colibri/packaging
Sam & Claude 796070605b
Some checks failed
CI / rust (pull_request) Has been cancelled
CI / markdown (pull_request) Has been cancelled
CI / port (pull_request) Has been cancelled
CI / agent-jail-pkgs (pull_request) Has been cancelled
fix(daemon): gate autospawn on .secured marker when require_secured=YES
Adds colibri_daemon_require_secured knob (default NO). When enabled, the
daemon refuses to autospawn an agent until /var/db/colibri/.secured exists.
This interlock pairs with the clawdie-iso firstboot password gate (#139):
the gate writes .secured after the operator sets passwords, the daemon
reads it to gate autospawn + node_register.

Must run AFTER the provider.env block — otherwise COLIBRI_AUTOSPAWN=YES
from provider.env would override the NO set here. Defaults to NO so
deployed/disk hosts (which never run the firstboot gate) are unaffected.

Paired with: clawdie-iso PR #139 (force-root-password-on-first-boot).
2026-06-25 07:04:59 +02:00
..
freebsd fix(daemon): gate autospawn on .secured marker when require_secured=YES 2026-06-25 07:04:59 +02:00
mother Merge pull request 'docs(mother): add Python deps + RPC_PROMPT to first-run checklist' (#180) from docs/mother-checklist-update into main 2026-06-25 05:08:15 +02:00