vh
767b3af409
albok-dev's host ask under Prime's goal "land all of u6". A 20 GiB LUKS2 file with ext4, keyed only from the vault (piped over ssh, never on the host's disk). The mountpoint is immutable while unmounted, and the mounted root is 1500:1513 0750 with .albok-wing. The parent is bound into the container with rslave propagation: a lock then unlock with the service running showed through without a restart. The wing is not in albok.yaml yet (albok-dev's release). Runbook and backup posture are in the README.
44 lines
554 B
Plaintext
44 lines
554 B
Plaintext
root:x:0:
|
|
daemon:x:1:
|
|
bin:x:2:
|
|
sys:x:3:
|
|
adm:x:4:
|
|
tty:x:5:
|
|
disk:x:6:
|
|
lp:x:7:
|
|
mail:x:8:
|
|
news:x:9:
|
|
uucp:x:10:
|
|
man:x:12:
|
|
proxy:x:13:
|
|
kmem:x:15:
|
|
dialout:x:20:
|
|
fax:x:21:
|
|
voice:x:22:
|
|
cdrom:x:24:
|
|
floppy:x:25:
|
|
tape:x:26:
|
|
sudo:x:27:
|
|
audio:x:29:
|
|
dip:x:30:
|
|
www-data:x:33:
|
|
backup:x:34:
|
|
operator:x:37:
|
|
list:x:38:
|
|
irc:x:39:
|
|
src:x:40:
|
|
shadow:x:42:
|
|
utmp:x:43:
|
|
video:x:44:
|
|
sasl:x:45:
|
|
plugdev:x:46:
|
|
staff:x:50:
|
|
games:x:60:
|
|
users:x:100:
|
|
nogroup:x:65534:
|
|
albok:x:1500:
|
|
albok-read:x:1510:albok
|
|
albok-personal:x:1511:albok
|
|
albok-feedback:x:1512:albok
|
|
albok-sealed:x:1513:albok
|