3866c12ddf
Snapshots the in-flight hardening work so subsequent reconcile/Quadlet
phases land on a clean before/after diff.
Changes:
- core/container/src/podman_client.rs: image_uses_insecure_registry()
whitelist for the OVH (146.59.87.168:3000) and legacy Hetzner
(23.182.128.160:3000) HTTP mirrors; podman_network_settings() lifts
custom networks into the Networks map so containers can join them.
- core/archipelago/src/container/prod_orchestrator.rs:
ensure_container_network() creates per-manifest networks on demand;
apply_data_uid() now goes through host_sudo for mkdir -p + chown so
bind-mount roots get created and chowned without password prompts.
- core/archipelago/src/api/rpc/package/{install,update,stacks}.rs:
podman pull adds --tls-verify=false only for whitelisted registries.
- core/archipelago/src/bootstrap.rs: removes stale dev-mode systemd
override on startup (live nodes carried it from old installers).
- core/archipelago/src/config.rs: ignore ARCHIPELAGO_DEV_MODE in prod
binaries — it had been silently rerouting volumes to /tmp.
- apps/bitcoin-{core,knots}/manifest.yml: locate bitcoind at runtime
so image-layout differences don't break entrypoint.
- scripts/app-catalog-image-smoke-test.py: production catalog/image
smoke test that probes a target node before users click Install.
- .gitignore: cover .codex, .pnpm-store, __pycache__, *.bak.
Removes filebrowser.rs.bak and two stale catalog.json.bak files
(verified identical to live counterparts).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
86 lines
996 B
Plaintext
86 lines
996 B
Plaintext
# SSH keys (sandbox copies)
|
|
.ssh/
|
|
|
|
# Rust build output
|
|
target/
|
|
**/target/
|
|
Cargo.lock
|
|
|
|
# Node.js
|
|
node_modules/
|
|
**/node_modules/
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
package-lock.json
|
|
pnpm-debug.log*
|
|
|
|
# Build outputs
|
|
dist/
|
|
dist-ssr/
|
|
build/
|
|
*.local
|
|
|
|
# IDE / editor
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
.DS_Store
|
|
|
|
# Environment and local overrides
|
|
.env
|
|
.env.local
|
|
.env.*.local
|
|
scripts/deploy-config.sh
|
|
|
|
# Logs
|
|
logs/
|
|
*.log
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# Testing
|
|
coverage/
|
|
.nyc_output/
|
|
|
|
# Temporary files
|
|
*.tmp
|
|
*.temp
|
|
|
|
# Build artifacts
|
|
*.iso
|
|
*.img
|
|
*.dmg
|
|
*.app
|
|
|
|
# macOS build output
|
|
build/macos/
|
|
|
|
# Image recipe output
|
|
image-recipe/output/
|
|
image-recipe/*.iso
|
|
image-recipe/*.img
|
|
|
|
# Loop tool artifacts (created in every subdirectory)
|
|
*/loop/
|
|
loop/loop/
|
|
loop/loop.log.bak
|
|
|
|
# Separate repos nested in tree
|
|
web/
|
|
|
|
._*
|
|
|
|
# Resilience harness reports (generated, contains session cookies)
|
|
scripts/resilience/reports/
|
|
|
|
# Codex / pnpm / python caches / editor backups
|
|
.codex
|
|
.pnpm-store/
|
|
**/__pycache__/
|
|
*.bak
|