tomnewton-mulga
01cd3b9ab1
Merge commit 'b7b639084b3c2a40b97c2f543b88ad498901b77d' into feat/iso-installer
...
# Conflicts:
# Makefile
# cmd/spinifex/cmd/admin.go
# go.sum
2026-04-14 16:11:49 +10:00
Julian Sommer
0547bdd1fe
feat: loadbalancer frontend ( #136 )
2026-04-14 09:24:14 +10:00
tomnewton-mulga
e8e05d6898
chore: merge main into feat/iso-installer, resolve Makefile .PHONY conflict
2026-04-10 09:40:16 +10:00
tomnewton-mulga
10a2a8116f
fix: resolve firstboot service failures and improve installer UX (mulga-859)
...
- chown /etc/spinifex and /var/lib/spinifex to spinifex:spinifex after
spx admin init so services running as the spinifex user can read configs
- add Environment=HOME=/root to firstboot unit to suppress $HOME warning
- increase wait-for-nats.sh timeout from 30s to 90s for slow startup
- banner now writes to both /dev/tty1 and /etc/motd (visible over SSH)
- add systemd.show_status=1 to GRUB cmdline for per-service boot feedback
- add --removable to grub-install EFI so fallback path EFI/BOOT/BOOTX64.EFI
is written (required for UTM and bare metal without NVRAM boot entries)
- add root password screen and manual NIC entry to installer TUI
- tee spx admin init output to /root/spinifex-credentials.txt with 0600 perms
2026-04-09 13:52:31 +10:00
Julian Sommer
26e590716e
feat: add systemd hardening directives to all service units ( #120 )
2026-04-09 12:09:43 +10:00
Julian Sommer
e27d909e8d
feat: move NBD sockets to /run/spinifex/nbd/ and enable PrivateTmp ( #119 )
2026-04-09 11:11:54 +10:00
Julian Sommer
ccb6ed287d
fix: move bootstrap.json to different folder to tighten perms ( #118 )
2026-04-08 16:12:25 +10:00
Julian Sommer
9a7e914d28
feat: awsgw directory ( #117 )
2026-04-08 15:19:29 +10:00
Julian Sommer
45ea467fcc
feat: webserver proxy ( #116 )
2026-04-08 11:46:43 +10:00
Julian Sommer
a56a2baf1f
feat: privilege separation ( #114 )
2026-04-07 16:22:19 +10:00
Ben Duncan
21aa1296c9
systemd tweaks for binary install to correctly function
2026-04-02 13:35:52 +10:00
Julian Sommer
11f7c99955
fix: ui cert path
2026-04-02 11:20:02 +10:00
Julian Sommer
1b45c7fc7d
fix: nats ip in services
2026-04-02 10:58:39 +10:00
Julian Sommer
868a92bd55
fix: service
2026-04-02 10:35:00 +10:00
Ben Duncan
4f00cf9e4c
refactor: update Dockerfile and build artifacts for spinifex rename
...
- Dockerfile.distro: update all paths from hive → spinifex
- Binary output name: spx
- Logrotate: logrotate-spinifex
2026-03-18 01:20:27 +00:00
Ben Duncan
b97a98e2b7
refactor: rename systemd units and logrotate from hive to spinifex
...
- Rename all build/systemd/hive-* → spinifex-*
- Rename build/logrotate/hive → spinifex
- Update unit contents: descriptions, dependencies, user/group, paths
- Binary path set to /usr/local/bin/spx
2026-03-18 00:53:34 +00:00
Ben Duncan
120bfa8953
fix: generate go.work in Dockerfile instead of copying gitignored file
2026-03-16 12:36:56 +00:00
Ben Duncan
a458a28406
new binary mode and systemd process
2026-03-16 11:57:52 +00:00