wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 4 Packages Projects Releases Wiki Activity

fix(security): remove credentialed reboot SOP command
All checks were successful
CD Pipeline / workflow-shape (push) Successful in 2s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m17s
Details
CD Pipeline / build-and-deploy (push) Successful in 13m58s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m55s
Details

Browse Source
This commit is contained in:
ogt
2026-07-15 02:15:44 +08:00
parent 74fbefc6c9
commit 3d8fa0200e
2 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
scripts/reboot-recovery/tests/test_reboot_p0_operational_contract.py
View File

@@ -15,6 +15,13 @@ def read(path: str) -> str:
return (ROOT / path).read_text(encoding="utf-8")
def test_reboot_sop_never_embeds_passworded_sudo_startup() -> None:
sop = read("docs/runbooks/REBOOT-RECOVERY-SOP.md")
assert "sudo -n /usr/local/bin/awoooi-startup-110.sh" in sop
assert "| sudo -S /usr/local/bin/awoooi-startup-110.sh" not in sop
def load_public_maintenance_probe() -> ModuleType:
path = ROOT / "scripts/reboot-recovery/public-maintenance-fallback-probe.py"
spec = importlib.util.spec_from_file_location(