rig/commands
dan-claude-bot b982399d3c fix(bootstrap): refuse a users file that names no users
An empty, comments-only or whitespace-only users file is not a parse error,
so it walked straight through the requirement #51 built: pre-flight passed,
apply converged nothing, and the box came up root-only — the exact outcome
--no-users exists to make explicit, reached by the flag added to guarantee
the opposite. `--users ./empty` and `--no-users` produced the identical box
and only one of them said so.

Catch the zero-user parse in bootstrap's pre-flight, where the file is
already parsed for validation and before apt, the hostname change, or a
spent pre-auth key. The refusal names --no-users: the root-only box is
reachable, it just has to be asked for out loud.

Deliberately narrow. This is bootstrap's contract, not the parser's and not
apply's: zero users is a legal file, and a standalone `rig users apply`
against an emptied file is a real de-provisioning operation that must stay
possible. Negative-grep tests pin both.

Closes #57

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-19 19:24:23 +00:00
..
lib fix(users): the host= marker gates the box role, not the incus group 2026-07-19 17:29:20 +00:00
bootstrap-tenant.sh review r1: staging tolerates only the workload guest; dockerd must answer; one CLI capture 2026-07-18 20:18:15 +00:00
bootstrap.sh fix(bootstrap): refuse a users file that names no users 2026-07-19 19:24:23 +00:00
coolify-backup-install.sh fix(bootstrap): gate the host-set-up claim on 'box doctor', not on PATH 2026-07-18 16:59:43 +00:00
coolify-install.sh fix(bootstrap): gate the host-set-up claim on 'box doctor', not on PATH 2026-07-18 16:59:43 +00:00
db.sh feat(db): bring ad-hoc dump/restore on-box as rig db 2026-07-17 15:16:35 +00:00
runner-install.sh fix: headless credential prompts refuse loudly, naming their variable (#42) 2026-07-19 12:15:08 +00:00
runner-remove.sh fix: headless credential prompts refuse loudly, naming their variable (#42) 2026-07-19 12:15:08 +00:00
runner-repoint.sh fix: headless credential prompts refuse loudly, naming their variable (#42) 2026-07-19 12:15:08 +00:00
runner-status.sh fix(runner): install refuses a box registered to another repo 2026-07-13 14:57:28 +00:00
users-apply.sh feat: users apply grants the box tier, not just the socket 2026-07-19 19:10:29 +00:00
users-close-root.sh fix(close-root): the gate judges AllowGroups/DenyGroups too — same door, other hinge 2026-07-18 17:17:39 +00:00
users-status.sh fix(users): review findings — invoker gate, real SSH revocation, StrictModes-shaped close-root gate, trait-aware box role 2026-07-17 20:01:19 +00:00