Fimeg/SouveraineOS
Watch
1
0
Fork
You've already forked SouveraineOS
 0
Code Releases Activity

file task 76: nothing owns provisioning

Browse source 
Five souveraine files own no package across the two live devices, and
/etc/systemd/system/souveraine-machined.service shadows the packaged
signer unit on both — measured, not inferred. Retires the Phase C deploy
checklist: CLAUDE.md banned its build step on 2026-07-24, START-HERE §5
bans its deploy step.
This commit is contained in:
Fimeg 2026-08-15 09:53:49 -04:00
commit 6e2f3f80ab
3 changed files with 144 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

29
docs/session-authority-boot-order.md
View file

@ -151,14 +151,29 @@ gap or heartbeat proves flaky in practice.
## Deploy checklist (phone, when reachable)
1. On-device build: `cargo build --release --features sessiond --bin
**Superseded 2026-08-15 — steps 1–3 below are the pre-packaging route and three
of them are now banned. Kept as the record of how Phase C first reached the
phone; do not follow them.** The current route:
1. `pacman -Syu` on the phone. sessiond, its unit and (since TASK-76) its PAM
file are all package-owned.
2. Cold boot, and step 4 below is still the expected sequence.
The original, and why each step retired:
1. ~~On-device build: `cargo build --release --features sessiond --bin
souveraine-sessiond` in `~/build/souveraine` (nice 15, -j 3), install to
`/usr/local/bin`.
2. Sync Pixel3Arch rootfs-overlay bits: `/etc/pam.d/souveraine-sessiond`,
`/etc/systemd/user/souveraine-sessiond.service`; `systemctl --user
daemon-reload`.
3. Deploy hyprland.lua (restore flag + hook line) and `deploy.sh --phone`
for the shell (bridge + LockScreen patch).
`/usr/local/bin`.~~ Banned 2026-07-24 — `souveraine/CLAUDE.md`: binaries
hand-copied to `/usr/local/bin` are owned by no package and silently never
update; sessiond sat five days behind and its state machine never ran.
archdev cross-compiles, CI packages, pacman delivers.
2. ~~Sync Pixel3Arch rootfs-overlay bits.~~ The overlay reaches a device only
on flash and the phone does not flash (TASK-28). Both files are packaged
now: the unit from `PKGBUILD.prebuilt`, the PAM file added 2026-08-15.
The overlay copies are a shadowing hazard, not a delivery route (TASK-76).
3. ~~`deploy.sh --phone` for the shell.~~ `START-HERE.md` §5: never. TASK-25
demoted it to a recovery instrument for an explicitly quiesced target,
after it killed a live conversation mid-use.
4. Cold boot. Expected: splash → sessiond PIN surface (spartan) → shell lock
replaces it seamlessly once quickshell is up. `journalctl --user -u
souveraine-sessiond` shows acquire → handoff → locked_ack.