clawdie/clawdie-iso
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
clawdie-iso/live/operator-session
History
Sam & Claude 862af0583b feat(seed): outbound SSH client material for hands-free node->mother 
The baked mother key (build/mother-ssh-key) puts a private key in the image,
which only works for a non-published personalized stick. The offline FAT32
seed is the correct home for per-node secrets.

Teach the importer to install outbound SSH client material from an agent's
ssh/ dir into the agent home:
  - config       -> ~/.ssh/config       (0600)
  - known_hosts* -> ~/.ssh/known_hosts* (0644, merged + de-duped)
  - <name>.pub   -> ~/.ssh/<name>.pub   (0644)
  - <name>       -> ~/.ssh/<name>        (0600, any other file = private key)
authorized_keys stays inbound-only via _seed_install_authorized_keys.

This closes the 'without manual key exchange' gap: known_hosts pins mother's
host key so the first node->mother connect does not prompt, and the private
client key rides on the offline seed instead of the base image — so the
published image stays secret-free. Supersedes the baked-key path (#112),
which can retire once this is validated on hardware.

Verified offline (CLAWDIE_SEED_TEST): correct perms (key 0600, pub/known_hosts
0644, config 0600, .ssh 0700) and idempotent known_hosts merge across re-runs.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-22 09:55:56 +02:00
..
autostart Fix XFCE tray volume and clock sizing (Sam & Codex) 2026-06-05 11:47:45 +02:00
icons Merge pull request 'merge/all-three-fixes' (#11) from merge/all-three-fixes into main 2026-06-04 20:04:23 +02:00
mcp-examples docs: add external MCP profile examples to ISO (Sam & Codex) 2026-06-13 19:54:17 +02:00
panel-skel Fix XFCE tray volume and clock sizing (Sam & Codex) 2026-06-05 11:47:45 +02:00
wallpapers Merge pull request 'Fix XFCE SVG icon sniffing (Sam & Codex)' (#9) from fix/xfce-svg-pixbuf-icons into main 2026-06-04 20:04:23 +02:00
xorg.conf.d Merge xfce-operator-usb: Track F Colibri, DeepSeek smoke, LLM provider harness 2026-06-04 20:04:23 +02:00
49-clawdie-power.rules Merge xfce-operator-usb: Track F Colibri, DeepSeek smoke, LLM provider harness 2026-06-04 20:04:23 +02:00
bootstrap.html docs: document Python 3.11/3.12 coexistence with FreeBSD defaults 2026-06-21 09:36:28 +02:00
clawdie-bootstrap-launch.sh fix(xfce): replace noisy autostart with start-here note (Sam & Codex) 2026-06-20 08:24:18 +02:00
clawdie-bootstrap.desktop fix(xfce): replace noisy autostart with start-here note (Sam & Codex) 2026-06-20 08:24:18 +02:00
clawdie-enable-mother.desktop feat(iso): wire Colibri OOTB defaults + opt-in Mother MCP link 2026-06-21 18:53:41 +02:00
clawdie-enable-mother.sh feat(enable-mother): publish colibri pubkey to Vaultwarden for hive auth 2026-06-21 20:18:27 +02:00
clawdie-join-hive.desktop fix(desktop): match Exec path to installed binary (drop .sh suffix) 2026-06-20 11:40:55 +02:00
clawdie-join-hive.sh fix(tailscale): make vault auto-join work on the OOTB operator image 2026-06-21 21:48:14 +02:00
clawdie-live-audio Merge xfce-operator-usb: AMD ASUS hardware lane + XFCE panel polish (Sam & Claude) 2026-06-04 20:04:23 +02:00
clawdie-live-gpu feat(gpu): universal NVIDIA lane — detect + install branch at boot (Sam & Claude) 2026-06-04 22:19:36 +02:00
clawdie-live-power docs(live-power): document C3 wake-safety invariant; tidy rcorder block 2026-06-20 17:22:28 +02:00
clawdie-live-resolver Merge xfce-operator-usb: AMD ASUS hardware lane + XFCE panel polish (Sam & Claude) 2026-06-04 20:04:23 +02:00
clawdie-live-seed feat(seed): outbound SSH client material for hands-free node->mother 2026-06-22 09:55:56 +02:00
clawdie-live-seed.README.txt feat(seed): outbound SSH client material for hands-free node->mother 2026-06-22 09:55:56 +02:00
clawdie-live-touchpad-guard Merge xfce-operator-usb: AMD ASUS hardware lane + XFCE panel polish (Sam & Claude) 2026-06-04 20:04:23 +02:00
clawdie-live-wifi Merge xfce-operator-usb: Track F Colibri, DeepSeek smoke, LLM provider harness 2026-06-04 20:04:23 +02:00
clawdie-noblank-guard.sh cleanup(tmp): remove Clawdie-owned host tmp paths (Sam & Pi) 2026-06-20 21:07:05 +02:00
clawdie-startx Merge xfce-operator-usb: Track F Colibri, DeepSeek smoke, LLM provider harness 2026-06-04 20:04:23 +02:00
clawdie-tailscale-up fix(tailscale): make vault auto-join work on the OOTB operator image 2026-06-21 21:48:14 +02:00
clawdie-vault-fetch cleanup(tmp): remove Clawdie-owned host tmp paths (Sam & Pi) 2026-06-20 21:07:05 +02:00
clawdie-wallpaper-gen.sh cleanup(tmp): remove Clawdie-owned host tmp paths (Sam & Pi) 2026-06-20 21:07:05 +02:00
clawdie-xfce-session Merge xfce-operator-usb: AMD ASUS hardware lane + XFCE panel polish (Sam & Claude) 2026-06-04 20:04:23 +02:00
clawdie-xfce-session-inner Merge pull request 'pi/main-live-boot-xfce-colibri-fixes' (#4) from pi/main-live-boot-xfce-colibri-fixes into main 2026-06-04 20:04:23 +02:00
clawdie-xfce.desktop Merge xfce-operator-usb: Track F Colibri, DeepSeek smoke, LLM provider harness 2026-06-04 20:04:23 +02:00
colibri-dashboard.desktop fix(xfce): replace noisy autostart with start-here note (Sam & Codex) 2026-06-20 08:24:18 +02:00
colibri-live-rebuild feat(colibri): gate test-agent staging by build mode (Sam & Pi) 2026-06-21 07:55:24 +02:00
colibri-panel-indicator.sh sync(visuals): hardened panel indicator + wallpaper on join from layered-soul 2026-06-20 12:16:11 +02:00
hw-report Merge pull request 'merge/all-three-fixes' (#11) from merge/all-three-fixes into main 2026-06-04 20:04:23 +02:00
hw-report.desktop Merge xfce-operator-usb: Track F Colibri, DeepSeek smoke, LLM provider harness 2026-06-04 20:04:23 +02:00
pf-live.conf Merge xfce-operator-usb: Track F Colibri, DeepSeek smoke, LLM provider harness 2026-06-04 20:04:23 +02:00
sddm.conf Merge xfce-operator-usb: Track F Colibri, DeepSeek smoke, LLM provider harness 2026-06-04 20:04:23 +02:00
sshd-live.conf Merge xfce-operator-usb: Track F Colibri, DeepSeek smoke, LLM provider harness 2026-06-04 20:04:23 +02:00
START-HERE.txt feat(seed): route seeded provider keys to provider.env for zero-touch boot 2026-06-22 08:56:46 +02:00
xprofile Merge xfce-operator-usb: Track F Colibri, DeepSeek smoke, LLM provider harness 2026-06-04 20:04:23 +02:00