• Joined on 2025-06-02
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 23:23:01 +01:00
a5cdbc4656 Merge claude/1
82839abea6 harden(desudo): arg-safe runFileOp + convert DNS subsystem off raw sudo
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 22:59:29 +01:00
5e8e28f33d Merge claude/1
0bf9c41c51 harden(rootless): offset userns surface with kptr/ptrace/bpf-jit sysctls
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 22:55:26 +01:00
6d781b66a8 Merge claude/1
f65ecfc5ed refactor(config): move CFG_ROOTLESS_NET to its own advanced network_rootless file
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 22:53:23 +01:00
5bf2011b1a Merge claude/1
829816b826 feat(rootless): default to pasta+implicit, disable userland-proxy, make net driver switchable
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 22:25:15 +01:00
caa197f2fa Merge claude/2
f6a51f9a19 fix(rootless): run WebUI container as userns-root with socket gid 0
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 22:03:05 +01:00
e52938bba5 Merge claude/2
049d5de6a8 fix(rootless): start daemon with slirp4netns, not invalid pasta+builtin
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 21:42:47 +01:00
7a277384f0 Merge claude/2
49c1a23221 fix(rootless): run install-user commands via sudo -u, not SSH
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 21:23:28 +01:00
67cda1c955 Merge claude/2
90584f0b30 fix(rootless): actually create the docker install user
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 20:57:02 +01:00
8f6f4c65ed Merge claude/2
48d9bd0a13 fix(init): never clobber live config values on deploy/reinstall
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 20:45:35 +01:00
8f21fe5fdf Merge claude/2
d5acb7e169 refactor(backup): route /docker ops through mode-aware helper
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 20:35:27 +01:00
e89ce25a19 Merge claude/2
5c928fe9c0 feat(privilege): mode-aware privileged-op helper
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 20:31:58 +01:00
14efcc579b Merge claude/2
9104c1770e chore: regen source arrays to include files_ssh.sh
6a2ba02647 security(init): manage manager-user sudo via validated sudoers.d drop-in
Compare 3 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 20:16:55 +01:00
812e09c044 Merge claude/2
c8e3a152a6 security: default fresh installs to rootless Docker
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 19:04:14 +01:00
7e7a7f524c Merge claude/1
a103aa6864 refactor(webui): path-based URLs for apps, app, tasks, backup
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 18:36:34 +01:00
a511ed9e8d Merge claude/1
fab6997cd7 refactor(webui): path-based Admin routing (/admin/config/<x>, /admin/tools/ssh-access)
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 18:27:53 +01:00
8315a58226 Merge claude/2
036f72d3c2 fix(backup): verify against snapshot restorability, not the live dir
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 18:23:24 +01:00
3d7fc0a3f6 Merge claude/2
3a1cd8464e fix(backup): make captured file staging readable by the backup user
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 18:19:54 +01:00
c460f7afcb Merge claude/1
23a15345fb refactor(admin): sidebar Config/Tools groups, per-group breadcrumbs, SSH matches config layout
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 18:16:35 +01:00
b1c84a9b3c Merge claude/2
94c9e83c42 feat(backup): container-side capture of private app files
Compare 2 commits »
Webstar pushed to main at Webstar/LibrePortal 2026-05-23 17:57:44 +01:00
0d7cab8c97 Merge claude/1
b5107e30cc feat(admin): Admin Overview landing + unified Admin page headers
Compare 2 commits »