Release machinery for Downloads, the root CA, demo and site updates (#126) #154

Merged

rajames merged 7 commits from StarForth-v4.0.0 into master 2026-11-08 03:20:43 +00:00

Conversation 0 Commits 7 Files Changed 11

+106 -19

7 Commits

Author	SHA1	Message	Date
Claude	8f1ba02b3c	acceptance: run the gate on this branch's head before the PR into master ... The commits under this one skip CI on their own push; this one does not, so the PR into master runs acceptance. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2	2026-11-08 02:54:47 +00:00
Claude	a293eab1d4	pki: the StarshipOS Root CA's certificate, public, in the tree (#126) [skip ci] ... ci/pki/starshipos-root-ca.pem, made on the CI box by make-ca.sh (2026-11-07, Ed25519, to 2046-11-07; Captain Bob), and its SHA-256 DA:A7:40:56:65:41:1A:FE:E6:08:85:3F:6E:AD:83:3A:38:30:83:E6:F0:6D:69:A6:A8:9E:92:BD:85:93:39:81 in starshipos-root-ca.sha256. Verified: self-signed, CA:TRUE, and it issued capsules/pki/starshipos-intermediate.der (openssl verify: OK). Every release attaches it (gitea-release), and the Downloads page shows its fingerprint; it is also the anchor #139 would build into the kernel. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2	2026-11-08 02:36:45 +00:00
Claude	cac4e7fb50	site/com: Read the paper links to the SSRN abstract (#146) [skip ci] ... The canvas's Home artboard had left it a placeholder, which the build pointed at the .org. Now https://papers.ssrn.com/sol3/papers.cfm?abstract_id=5930134 (Captain Bob, 2026-11-08), on the canvas (version 14) and on the wiki. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2	2026-11-08 02:33:36 +00:00
Claude	199720e769	FABRIC-3 XLVIII.7: Downloads -- the PC stick, the Gitea release, #92 into alpha.4 [skip ci] ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2	2026-11-08 02:32:36 +00:00
Claude	d54e2fe276	release: the PC stick image, and a Gitea release anyone can download from (#126) ... - scripts/nightly.sh images builds the PC's USB stick too (make boot_image TARGET=PC -> pc-stick.img.xz, in SHA256SUMS); publish sends it to Nexus as classifier pc-stick. pc stays the ISO QEMU boots. - scripts/nightly.sh gitea-release <tag>: the tag as a Gitea release -- a pre-release for -alpha.N and the like -- notes from the tag's message with the checksums, the images, SHA256SUMS, the documents and the StarshipOS Root CA's certificate attached; run again, it adds only what is missing. release.yml runs it after the Nexus publish, with the secret RELEASE_TOKEN. Tested here: images builds pc-stick.img.xz (785 KB); gitea-release against a stand-in Gitea API made a pre-release with the notes and ten files, and a second run added nothing. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2	2026-11-08 02:32:03 +00:00
Claude	44264d0781	FABRIC-3 XLVIII.6: #131 closed -- QEMU's capture doubled a byte, not our kernel [skip ci] ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2	2026-11-08 02:25:06 +00:00
Claude	55613350c4	demo: CPUQuota 150%, as set on the server (#116) [skip ci] ... Since #151 an idle guest halts (1% of a core at the prompt), so the cap no longer has to hold back spinning sessions. Captain Bob set 1.5 cores for all sessions together on the server (2026-11-08): one busy visitor a full core, half a core always left to the wikis and Gitea. Confirmed on the server with a live session idle for 3 minutes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GE3SDvQn5EoxdGufk84zz2	2026-11-08 02:09:52 +00:00