Install ElastOS from a signed release packed inside a desktop installer

Offen
#520 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen

Maintainer antworten meist innerhalb von 1 Tag

Dieses Issue hat noch niemand übernommen.

Bewertung

Schwierigkeit
5/5
Geschätzter Aufwand
Über eine Woche
Anfängerfreundlichkeit
35/100
Issue-Typ
Feature
Klarheit
Klar beschrieben
Aktivitätsstatus
Aktiv
Tech-Stack
rust
Bereich
backend, security

Rechercherichtung

Read the install.sh flow and the existing install-release transaction, then inspect the unpublished lab/standalone-install branch referenced in the issue. Trace how release signatures, publisher DID, checksums, version and channel are validated before installation, and review the linked issues #518 and #519 for the startup and status boundary. Done means a local signed release installs through the existing transaction, preserves an existing Home, and passes the listed acceptance checks.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Beschreibung

enhancement
Problem

A desktop installer (a Mac DMG or a Linux package) should install ElastOS without a terminal. 2.0.0 can only install through install.sh, which downloads from the seed and runs elastos install-release. There is no way to install from a copy of the signed release that ships inside an app.

The desktop app draft (Elacity/elastos-agent-host-spike#1386) calls elastos install --from DIR and a quiet start (ELASTOS_SERVICE=1). Both live only on a lab branch (lab/standalone-install) that is not pushed anywhere, so the draft cannot install the published 2.0.0 release.

Expected behaviour
  • Push lab/standalone-install to this repository as a pull request against develop, or replace it with one, implementing the points below. The desktop app is then rebuilt against the published release, not a lab Runtime.
  • One Runtime command installs from a local folder of signed release files with the same checks as install.sh: the release head's signature against the publisher DID baked into the app at build time, the release it names, every file's checksum, version and channel. Nothing from the folder runs before those checks pass. Lab publishers are refused in release builds.
  • It reuses the existing install transaction (install-release) rather than a second installer, so locks, downgrade and channel refusal, and interrupted-install recovery behave the same.
  • It records the normal trusted source and channel, so the installed Home updates from the seed like any other Home.
  • An existing Home for this user is adopted, never overwritten or doubled.
  • Optional large parts (the Browser image, about 900 MB) are fetched later on demand, not required in the folder.
  • Status (installed, starting, ready, failed with a reason) and starting Home without opening a browser come from #518; this issue adds only the install-from-folder result.
Acceptance
  • A folder with a valid 2.0.x release installs and Home becomes ready.
  • A folder with a bad signature, a changed file or a lab publisher is refused before anything from it runs, and nothing is written.
  • Interrupted install, run again: completes once.
  • Existing terminal-installed Home: adopted, data and passkeys kept.
  • After install, the Home finds the next release on the seed.
Links

Elacity/elastos-agent-host-spike#1386, #518, #519, #172, #452.

Vorherrschende Sprache
Rust
Sterne
6
Forks
2
Ø Merge
1 T. 3 Std.
Gemergte PRs (30 T.)
42

Entwicklungsumgebung

Dieses Projekt bietet weder Dev-Container noch Dockerfile noch Beitragsleitfaden – die Einrichtung liegt bei Ihnen. Beginnen Sie mit der README; die allgemeinen Schritte stehen in unserem Leitfaden für den ersten Beitrag.

Erste Schritte

  1. Lesen Sie das ganze Issue und danach den Beitragsleitfaden des Projekts.
  2. Schreiben Sie ins Issue, dass Sie es übernehmen — das erspart doppelte Arbeit.
  3. Forken Sie das Repository und arbeiten Sie in einem Branch.
  4. Öffnen Sie einen Pull Request, der die Issue-Nummer nennt.

Mehr aus elastos/elastos-runtime

Alle Issues in elastos/elastos-runtime

Ähnliche Issues

Weitere Issues zu Rust

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.