lfg2025/archy
1
0
Fork 0
Code Issues 14 Pull Requests Actions Packages Projects Releases 44 Wiki Activity
archy/scripts
History
archipelago 1977bdefb5 feat(trust): pin release-root anchor + ship signed app-catalog 
Pin RELEASE_ROOT_PUBKEY_HEX from the 2026-07-02 release-root signing ceremony
(signer did🔑z6MkkidEnEpo6qHMCNSZoNKWtvQvxq3whnaME9wGgEFhq7ur) so nodes verify
the publisher identity of the app-catalog. Sign releases/app-catalog.json in place.

Fix two floats that made the catalog unsignable: archy-btcpay-db manifest version
-> string, fedimint-clientd cpu_limit 0.25 -> 1 (u32). Add scripts/sign-catalog.sh
helper, the 1.8.0 release-hardening plan/tracker, and the commit-and-push project
rule in CLAUDE.md.

Backward-compatible: old binaries still accept the signed catalog; the pinned-anchor
binary ships in the next build/OTA.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-02 09:15:43 -04:00
..
archy-dev
feat: add archy-dev CLI scaffold for app developers
2026-03-14 05:47:29 +00:00
lib
app-platform: remove revoked onlyoffice app
2026-06-11 01:03:45 -04:00
resilience
test(resilience): gate host-reboot batch on os-audit (L3 per-boot health)
2026-06-14 08:01:30 -04:00
tor
chore(release): stage v1.7.54-alpha
2026-05-06 09:23:57 -04:00
app-catalog-image-smoke-test.py
chore: baseline codex hardening before lifecycle refactor
2026-05-01 08:52:29 -04:00
app-surface-smoke-test.sh
chore: release v1.7.49-alpha
2026-04-30 16:37:54 -04:00
archipelago-tailscale.service
Enhance README and RPC for package management
2026-02-01 18:46:35 +00:00
archipelago-wg
feat: ISO networking stack — relay + nvpn v0.3.7 + WireGuard
2026-04-08 15:06:27 +02:00
audit-secrets.sh
refactor: update dependencies and remove unused code
2026-03-12 00:19:30 +00:00
bitcoin-stack-lifecycle-test.sh
chore: release v1.7.49-alpha
2026-04-30 16:37:54 -04:00
bootstrap-switchover.sh
refactor: migrate container registry from 80.71.235.15:3000 to git.tx1138.com/lfg2025
2026-04-11 09:33:10 -04:00
build-bitcoin-image.sh
fix(bitcoin): bulletproof multi-version switching (Knots & Core)
2026-06-29 05:46:04 -04:00
check-app-catalog-drift.py
integration: preserve deployed 1.8.0 OTA work
2026-06-30 05:08:17 -04:00
check-release-manifest.sh
chore(release): require curated release notes
2026-05-17 18:59:12 -04:00
configure-tailscale-nginx.sh
Enhance README and RPC for package management
2026-02-01 18:46:35 +00:00
container-doctor.sh
fix: fresh-ISO feedback bug-bash — onboarding, status truthfulness, recovery, kiosk, logs
2026-07-02 08:00:39 -04:00
container-specs.sh
fix(bitcoin,ui): RAM-aware dbcache to stop swap-thrash 502s + snappier status + icon placeholder
2026-06-18 09:14:47 -04:00
create-release-manifest.sh
chore(release): move artifacts to gitea releases
2026-05-13 14:11:42 -04:00
create-release.sh
test(gate): make 5× the canonical gate, drop 20x naming
2026-06-22 18:12:41 -04:00
debug-frontend.sh
feat: complete Phase 1 foundation hardening + three-mode UI design doc
2026-03-04 05:23:42 +00:00
deploy-bitcoin-knots.sh
refactor: migrate container registry from 80.71.235.15:3000 to git.tx1138.com/lfg2025
2026-04-11 09:33:10 -04:00
deploy-config-defaults.sh
fix: deploy error visibility, trap cleanup, variable quoting, frontend resilience
2026-03-21 02:06:08 +00:00
deploy-config.example
backend: harden rootless app lifecycle orchestration
2026-06-11 00:24:32 -04:00
deploy-tailscale.sh
fix: fresh-ISO feedback bug-bash — onboarding, status truthfulness, recovery, kiosk, logs
2026-07-02 08:00:39 -04:00
deploy-to-target.sh
fix(deploy): also exclude .venv from the rsync payload
2026-07-01 10:54:34 -04:00
dev-container-test.sh
refactor: migrate container registry from 80.71.235.15:3000 to git.tx1138.com/lfg2025
2026-04-11 09:33:10 -04:00
dev-start.sh
fix: ISO boot, container installs, VPN, nginx, companion input
2026-04-10 03:10:49 -04:00
first-boot-containers.sh
fix: fresh-ISO feedback bug-bash — onboarding, status truthfulness, recovery, kiosk, logs
2026-07-02 08:00:39 -04:00
fix-indeedhub-containers.sh
backend: harden rootless app lifecycle orchestration
2026-06-11 00:24:32 -04:00
fleet-fips-pair.sh
ops(fips): fleet LAN fast-path pairing script (dev nodes only)
2026-04-19 01:50:20 -04:00
fleet-fips-unpair.sh
fix(ui,ops): TransportPrefsCard import path + fleet unpair script
2026-04-19 02:08:32 -04:00
generate-app-catalog.py
app-platform: type manifest launch interfaces
2026-06-11 00:52:16 -04:00
generate-app-catalog.sh
docs+catalog: bitcoin multi-version rollout handoff + reproducible generator
2026-06-29 06:02:24 -04:00
image-versions.sh
fix(fmcd): cap CPU + watchdog-restart the iroh relay hot-loop
2026-06-28 12:19:27 -04:00
install-tui-demo.sh
chore: Debian 12 → 13 (Trixie) migration, service hardening
2026-04-09 21:32:08 +02:00
nginx-app-iframe-patch.conf
Implement multi-container app installation for Immich and Penpot, enhance Docker package scanning, and update Nginx configuration for iframe support
2026-02-25 18:04:41 +00:00
nginx-archipelago-patch.conf
Update Fedimint configuration and enhance onboarding process
2026-02-17 15:03:34 +00:00
nginx-https-app-proxies.conf
app-platform: remove revoked onlyoffice app
2026-06-11 01:03:45 -04:00
nginx-penpot-iframe-patch.conf
Implement multi-container app installation for Immich and Penpot, enhance Docker package scanning, and update Nginx configuration for iframe support
2026-02-25 18:04:41 +00:00
nginx-pwa-snippet.conf
Enhance PWA support with new install prompt and configuration updates
2026-02-18 13:48:45 +00:00
node-profile.sh
fix: companion indicator shows relay state, add node-profile script
2026-04-02 11:14:34 +01:00
optimize-debian.sh
feat: rootless podman, session hardening, boot stability, sidebar fix
2026-03-18 13:53:27 +00:00
publish-companion-apk.sh
fix(android): force v1+v2+v3 signing & clean-build guards in companion publish
2026-06-26 11:53:25 +01:00
publish-release-assets.sh
fix(release): verify published OTA artifacts
2026-05-19 12:10:42 -04:00
reconcile-containers.sh
fix: fresh-ISO feedback bug-bash — onboarding, status truthfulness, recovery, kiosk, logs
2026-07-02 08:00:39 -04:00
run-e2e-tests.sh
fix: zero-amount invoices, identity.verify DID extraction, tor service permissions
2026-03-09 09:53:36 +00:00
run-post-install-tests.sh
fix: filebrowser port bind, CSRF in tests, console-setup, auto-test scope
2026-03-27 17:17:18 +00:00
run-tests.sh
test: add CI-compatible test runner script
2026-03-10 23:56:10 +00:00
self-update.sh
chore: snapshot release workspace
2026-06-12 03:00:15 -04:00
setup-aiui-server.sh
fix: WebSocket race conditions, Vue error handler, remove sudo podman, add container health checks
2026-03-21 01:11:05 +00:00
setup-https-dev.sh
chore(release): stage v1.7.52-alpha
2026-05-05 11:29:18 -04:00
setup-target-dev.sh
Refactor configuration and scripts for Archipelago backend and ISO build
2026-02-01 05:42:05 +00:00
sign-catalog.sh
feat(trust): pin release-root anchor + ship signed app-catalog
2026-07-02 09:15:43 -04:00
smoke-test.sh
feat: add E2E smoke test script and CI/CD pipeline plan
2026-03-21 03:08:00 +00:00
sync-npm-public-hosts.sh
app-platform: remove unsupported saleor release surface
2026-06-11 01:16:21 -04:00
sync-whats-new.py
feat(release): gate that Settings 'What's New' modal stays in sync with CHANGELOG
2026-06-14 08:31:43 -04:00
tor-helper.sh
fix: systemd resource limits, Tor rotation transition, unwrap elimination, RPC timeouts
2026-03-21 01:46:40 +00:00
trust-archipelago-cert.sh
fix: deploy locking, safe eval replacement, first-boot error handling, script hardening
2026-03-21 01:39:22 +00:00
uptime-monitor.sh
fix: WebSocket race conditions, Vue error handler, remove sudo podman, add container health checks
2026-03-21 01:11:05 +00:00
validate-app-manifest.sh
refactor: migrate container registry from 80.71.235.15:3000 to git.tx1138.com/lfg2025
2026-04-11 09:33:10 -04:00
verify-seed-derivation.py
feat(identity): seed-derivation verifier + KAT; rename "Your DID"→"Node DID"
2026-06-16 10:17:29 -04:00