Install ElastOS from a signed release packed inside a desktop installer

Aperta
  • Qualcosa non va?
#520 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
5/5
Tempo stimato
Più di una settimana
Idoneità per principianti
35/100
Tipo di issue
Funzionalità
Chiarezza
Specificata chiaramente
Stato di attività
Attiva
Stack tecnologico
rust
Ambito
backend, security

Direzione di ricerca

Read the install.sh flow and the existing install-release transaction, then inspect the unpublished lab/standalone-install branch referenced in the issue. Trace how release signatures, publisher DID, checksums, version and channel are validated before installation, and review the linked issues #518 and #519 for the startup and status boundary. Done means a local signed release installs through the existing transaction, preserves an existing Home, and passes the listed acceptance checks.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

enhancement
Problem

A desktop installer (a Mac DMG or a Linux package) should install ElastOS without a terminal. 2.0.0 can only install through install.sh, which downloads from the seed and runs elastos install-release. There is no way to install from a copy of the signed release that ships inside an app.

The desktop app draft (Elacity/elastos-agent-host-spike#1386) calls elastos install --from DIR and a quiet start (ELASTOS_SERVICE=1). Both live only on a lab branch (lab/standalone-install) that is not pushed anywhere, so the draft cannot install the published 2.0.0 release.

Expected behaviour
  • Push lab/standalone-install to this repository as a pull request against develop, or replace it with one, implementing the points below. The desktop app is then rebuilt against the published release, not a lab Runtime.
  • One Runtime command installs from a local folder of signed release files with the same checks as install.sh: the release head's signature against the publisher DID baked into the app at build time, the release it names, every file's checksum, version and channel. Nothing from the folder runs before those checks pass. Lab publishers are refused in release builds.
  • It reuses the existing install transaction (install-release) rather than a second installer, so locks, downgrade and channel refusal, and interrupted-install recovery behave the same.
  • It records the normal trusted source and channel, so the installed Home updates from the seed like any other Home.
  • An existing Home for this user is adopted, never overwritten or doubled.
  • Optional large parts (the Browser image, about 900 MB) are fetched later on demand, not required in the folder.
  • Status (installed, starting, ready, failed with a reason) and starting Home without opening a browser come from #518; this issue adds only the install-from-folder result.
Acceptance
  • A folder with a valid 2.0.x release installs and Home becomes ready.
  • A folder with a bad signature, a changed file or a lab publisher is refused before anything from it runs, and nothing is written.
  • Interrupted install, run again: completes once.
  • Existing terminal-installed Home: adopted, data and passkeys kept.
  • After install, the Home finds the next release on the seed.
Links

Elacity/elastos-agent-host-spike#1386, #518, #519, #172, #452.

Lingua principale
Rust
Stelle
6
Fork
2
Merge medio
1g 3h
PR unite (30g)
42

Preparare l'ambiente

Questo progetto non fornisce container di sviluppo, Dockerfile né guida per i contributori, quindi l'ambiente è a tuo carico: parti dal suo README e consulta la nostra guida al primo contributo per i passaggi generali.

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di elastos/elastos-runtime

Tutte le issue di elastos/elastos-runtime

Issue simili

Altre issue su Rust

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.