Builder setup: - iso/builder/VERSIONS: pinned Alpine 3.21, Go 1.23.6, NVIDIA 550.54.15 - iso/builder/setup-builder.sh: installs build deps + Go on Alpine VM, verifies packages - iso/builder/build-debug.sh: compiles audit binary, injects SSH keys, builds ISO - iso/builder/mkimg.bee_debug.sh: Alpine mkimage profile (all audit packages + dropbear) SSH access (same Ed25519 key as release signing): - auto-collects ~/.keys/*.key.pub into authorized_keys at build time - fallback: user bee / password eeb when no keys available - bee-sshsetup init.d service: creates bee user, sets password, logs status Debug overlay: - bee-network: DHCP on all physical interfaces before SSH/audit - bee-audit-debug: runs audit on boot, leaves SSH up after - bee-sshsetup: key/password SSH setup - motd: shows log paths, re-run command, SSH access info Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
22 lines
558 B
Plaintext
22 lines
558 B
Plaintext
#!/sbin/openrc-run
|
|
|
|
description="Bee: run hardware audit (debug mode — SSH stays up after)"
|
|
|
|
depend() {
|
|
need localmount
|
|
after bee-network
|
|
}
|
|
|
|
start() {
|
|
ebegin "Running hardware audit"
|
|
/usr/local/bin/audit --output stdout > /var/log/bee-audit.json 2>/var/log/bee-audit.log
|
|
local rc=$?
|
|
if [ $rc -eq 0 ]; then
|
|
einfo "Audit complete: /var/log/bee-audit.json"
|
|
einfo "SSH in and inspect results. Dropbear is running."
|
|
else
|
|
ewarn "Audit finished with errors — check /var/log/bee-audit.log"
|
|
fi
|
|
eend 0
|
|
}
|