[WIP] First-install owner setup and keyboard-accessible seed confirmation #168

2026-11-13T15:33:14Z

chaum commented

2026-11-13 15:33:14 +00:00

Requires UI/UX UAT approval from the maintainer

Summary

Add unique owner username, hostname, password and optional Wi-Fi collection to the first ISO install. Use the installer password for the OS owner and first dashboard login, keep service/root accounts locked and SSH key only, and retain optional signer onboarding. Correct the encrypted kernel receipt handoff, installer failure/reboot presentation and boot artwork. Make the recovery seed confirmation usable without a mouse: Tab reaches the checkbox, the short-screen scroll cue focuses it, Space confirms it, and Continue receives focus.

Screens and flows to review

ISO BIOS and UEFI boot menus: inspect branded layout and keyboard selection on desktop and small displays.
Live installer: choose owner username, hostname and password; confirm matching password, Wi-Fi scan and password, no-adapter skip, failed Wi-Fi retry/skip, disk selection, installation completion, USB removal prompt and reboot. Check loading, error and success states; verify the selected disk is disposable.
Installed kiosk and console: automatic kiosk launch, chosen owner console login, chosen hostname and network; verify service/root logins remain locked and SSH accepts keys only.
/onboarding/seed: inspect generated words, QR tab, warning and confirmation checkbox at desktop and phone widths, light and dark themes and kiosk. With no mouse, Tab from Words through QR code to the checkbox, press Space, then Enter on Continue. On a short screen, focus the “One more step below” cue, press Enter, verify it focuses the unchecked checkbox, press Space, then Continue. Check loading, retry/error, unchecked and checked states.
/onboarding/seed-verify, /onboarding/done and /login: verify seed challenges, then “Log In” with the installer password rather than a second password setup. Check wrong password and success, optional Add signer and skip signer, on desktop and phone widths, light and dark themes and kiosk.

Checks

Installer owner focused unit tests: 5 passed.
Seed scroll and focus unit tests: 6 passed.
Chromium keyboard flow at narrow kiosk width: Tab → checkbox, Space → checked, Enter → seed verification; scroll cue → focused unchecked checkbox.
UI type check, installer shell syntax and Git whitespace checks passed.
Operator reports a physical installer/reboot/kiosk/onboarding run succeeded except for the mouse-free seed confirmation. The new checkbox focus change still needs maintainer UAT and production artifact qualification.

Release note

This draft targets main and includes the current Gitea main commit. It was opened on Gitea as a temporary review path because ngit currently rejects publication with divergent visible main tips. Link the eventual ngit proposal before merging. The earlier private RC6 ISO is not a qualified release artifact. Do not merge or publish an OTA/ISO until the UI/UX UAT and release gates pass.

Requires UI/UX UAT approval from the maintainer ## Summary Add unique owner username, hostname, password and optional Wi-Fi collection to the first ISO install. Use the installer password for the OS owner and first dashboard login, keep service/root accounts locked and SSH key only, and retain optional signer onboarding. Correct the encrypted kernel receipt handoff, installer failure/reboot presentation and boot artwork. Make the recovery seed confirmation usable without a mouse: Tab reaches the checkbox, the short-screen scroll cue focuses it, Space confirms it, and Continue receives focus. ## Screens and flows to review 1. ISO BIOS and UEFI boot menus: inspect branded layout and keyboard selection on desktop and small displays. 2. Live installer: choose owner username, hostname and password; confirm matching password, Wi-Fi scan and password, no-adapter skip, failed Wi-Fi retry/skip, disk selection, installation completion, USB removal prompt and reboot. Check loading, error and success states; verify the selected disk is disposable. 3. Installed kiosk and console: automatic kiosk launch, chosen owner console login, chosen hostname and network; verify service/root logins remain locked and SSH accepts keys only. 4. `/onboarding/seed`: inspect generated words, QR tab, warning and confirmation checkbox at desktop and phone widths, light and dark themes and kiosk. With no mouse, Tab from Words through QR code to the checkbox, press Space, then Enter on Continue. On a short screen, focus the “One more step below” cue, press Enter, verify it focuses the unchecked checkbox, press Space, then Continue. Check loading, retry/error, unchecked and checked states. 5. `/onboarding/seed-verify`, `/onboarding/done` and `/login`: verify seed challenges, then “Log In” with the installer password rather than a second password setup. Check wrong password and success, optional Add signer and skip signer, on desktop and phone widths, light and dark themes and kiosk. ## Checks - Installer owner focused unit tests: 5 passed. - Seed scroll and focus unit tests: 6 passed. - Chromium keyboard flow at narrow kiosk width: Tab → checkbox, Space → checked, Enter → seed verification; scroll cue → focused unchecked checkbox. - UI type check, installer shell syntax and Git whitespace checks passed. - Operator reports a physical installer/reboot/kiosk/onboarding run succeeded except for the mouse-free seed confirmation. The new checkbox focus change still needs maintainer UAT and production artifact qualification. ## Release note This draft targets `main` and includes the current Gitea main commit. It was opened on Gitea as a temporary review path because ngit currently rejects publication with divergent visible main tips. Link the eventual ngit proposal before merging. The earlier private RC6 ISO is not a qualified release artifact. Do not merge or publish an OTA/ISO until the UI/UX UAT and release gates pass.

chaum added 14 commits 2026-11-13 15:33:15 +00:00

feat: collect unique owner credentials in ISO installer 711ea80fb1

fix: keep installer login clear during onboarding handoff bb4115e0a7

fix: provision ISO policy in isolated rootless image namespace 98847b930f

Fix installer Wi-Fi fallback, root permissions, and boot layout 459115dc86

Use absolute chroot paths in rootless ISO preflight d4396d7246

Render left aligned branded BIOS and UEFI installer menus 3ae717f66e

Keep BIOS artwork visible behind boot choices a3d5942aa2

Keep installer failures visible and fix owner console and cipher fallback 890cb94ae7

Correct installer progress step count 961c0fbdf5

Preserve kernel provenance across encrypted data mount 32a92b29f7

Stage installer password where dashboard auth reads it 6b56347dcf

Make seed confirmation reachable by keyboard on kiosk 4c3cf5a324

Integrate latest ngit main before installer PR fd988e445f

Integrate current main before next-beta draft PR fe383efe70

# Conflicts:
#	image-recipe/_archived/build-auto-installer-iso.sh

You are not authorized to merge this pull request.

This pull request can be merged automatically.

This branch is out-of-date with the base branch

This pull request is marked as a work in progress.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin pr/feat/first-install-owner-network-20261112:pr/feat/first-install-owner-network-20261112

git checkout pr/feat/first-install-owner-network-20261112

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: lfg2025/archy#168