mirror of https://github.com/ChuckBuilds/LEDMatrix.git synced 2026-10-04 14:25:08 +00:00

Files

T

ChuckandClaude Opus 5.5 1fe7237799 refactor(install): generate the web sudoers rules in one place (#622 )

* refactor(install): generate the web sudoers rules in one place

/etc/sudoers.d/ledmatrix_web was written by two copies of the same
allow-list: a heredoc in first_time_install.sh Step 10 and a block of
echo lines in scripts/install/configure_web_sudo.sh. They drifted before
(safe_pip_install.sh was granted by one only), and a test existed just
to catch that.

Both now call web_sudoers_rules() from the new
scripts/install/lib_sudoers.sh and keep their own validate (visudo -c),
install and confirm flows.

- first_time_install.sh output is byte-for-byte unchanged, so a device
  re-running the installer gets "already up to date". If the library is
  missing, Step 10 keeps the installed file and carries on, the same way
  it handles rules that fail visudo (an empty file would pass visudo).
- configure_web_sudo.sh now writes the installer's layout: same 18 rules,
  different comments and order. It still leaves out reboot, poweroff and
  journalctl when they are missing; the library does that for both.

The drift test now pins the generator's grants, checks that neither
installer writes rules of its own, and runs each installer's call line
to check the argument order. Tests that read the rule text now read the
library.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* refactor(install): detect the web service user in one function

first_time_install.sh pasted the same WEB_SERVICE_USER detection block
three times (Step 3.1's fallback, the plugin-repos setup and Step 11).
The copies were identical apart from comments; they now call
detect_web_service_user(), whose body is that block unchanged.

Behaviour is the same: the function sets the same global and always
returns 0, as the inline if-chain did. Checked on Linux against all
three original copies across 13 layouts (installed unit with and without
User=, the repo as shipped, each grep branch, template placeholders).

The comment notes that the install_web_service.sh / install_service.sh
greps no longer match anything, so until Step 8 installs the unit the
result is "root". That behaviour is left as it was.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-24 15:51:14 -04:00

configure_web_sudo.sh

refactor(install): generate the web sudoers rules in one place (#622 )

2026-09-24 15:51:14 -04:00

configure_wifi_permissions.sh

harden: cap malloc arenas, warn on unit drift, and grant the portal's sudo commands (#476 )

2026-08-21 14:29:45 -04:00

install_dns_fix.sh

test: fix the emulator port collision behind the intermittent suite failures (#562 )

2026-09-11 15:45:13 -04:00

install_mqtt_bridge.sh

feat(tools): MQTT bridge and Pixlet editor, ported onto the api_v3 split (#554 )

2026-09-11 11:32:12 -04:00

install_service.sh

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595 )

2026-09-17 16:37:29 -04:00

install_web_service.sh

fix(cache): web UI can read what the display service caches again (#593 )

2026-09-17 12:38:39 -04:00

install_wifi_monitor.sh

fix(install): render the systemd units from their templates, not from heredocs (#547 )

2026-09-11 08:41:19 -04:00

lib_lowmem.sh

fix(install): survive the rgbmatrix build on low-memory Pis (#430 )

2026-08-03 15:21:18 -04:00

lib_sudoers.sh

refactor(install): generate the web sudoers rules in one place (#622 )

2026-09-24 15:51:14 -04:00

lib_systemd_render.sh

fix(install): render the systemd units from their templates, not from heredocs (#547 )

2026-09-11 08:41:19 -04:00

one-shot-install.sh

fix(install): make one-shot retry() retry, and drop root grants on user files (#606 )

2026-09-23 10:34:20 -04:00

README.md

chore: delete unreferenced scripts and archived docs; fix stale doc claims (#607 )

2026-09-23 12:36:38 -04:00

setup_cache.sh

test: fix the emulator port collision behind the intermittent suite failures (#562 )

2026-09-11 15:45:13 -04:00

README.md

Installation Scripts

This directory contains scripts for installing and configuring the LEDMatrix system.

Scripts

one-shot-install.sh - Single-command installer; clones the repo, checks prerequisites, then runs first_time_install.sh. Invoked via curl ... | bash from the project root README.
install_service.sh - Installs, enables and starts the display service (ledmatrix.service), the web interface service (ledmatrix-web.service) and the update-verify units (systemd)
install_web_service.sh - Installs only the web interface service and the update-verify units (systemd)
install_wifi_monitor.sh - Installs the WiFi monitor daemon service
setup_cache.sh - Sets up persistent cache directory with proper permissions
configure_web_sudo.sh - Configures passwordless sudo access for web interface actions
configure_wifi_permissions.sh - Grants the web interface's user (the user who runs the script, i.e. the one you installed LEDMatrix as; there is no ledmatrix system user) the passwordless nmcli and related WiFi permissions the web interface needs

Usage

These scripts are typically called by first_time_install.sh in the project root (which itself is invoked by one-shot-install.sh), but can also be run individually if needed.

Note: Most installation scripts require sudo privileges to install systemd services and configure system settings.