forked from heavy-duty/box
claude-hdb
0c9971ecf8
A CLI that mints trust-less, network-isolated Incus VMs with Claude Code installed. Boxes are strictly creds-free — the operator logs into Claude interactively inside; authenticated state is reused via snapshots. The tool knows nothing about projects; a repo ships an optional agent-facing .claudebox/ runbook that Claude reads. - bin/claudebox: new/shell/exec/snapshot/restore/down/start/rm/status; creds-free 'new' (fresh launch or clone via --from <src>[/<snap>]). - cloud-init: global ~/.claude/CLAUDE.md self-describing the box + .claudebox/ runbook. - install.sh: curl-pipe-bash installer. - host/: Incus isolation stack (claudenet + claude-isolate ACL + claude-dev profile + firewall). - docs/: design + .claudebox/ convention. Initial canonical import (prototyped separately; re-homed onto the heavy-duty fork). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
72 lines
2.7 KiB
Bash
Executable file
72 lines
2.7 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
# claudebox installer — intended for: curl -fsSL .../install.sh | bash
|
|
#
|
|
# Downloads the claudebox repo tarball, installs the whole tree under
|
|
# $DEST, and puts a `claudebox` symlink on PATH via $BINDIR.
|
|
|
|
REPO="${CLAUDEBOX_REPO:-claude-hdb/claudebox}"
|
|
REF="${CLAUDEBOX_REF:-main}"
|
|
DEST="${CLAUDEBOX_HOME:-$HOME/.local/share/claudebox}"
|
|
BINDIR="${CLAUDEBOX_BIN:-$HOME/.local/bin}"
|
|
|
|
log() { printf 'claudebox-install: %s\n' "$*"; }
|
|
warn() { printf 'claudebox-install: WARNING: %s\n' "$*" >&2; }
|
|
die() { printf 'claudebox-install: ERROR: %s\n' "$*" >&2; exit 1; }
|
|
|
|
# --- prerequisites ---------------------------------------------------------
|
|
command -v curl >/dev/null 2>&1 || die "curl is required but was not found. Please install curl and re-run."
|
|
command -v tar >/dev/null 2>&1 || die "tar is required but was not found. Please install tar and re-run."
|
|
|
|
# --- temp workspace --------------------------------------------------------
|
|
TMPDIR="$(mktemp -d)"
|
|
cleanup() { rm -rf "$TMPDIR"; }
|
|
trap cleanup EXIT
|
|
|
|
URL="https://github.com/$REPO/archive/refs/heads/$REF.tar.gz"
|
|
|
|
log "installing claudebox ($REPO@$REF)"
|
|
log "downloading $URL"
|
|
curl -fsSL "$URL" -o "$TMPDIR/claudebox.tar.gz" \
|
|
|| die "failed to download $URL"
|
|
|
|
log "extracting archive"
|
|
tar -xzf "$TMPDIR/claudebox.tar.gz" -C "$TMPDIR" \
|
|
|| die "failed to extract archive"
|
|
|
|
# GitHub archives extract to a single top-level dir like claudebox-<ref>/
|
|
EXTRACTED="$(find "$TMPDIR" -maxdepth 1 -type d -name 'claudebox-*' | head -n1)"
|
|
[ -n "$EXTRACTED" ] || die "could not find extracted claudebox-* directory in archive"
|
|
[ -f "$EXTRACTED/bin/claudebox" ] || die "archive does not contain bin/claudebox — is $REPO@$REF correct?"
|
|
|
|
# --- atomically replace $DEST ---------------------------------------------
|
|
log "installing into $DEST"
|
|
rm -rf "$DEST"
|
|
mkdir -p "$(dirname "$DEST")"
|
|
mv "$EXTRACTED" "$DEST"
|
|
|
|
chmod +x "$DEST/bin/claudebox"
|
|
|
|
# --- put claudebox on PATH -------------------------------------------------
|
|
mkdir -p "$BINDIR"
|
|
ln -sf "$DEST/bin/claudebox" "$BINDIR/claudebox"
|
|
log "linked $BINDIR/claudebox -> $DEST/bin/claudebox"
|
|
|
|
# --- PATH check ------------------------------------------------------------
|
|
case ":$PATH:" in
|
|
*":$BINDIR:"*) : ;;
|
|
*)
|
|
log "note: $BINDIR is not on your PATH."
|
|
log " add this to your shell rc (e.g. ~/.bashrc or ~/.zshrc):"
|
|
log " export PATH=\"$BINDIR:\$PATH\""
|
|
;;
|
|
esac
|
|
|
|
# --- environment check -----------------------------------------------------
|
|
if ! command -v incus >/dev/null 2>&1; then
|
|
warn "incus was not found. claudebox needs Incus on the host."
|
|
warn " run the one-time host setup: $DEST/host/setup-host.sh"
|
|
fi
|
|
|
|
log "done — try: claudebox new --name test"
|