mirror of
https://github.com/BetterCorp/BetterFrame.git
synced 2026-05-26 16:56:33 +00:00
No description
16412d5ad6
The kiosk runs under NoNewPrivileges=yes (WebKit bwrap needs it). sudo and nsenter both fail because they need privilege escalation which the flag blocks. systemd-run --pipe spawns a SEPARATE service unit as root in its own process tree, connected via stdin/stdout pipe. Not a child of the kiosk process → NoNewPrivileges doesn't apply. Also: enable rauc.service in pi-gen chroot (was never enabled → RAUC daemon not running → rauc install fails → OS update silently broken). |
||
|---|---|---|
| .github/workflows | ||
| deploy | ||
| docs | ||
| kiosk | ||
| nodered | ||
| scripts | ||
| server | ||
| .gitattributes | ||
| .gitignore | ||
| CLAUDE.md | ||
| docker-compose.coolify.yml | ||
| docker-compose.yml | ||
| LICENSE-AGPL.txt | ||
| LICENSE-COMMERCIAL.md | ||
| LICENSE.md | ||
| package-lock.json | ||
| package.json | ||
| sec-config.yaml | ||
| tsconfig.base.json | ||