feat: the whole boot chain, and a directory per identity - #2

Merged

wamxx merged 59 commits into

feature/boot-media

Aug 29, 2026

Commits on Aug 27, 2026

feat(boot): the media foundations — ISO9660, probing, catalogue, stanzas

wamxx
and
claude
committed
9cafbba
feat(boot): the media listener, its own socket, and the media commands

wamxx
and
claude
committed
6de435a
feat(boot): a `boot` feature, so the smallest build stays the smallest

wamxx
and
claude
committed
44409a2
docs: record what Phase 1 taught, and re-measure what had gone stale

wamxx
and
claude
committed
df2a6b9
docs(guide): serving boot media, in both languages

wamxx
and
claude
committed
fb06170
feat(boot): TFTP, the loader table, and dropping privileges after binding

wamxx
and
claude
committed
7a7fe04
feat(boot): the menu, the bootstrap, and their DHCP server's two lines

wamxx
and
claude
committed
15c74d5
build(ipxe): the branded loader build, its pin, and the CI job that runs it

wamxx
and
claude
committed
16fa55c
docs(guide): netbooting a machine, in both languages

wamxx
and
claude
committed
10aaddd
test(boot-rig): the rig, and the loader build it verified on the way in

wamxx
and
claude
committed
0055aae
feat(boot): adding a file to an ISO without writing 1.5 GB

wamxx
and
claude
committed
368ab0b
docs: preparing an image, and the traps phases 2 and 4 paid for

wamxx
and
claude
committed
5a02b5d
feat(boot): the server fetches its own images, and the directory is the archive

wamxx
and
claude
committed
6430eb6
fix(boot-rig): build the client image, and install the tool it needs

wamxx
and
claude
committed
268b27d
fix(boot-rig): bake dnsmasq in, and notice when a service has died

wamxx
and
claude
committed
e7214cf
test(boot-rig): the chain runs end to end, and has been watched failing

wamxx
and
claude
committed
c3d39c9
ci: run the boot chain on every push, and require it to go red

wamxx
and
claude
committed
c6e9a97
feat(dsm): package the boot media, and say plainly why TFTP is not in it

wamxx
and
claude
committed
849faa6
test(dsm): the package runs on a real DSM 7.2.2 machine

wamxx
and
claude
committed
791a1dc
fix(boot): RESCRIPTUM_TFTP_ADDR=off, and name the folders the package creates

wamxx
and
claude
committed
aef7b2b
feat(config): show the address the server derived, and what else the host has

wamxx
and
claude
committed
9d9f6ce
test(dsm): assert on the machine that the panel shows a real address

wamxx
and
claude
committed
95ce6af
docs(traps): a runtime default has to reach settings() as well

wamxx
and
claude
committed
6d46223
feat(boot): a TFTP port that cannot be bound is not a dead server
wamxx
committed
e3d0079
fix(dsm): the package is the TFTP server again
wamxx
committed
cb55ab7
docs: TFTP is ours on DSM too, and the four measurements that settle it
wamxx
committed
d076595
build(release): ship the loaders, so a release is a boot server
wamxx
committed
d788e31
test(boot): the probe's healthy path, which nothing reached
wamxx
committed
0a23baa
test(dsm): the machine answers the two questions the reversal rested on
wamxx
committed
79be077
docs(testing): the count was 333 and the boot suites were not in it
wamxx
committed
cb106d0
feat(dsm): ship the loaders, so the package actually serves iPXE
wamxx
committed
04b177e
docs(traps): root on DSM is gated on the signature, and DSM says so
wamxx
committed
52f61c8
docs(traps): Synology answers it — root needs *their* signature
wamxx
committed
193854c

Commits on Aug 28, 2026

Commits on Aug 29, 2026

feat(store)!: a directory per identity, not a file per answer

wamxx
and
claude
committed
19e4475
fix(build): clear clippy 1.98 and repair the no-default-features build

wamxx
and
claude
committed
7a45f55
test(cli): stop `boot check` tests depending on who can bind port 69

wamxx
and
claude
committed
ff374a1