vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

granter role no-op deletes the dead bootstrap token

Browse source
This commit is contained in:
atlas 2026-10-26 19:00:02 +01:00 • committed by mara
commit 31670da795
1 changed files with 7 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nix/module-eval/bao-grants.nix
View file

@ -1125,8 +1125,10 @@ let
noop = "granter role already in place; bootstrap token not needed";
del = "rm -f /run/secrets/bao-bootstrap.token";
before = lib.head (lib.splitString "refused the bootstrap token" g);
noopBranch = lib.head (lib.splitString "exit 0" (lib.last (lib.splitString noop g)));
in
lib.hasInfix noop before
&& lib.hasInfix del noopBranch
&& lib.hasInfix "bao login -method=cert -token-only" before
&& lib.hasInfix "BAO_CLIENT_CERT=" before
&& lib.hasInfix del g