Robert Allan JamesandClaude Sonnet 5
35f84d4a45
Resolves the acl_pinned punch-list item's open question: credential data (ZUSE-CERT-LO/HI, ACL-CA-KEY-LO/HI) are CONSTANT words, i.e. real DictEntrys, and acl_pinned's enforcement (vm_create_word()'s unconditional shadow-refusal for any pinned name) already covers this generally -- no new flag needed, zuse.4th's ACL-ZUSE-BOOT already pins both cert constants today. That investigation surfaced a real gap: ACL-ZUSE-BOOT pins the cert constants unconditionally on every boot, before any legitimate mint could ever run, permanently locking in the 0 placeholder on the very first boot. This directly shaped Captain Bob's next design pass: a dedicated zuse.img test thumbdrive, "bleachable" back to pristine state for repeated first-boot testing; a one-time mint-then-pin flow (fixing the gap above); a separate ongoing S" name" MINT word for minting additional regular users; and an explicitly-deferred Zuse recovery path question. This commit is the first piece: disk/zuse.img (64MB blank, matching the existing USB-fixture convention) + scripts/bleach_zuse_img.sh (idempotent reset). Verified live via QMP hotplug -- reads back as HOMEBLOCKS_SIG_BLANK, correctly simulating a genuine first boot. Deliberately flat/raw, not GPT-partitioned, matching homeblocks_sig_check()'s current sig_start_fblock=0 assumption; both move to a real GPT-relative offset together once a parser exists. No kernel code touched -- host-side test tooling only, no 3-arch acceptance boot needed. Still open: the mint-then-pin boot fix, the MINT word, Zuse recovery. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CXjAPTEKrgY2Mrk25KoLDn
33 lines
1.3 KiB
Bash
Executable File
33 lines
1.3 KiB
Bash
Executable File
#!/bin/bash
|
|
# bleach_zuse_img.sh - Reset disk/zuse.img back to pristine/unminted state.
|
|
#
|
|
# disk/zuse.img simulates the physical Zuse superuser thumbdrive for QEMU
|
|
# testing (FABRIC-3.md, Phase 8 kickoff). "Bleaching" it means restoring the
|
|
# all-zero blank state homeblocks_sig_check() reads as HOMEBLOCKS_SIG_BLANK
|
|
# -- i.e. simulating a genuine first boot, so the one-time mint-Zuse flow can
|
|
# be exercised repeatedly during development without hand-regenerating the
|
|
# whole image each time.
|
|
#
|
|
# Deliberately a flat/raw image, not GPT-partitioned, matching the same
|
|
# simplifying assumption homeblocks_sig_check()'s current call site in
|
|
# repl.c uses (sig_start_fblock=0) -- both will need to move to a real
|
|
# GPT-partition-relative offset together, once a GPT parser exists. Not
|
|
# invented ahead of that work here.
|
|
#
|
|
# Usage: scripts/bleach_zuse_img.sh [path]
|
|
# path Optional override; defaults to disk/zuse.img relative to repo root.
|
|
|
|
set -euo pipefail
|
|
|
|
REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
IMG="${1:-$REPO_ROOT/disk/zuse.img}"
|
|
SIZE_MB=64
|
|
|
|
if [ -e "$IMG" ] && [ ! -f "$IMG" ]; then
|
|
echo "bleach_zuse_img: refusing to overwrite non-regular-file '$IMG'" >&2
|
|
exit 1
|
|
fi
|
|
|
|
dd if=/dev/zero of="$IMG" bs=1M count="$SIZE_MB" status=none
|
|
echo "bleach_zuse_img: $IMG reset to ${SIZE_MB}MB blank (pristine/unminted)"
|