mirror of https://github.com/ChuckBuilds/LEDMatrix.git synced 2026-08-22 02:48:15 +00:00

Files

T

ChuckandClaude Opus 5 cc258aaffd fix(install): tag the secondary installer's journalctl grants too (#491 )

Review was right on all three counts, and the first is the one that matters:
scripts/install/configure_web_sudo.sh writes the same three wildcard
journalctl rules as first_time_install.sh and none of them carried NOEXEC. So
this PR closed the pager escape on one installer path and left it open on the
other, which is close to no fix at all -- a rig configured through that script
still hands out a root shell via less's "!command".

The test could not have caught it, for two independent reasons. INSTALLERS
did not list the file. And even listed, _grant_lines() kept the raw source
line: that installer echoes its rules, so each one ends in a quote rather
than the wildcard, and the trailing-* check skipped every one of them. Either
alone would have hidden it.

Both fixed: the file is covered, and an echoed rule is unwrapped to the
sudoers line it actually emits.

The selector test now covers -t ledmatrix as well. It asserted only the two
-u forms, so deleting the -t rule would have passed.

Verified by removing NOEXEC again from the secondary installer: four of the
six tests fail, where before the suite passed with the vulnerability present.


Claude-Session: https://claude.ai/code/session_01STMbQE4YctTacQXfbYqKuW

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-21 14:28:23 -04:00

configure_web_sudo.sh

fix(install): tag the secondary installer's journalctl grants too (#491 )

2026-08-21 14:28:23 -04:00

configure_wifi_permissions.sh

fix: overhaul WiFi captive portal for reliable setup (#296 )

2026-03-27 14:50:33 -04:00

debug_install.sh

Feature/one shot installer (#178 )

2026-01-11 16:38:55 -05:00

install_service.sh

Plugins (#145 )

2025-12-27 14:15:49 -05:00

install_web_service.sh

fix(systemd): wait for network connectivity before starting services (#335 )

2026-05-15 15:47:35 -04:00

install_wifi_monitor.sh

Feature/one shot installer (#178 )

2026-01-11 16:38:55 -05:00

lib_lowmem.sh

fix(install): survive the rgbmatrix build on low-memory Pis (#430 )

2026-08-03 15:21:18 -04:00

migrate_config.sh

Plugins (#145 )

2025-12-27 14:15:49 -05:00

one-shot-install.sh

fix(install): survive the rgbmatrix build on low-memory Pis (#430 )

2026-08-03 15:21:18 -04:00

README.md

docs: refresh and correct stale documentation across repo (#306 )

2026-04-07 21:04:25 -04:00

setup_cache.sh

Plugins (#145 )

2025-12-27 14:15:49 -05:00

README.md

Installation Scripts

This directory contains scripts for installing and configuring the LEDMatrix system.

Scripts

one-shot-install.sh - Single-command installer; clones the repo, checks prerequisites, then runs first_time_install.sh. Invoked via curl ... | bash from the project root README.
install_service.sh - Installs the main LED Matrix display service (systemd)
install_web_service.sh - Installs the web interface service (systemd)
install_wifi_monitor.sh - Installs the WiFi monitor daemon service
setup_cache.sh - Sets up persistent cache directory with proper permissions
configure_web_sudo.sh - Configures passwordless sudo access for web interface actions
configure_wifi_permissions.sh - Grants the ledmatrix user the WiFi management permissions needed by the web interface and the WiFi monitor service
migrate_config.sh - Migrates configuration files to new formats (if needed)
debug_install.sh - Diagnostic helper used when an install fails; collects environment info and recent logs

Usage

These scripts are typically called by first_time_install.sh in the project root (which itself is invoked by one-shot-install.sh), but can also be run individually if needed.

Note: Most installation scripts require sudo privileges to install systemd services and configure system settings.