logan/node-26
1
0
Fork 0
Code Issues 14 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

install.sh: enrollment token never on the command line (#18) #30

Merged
logan merged 3 commits from fix/18-install-token-argv into main 2026-10-04 18:28:19 -04:00
Conversation 1 Commits 3 Files Changed 3
+64 -24
3 Commits
Author SHA1 Message Date
logan dbb41f2fd3 Merge branch 'main' into fix/18-install-token-argv
CI / lint (push) Successful in 10s
Details
CI / test-op25 (push) Successful in 24s
Details
CI / lint (pull_request) Successful in 7s
Details
CI / test-op25 (pull_request) Successful in 20s
Details
CI / test (push) Successful in 54s
Details
CI / test (pull_request) Successful in 54s
Details
2026-10-04 18:26:10 -04:00
Logan CusanoandClaude Opus 5.5 c4b4cb92c9 Drop last --token hint; note sudo drops DRB_ENROLLMENT_TOKEN (node-26#18)
CI / lint (push) Successful in 8s
Details
CI / test-op25 (push) Successful in 19s
Details
CI / lint (pull_request) Successful in 8s
Details
CI / test-op25 (pull_request) Successful in 18s
Details
CI / test (push) Successful in 55s
Details
CI / test (pull_request) Successful in 51s
Details 
- key_pickup.py still told operators to re-run install.sh with --token.
- `curl | sudo bash` resets the env, so the documented exported-token
  path needs `sudo --preserve-env=DRB_ENROLLMENT_TOKEN`; say so.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-04 18:17:30 -04:00
Logan CusanoandClaude Opus 5.5 4dff9cbab6 install.sh: enrollment token never on the command line (node-26#18)
CI / lint (push) Successful in 6s
Details
CI / test-op25 (push) Successful in 14s
Details
CI / lint (pull_request) Successful in 8s
Details
CI / test (push) Successful in 48s
Details
CI / test-op25 (pull_request) Successful in 15s
Details
CI / test (pull_request) Successful in 49s
Details 
The token is now prompted for on the TTY (hidden input), or read from
--token-file PATH / an exported DRB_ENROLLMENT_TOKEN for unattended installs.
--token still works for old copied commands but warns that it has landed in
shell history and ps. Every "re-run with --token DRB-..." hint now points at
the prompt; stale-pickup (401/404) re-runs prompt for a token instead of
dying. DRB_ENROLLMENT_TOKEN is unset after reading so children don't inherit
it. README install example drops --token.

Server half (mint panel still prints --token) is filed separately.

Refs #18

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-04 18:09:19 -04:00