Install ElastOS from a signed release packed inside a desktop installer

Ouverte
#520 0 commentaires 0 réactions 0 personnes assignées Voir sur GitHub

Les mainteneurs répondent en général sous 1 jour

Personne n'a encore pris cette issue.

Évaluation

Difficulté
5/5
Temps estimé
Plus d'une semaine
Accessibilité débutants
35/100
Type d'issue
Fonctionnalité
Clarté
Clairement spécifiée
Activité
Active
Stack technique
rust
Domaine
backend, security

Piste de recherche

Read the install.sh flow and the existing install-release transaction, then inspect the unpublished lab/standalone-install branch referenced in the issue. Trace how release signatures, publisher DID, checksums, version and channel are validated before installation, and review the linked issues #518 and #519 for the startup and status boundary. Done means a local signed release installs through the existing transaction, preserves an existing Home, and passes the listed acceptance checks.

Rédigé par le modèle d'indexation à partir du texte de l'issue.

Description

enhancement
Problem

A desktop installer (a Mac DMG or a Linux package) should install ElastOS without a terminal. 2.0.0 can only install through install.sh, which downloads from the seed and runs elastos install-release. There is no way to install from a copy of the signed release that ships inside an app.

The desktop app draft (Elacity/elastos-agent-host-spike#1386) calls elastos install --from DIR and a quiet start (ELASTOS_SERVICE=1). Both live only on a lab branch (lab/standalone-install) that is not pushed anywhere, so the draft cannot install the published 2.0.0 release.

Expected behaviour
  • Push lab/standalone-install to this repository as a pull request against develop, or replace it with one, implementing the points below. The desktop app is then rebuilt against the published release, not a lab Runtime.
  • One Runtime command installs from a local folder of signed release files with the same checks as install.sh: the release head's signature against the publisher DID baked into the app at build time, the release it names, every file's checksum, version and channel. Nothing from the folder runs before those checks pass. Lab publishers are refused in release builds.
  • It reuses the existing install transaction (install-release) rather than a second installer, so locks, downgrade and channel refusal, and interrupted-install recovery behave the same.
  • It records the normal trusted source and channel, so the installed Home updates from the seed like any other Home.
  • An existing Home for this user is adopted, never overwritten or doubled.
  • Optional large parts (the Browser image, about 900 MB) are fetched later on demand, not required in the folder.
  • Status (installed, starting, ready, failed with a reason) and starting Home without opening a browser come from #518; this issue adds only the install-from-folder result.
Acceptance
  • A folder with a valid 2.0.x release installs and Home becomes ready.
  • A folder with a bad signature, a changed file or a lab publisher is refused before anything from it runs, and nothing is written.
  • Interrupted install, run again: completes once.
  • Existing terminal-installed Home: adopted, data and passkeys kept.
  • After install, the Home finds the next release on the seed.
Links

Elacity/elastos-agent-host-spike#1386, #518, #519, #172, #452.

Langage dominant
Rust
Étoiles
6
Forks
2
Merge moyen
1 j 3 h
PR mergées (30 j)
42

Préparer son environnement

Ce projet ne fournit ni conteneur de développement, ni Dockerfile, ni guide de contribution : l'installation est à votre charge. Commencez par son README, et consultez notre guide de la première contribution pour les étapes générales.

Par où commencer

  1. Lisez l'issue en entier, puis le guide de contribution du projet.
  2. Signalez en commentaire que vous la prenez — cela évite que deux personnes fassent le même travail.
  3. Forkez le dépôt et travaillez sur une branche.
  4. Ouvrez une pull request qui référence le numéro de l'issue.

Autres issues de elastos/elastos-runtime

Toutes les issues de elastos/elastos-runtime

Issues similaires

Plus d'issues Rust

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.