00			`After=archipelago.service systemd-user-sessions.service network-online.target`
			`Wants=archipelago.service network-online.target`
hot fixes to utc-6 2026-03-12 12:56:59 +00:00			`ConditionPathExists=/usr/local/bin/archipelago-kiosk-launcher`
refactor: update dependencies and remove unused code - Added new dependencies: `adler2`, `crc32fast`, `flate2`, `miniz_oxide`, and `libredox`. - Updated existing dependencies: `tokio-rustls` to version 0.26.4 and `filetime` to version 0.2.27. - Removed the `backup.rs` file as it is no longer needed. - Introduced tests for configuration and credential management. - Enhanced the `identity` module to generate W3C compliant DID documents. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> 2026-03-12 00:19:30 +00:00			`Conflicts=getty@tty1.service`

			`[Service]`
			`Type=simple`
fix(fips,kiosk): auto-activate FIPS at onboarding end + 5-min kiosk wait 1. FIPS auto-activate at server startup only fires if fips_key already exists on disk, which on a fresh install is never true until AFTER onboarding. By the time the user completes seed-generate/restore, archipelago has been running for minutes and the startup task has long since exited. User still had to hit Activate. Fix: call spawn_post_onboarding_fips_activate() from the tail of handle_seed_generate and handle_seed_restore — the moment the fips_key materialises, a detached task runs `fips::config::install` + `archipelago-fips.service activate`. Logged only, never blocks the onboarding RPC. 2. Kiosk health-poll window was 30 × 2s (configs/ copy was 60 × 2s but unused — the heredoc in build-auto-installer-iso.sh is what actually lands on disk). On .198's slower hardware archipelago /health wasn't ready within 60s, so Chromium launched against a not-yet-running backend → blank window until manual reboot. Bumped to 150 × 2s (5 min) + TimeoutStartSec=360. .253 was already well within the window; this protects the slower box too. Standalone configs/archipelago-kiosk.service updated in lockstep so the two copies don't drift. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> 2026-04-19 18:09:46 -04:00			`# Wait up to 5 min for archipelago to serve /health. On slow hardware`
			`# first-boot is dominated by the FileBrowser pull (unbundled ISO),`
			`# initial archipelago state sync, and frontend settle — .198 took`
			`# longer than 120s and chromium launched against an empty backend,`
			`# producing a white window that only recovered on reboot. 300s gives`
			`# slow-but-functional hardware enough headroom; TimeoutStartSec is`
			`# bumped in lockstep so systemd doesn't kill us mid-wait.`
			`ExecStartPre=/bin/bash -c 'for i in $(seq 1 150); do curl -sf http://localhost/health >/dev/null 2>&1 && break; sleep 2; done'`
hot fixes to utc-6 2026-03-12 12:56:59 +00:00			`ExecStart=/usr/local/bin/archipelago-kiosk-launcher`
fix(fips,kiosk): auto-activate FIPS at onboarding end + 5-min kiosk wait 1. FIPS auto-activate at server startup only fires if fips_key already exists on disk, which on a fresh install is never true until AFTER onboarding. By the time the user completes seed-generate/restore, archipelago has been running for minutes and the startup task has long since exited. User still had to hit Activate. Fix: call spawn_post_onboarding_fips_activate() from the tail of handle_seed_generate and handle_seed_restore — the moment the fips_key materialises, a detached task runs `fips::config::install` + `archipelago-fips.service activate`. Logged only, never blocks the onboarding RPC. 2. Kiosk health-poll window was 30 × 2s (configs/ copy was 60 × 2s but unused — the heredoc in build-auto-installer-iso.sh is what actually lands on disk). On .198's slower hardware archipelago /health wasn't ready within 60s, so Chromium launched against a not-yet-running backend → blank window until manual reboot. Bumped to 150 × 2s (5 min) + TimeoutStartSec=360. .253 was already well within the window; this protects the slower box too. Standalone configs/archipelago-kiosk.service updated in lockstep so the two copies don't drift. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> 2026-04-19 18:09:46 -04:00			`TimeoutStartSec=360`
refactor: update dependencies and remove unused code - Added new dependencies: `adler2`, `crc32fast`, `flate2`, `miniz_oxide`, and `libredox`. - Updated existing dependencies: `tokio-rustls` to version 0.26.4 and `filetime` to version 0.2.27. - Removed the `backup.rs` file as it is no longer needed. - Introduced tests for configuration and credential management. - Enhanced the `identity` module to generate W3C compliant DID documents. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> 2026-03-12 00:19:30 +00:00			`Restart=always`
			`RestartSec=5`

fix(kiosk): cap chromium resources + drop GPU rasterization when headless (#36) The kiosk chromium pinned ~92% of a core (software-compositing spin from --enable-gpu-rasterization on a GPU-less/headless node), saturating the machine and starving the backend + container builds — it caused the .198 receive timeout and the deploy storms. - archipelago-kiosk.service: CPUQuota=75% + MemoryMax/High + Delegate, so a runaway kiosk can never take the whole node down. - archipelago-kiosk-launcher.sh: detect /dev/dri — use GPU rasterization only when a GPU exists, else --disable-gpu (avoids the headless spin). - bootstrap::ensure_kiosk_hardened: OTA self-heal that installs the updated unit+launcher on already-deployed nodes, daemon-reloads, and only try-restarts a running kiosk (never re-enables an operator-disabled one). cargo check clean; launcher bash -n clean; unit syntax valid. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-06-16 11:10:26 -04:00			`# Resource guardrail (#36). On GPU-less / headless hardware chromium could spin`
			`# software compositing at ~92% of a core, saturating the node and starving the`
			`# backend (it caused the .198 receive timeout + deploy storms). Cap CPU + memory`
			`# so a runaway kiosk can never take the whole machine down; Delegate so the cap`
			`# also binds the chromium/Xorg children in this unit's cgroup.`
			`Delegate=yes`
			`CPUQuota=75%`
			`MemoryMax=1500M`
			`MemoryHigh=1200M`

refactor: update dependencies and remove unused code - Added new dependencies: `adler2`, `crc32fast`, `flate2`, `miniz_oxide`, and `libredox`. - Updated existing dependencies: `tokio-rustls` to version 0.26.4 and `filetime` to version 0.2.27. - Removed the `backup.rs` file as it is no longer needed. - Introduced tests for configuration and credential management. - Enhanced the `identity` module to generate W3C compliant DID documents. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> 2026-03-12 00:19:30 +00:00			`[Install]`
			`WantedBy=multi-user.target`