Dorian 39c7ac1924 feat: rootless podman, session hardening, boot stability, sidebar fix ...

Rootless podman migration (TASK-11):
- Remove sudo from all podman calls in PodmanClient + 8 backend files
- Remove sudo from all podman/docker calls in deploy script
- Restore full systemd security hardening: NoNewPrivileges,
  RestrictAddressFamilies, MemoryDenyWriteExecute, RestrictRealtime,
  RestrictNamespaces, RestrictSUIDSGID, SystemCallFilter, ProtectSystem=strict
- Enable loginctl linger for rootless container persistence
- Remove Ollama from auto-deploy (marketplace-only)

Session & auth hardening:
- Increase MAX_CONCURRENT_SESSIONS 20→50 (prevents eviction storms)
- Debounced 401 redirect in rpc-client.ts (prevents redirect storms)

Boot stability:
- optimize-debian.sh: adds chrony, swap, removes policy-rc.d
- deploy script: pre-restart chrony + swap setup
- ISO build: chrony package, swap file creation
- BootScreen: no longer clears localStorage (prevents splash replay)
- RootRedirect: sole owner of localStorage clearing on server ready

UI fixes:
- Sidebar opacity default changed from 0→visible (fixes missing sidebar
  after page-persistence login without entrance animation)
- Console.log/error wrapped in import.meta.env.DEV guards
- Remove unused route import from RootRedirect

Beta tracking:
- CLAUDE.md: beta freeze protocol added
- MASTER_PLAN.md: TASK-11, TASK-17, phase structure
- BETA-PROGRESS.md: initial tracking doc
- Tagged v1.2.0-alpha.1 as pre-rootless baseline

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-18 13:53:27 +00:00

..

adr

feat: identity lifecycle tests and ADR-011 DWN deprioritization

2026-03-15 05:01:06 +00:00

ai-quarantine-architecture.html

feat: add TOTP 2FA, API key switcher, login progress bar, and alpha hardening plan

2026-03-06 12:23:57 +00:00

api-reference.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

app-developer-guide.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

app-manifest-spec.md

Initial commit

2026-01-24 22:01:51 +00:00

architecture.md

docs: update architecture and current-state for v1.2.0

2026-03-14 03:11:07 +00:00

arm64-build.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

arm64-container-images.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

arm64-rpi5-testing.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

BETA-PROGRESS.md

feat: rootless podman, session hardening, boot stability, sidebar fix

2026-03-18 13:53:27 +00:00

BETA-RELEASE-CHECKLIST.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

BITCOIN-KNOTS-BETA.md

Revise BUILD-GUIDE and enhance ISO build process

2026-02-03 21:43:33 +00:00

building-os-images.md

Update .gitignore and remove obsolete documentation files

2026-02-01 02:22:02 +00:00

canary-deploy.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

community-app-review-checklist.md

fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04)

2026-03-11 18:13:28 +00:00

community-growth-plan.md

docs: community growth plan and v3.0 release checklist

2026-03-14 05:58:50 +00:00

current-state.md

docs: update architecture and current-state for v1.2.0

2026-03-14 03:11:07 +00:00

dependency-audit-log.md

chore: run monthly dependency update cycle (MAINT-01)

2026-03-11 18:00:02 +00:00

developer-guide.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

development-containers.md

mid coding commit

2026-01-24 22:59:20 +00:00

development-setup.md

mid coding commit

2026-01-24 22:59:20 +00:00

DID_ONBOARDING_ASSESSMENT.md

Implement onboarding reset functionality and enhance backup features

2026-03-02 08:34:13 +00:00

did-dht-integration.md

docs: did:dht integration architecture and DWN protocol schemas

2026-03-14 02:59:16 +00:00

dwn-protocols.md

docs: did:dht integration architecture and DWN protocol schemas

2026-03-14 02:59:16 +00:00

hardware-compatibility.md

feat: hardware compatibility, TPM attestation, security audit prep

2026-03-14 05:57:32 +00:00

hardware-regression-v1.0.md

chore: resolve remaining plan items — hardware test, superseded milestones

2026-03-11 18:27:15 +00:00

hardware-wallet-integration.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

hotfix-process.md

docs: set up post-release monitoring and hotfix process (LAUNCH-02)

2026-03-11 18:24:56 +00:00

marketplace-protocol.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

MASTER_PLAN.md

feat: rootless podman, session hardening, boot stability, sidebar fix

2026-03-18 13:53:27 +00:00

mesh-bitcoin.md

security hardening

2026-03-18 09:56:40 +00:00

multi-node-architecture.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

network-topology.md

feat: Phase 4 backend hardening — container reliability + security audit

2026-03-14 02:45:28 +00:00

operations-runbook.md

docs: v1.2.0 changelog and operations runbook

2026-03-14 03:08:48 +00:00

PACKAGE-INSTALLATION-SECURITY.md

Enhance README and RPC for package management

2026-02-01 18:46:35 +00:00

pkarr-evaluation.md

feat: Phase 8 — encrypt credentials at rest, DHT refresh, pkarr eval

2026-03-15 04:59:20 +00:00

quality-baseline.md

chore: quarterly quality sweep — zero regressions, 515 tests pass (MAINT-03)

2026-03-11 18:10:45 +00:00

refactoring-plan.md

bullshit

2026-03-15 00:40:55 +00:00

release-process.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

roadmap-v1.1.md

docs: create v1.1 roadmap with bug fixes, marketplace expansion, UX improvements (LAUNCH-03)

2026-03-11 17:54:30 +00:00

roadmap-v2.0.md

docs: plan v2.0 features — multi-chain, mesh, mobile, AI, plugins (MAINT-05)

2026-03-11 18:14:33 +00:00

scale-budget.md

docs: create resource budget for 10K users (SCALE-01)

2026-03-14 03:18:15 +00:00

security-audit-2026-03-05.md

docs: add security audit report for new features (Task 22)

2026-03-05 08:49:22 +00:00

security-audit-2026-03-11.md

fix: monthly security scan — fix shell injection and add RPC body limit (MAINT-02)

2026-03-11 18:09:16 +00:00

security-audit-prep.md

feat: hardware compatibility, TPM attestation, security audit prep

2026-03-14 05:57:32 +00:00

security-code-audit-2026-03.md

docs: comprehensive security and code quality audit report

2026-03-15 05:33:08 +00:00

SECURITY-NOSTR-DISCOVERY.md

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

startos-dependency-audit.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

TAILSCALE-INTEGRATION.md

Enhance README and RPC for package management

2026-02-01 18:46:35 +00:00

three-mode-ui-design.md

feat: complete Phase 1 foundation hardening + three-mode UI design doc

2026-03-04 05:23:42 +00:00

troubleshooting.md

docs: add comprehensive troubleshooting guide (FINALDOC-01)

2026-03-11 17:20:21 +00:00

USER-GUIDE-TAILSCALE.md

Enhance README and RPC for package management

2026-02-01 18:46:35 +00:00

user-guide.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

user-walkthrough.md

docs: add user walkthrough with screenshot placeholders (FINALDOC-02)

2026-03-11 17:21:40 +00:00

ux-audit-2026-03.md

docs: complete UX audit of all 12 pages

2026-03-11 10:13:36 +00:00

v3-release-checklist.md

docs: community growth plan and v3.0 release checklist

2026-03-14 05:58:50 +00:00

WEB5_NOSTR_IDENTITY.md

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00