Repository navigation
feat(setup): prepare Docker manager credentials in one command - #5
Merged
Merged
Conversation
Import USB enrollment unchanged and generate private API token and loopback TLS credentials. Publish the bundle atomically, validate retries without rotating keys, and isolate producer credentials from device and TLS private keys. Add named-volume Compose setup while retaining the existing bind-mount deployment. Cover unsafe inputs and failed publication; document one-year TLS expiry and the remaining Docker runtime acceptance boundary. AI-Impact: co-developed AI: cx
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Replace manual token/TLS generation and UID/chmod preparation with
epaper-manager setup. Import existing USB enrollment unchanged, prepare an atomic private bundle, and validate retries without overwriting credentials.Verification
make qualitypassed in a clean candidate inside the existing Dev Container.Operational boundaries
No flashing, real-key changes or hardware frames. Docker image/runtime setup has not yet been exercised. The generated loopback certificate expires after one year; renewal is not automatic. v0.1.1 does not contain setup; the new image becomes available only after this release.