Repository navigation
feat(setup): the administrator's whr setup initializes workharbor - #529
Merged
Merged
Conversation
The administrator's run writes the account's base config (0600, owned by the account, never overwritten) and, when missing, the system config. Root never writes inside the account's home: folders and file are made as the account with sudo -u, the file staged under root-owned /etc/whr. whr setup picks the administrator or the account part by who runs it; `whr setup host` stays as a hidden alias. Refs: #471 Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Drop the `setup host` commands, describe config-first for a separate account and its residual risks, name what stays for the workharbor desktop session, and note the alias in the upgrade section. Refs: #471 Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Owner
Author
|
Opus security review: NOT CLEAR at 6427563e (1 High: root install -d -o followed a symlink in the account's home; 3 Medium; 5 Low), all fixed; CLEAR at 29da874 after 11 mutations were caught; reviewer ran go test ./..., make check-ci and make commitlint (exit 0). Unverified on a real host: sudo -u workharbor mkdir/cp -n, visibility into /Users/workharbor (clean-Mac run). Open Lows: late rechecks untested, host-setup.md:15 wording of the unverified install arguments, a stage file left in /etc/whr when cp fails. Co-Authored-By: Claude Sonnet 5.5 [email protected] |
wstein
marked this pull request as ready for review
October 9, 2026 12:37
This was referenced Oct 9, 2026
wstein
added a commit
that referenced
this pull request
Oct 9, 2026
The entry on the administrator's workspace roots now describes what #529 built: config-first's check, fix text and commands as the code words them, the recheck before the commands, the system-config fallback for the roots steps, and what stays unverified until the clean-Mac run. Refs: #399 Co-Authored-By: Claude Opus 5.5 <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Werner's decision of 2026-10-09 (alpha.5): the administrator's plain
whr setup(nohostword;whr setup hoststays a hidden alias) also initializes the non-admin workharbor account's base configuration, so nowhr setupas workharbor is needed for the base state.sudo -u workharbor /bin/mkdir -p -m 0700, file staged in root-owned /etc/whr and copied withsudo -u workharbor /bin/cp -n; symlink/owner guard as defence in depth.--config.Opus review (security-relevant): NOT CLEAR at 6427563e (1 High: root
install -d -ofollowed a symlink in the account's home, 3 Medium, 5 Low), all fixed; CLEAR at 29da874 (11 mutations caught). Unverified on a real host:sudo -u workharbor mkdir/cp -n, visibility into /Users/workharbor (clean-Mac run).Design pages (D46, D49, D59, homebrew-bootstrap, interfaces) follow in a separate design PR (D61).
Refs #510 (the roots of the administrator run now come from the system config this change writes; whether #510 can close is for the human to decide)
🤖 Generated with Claude Code