mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-13 06:06:38 +00:00
Environment TestandClaude Sonnet 4.6
5c1a963d30
- Move flow/security/ghcr.md to tools/ghcr/authentication.md - Move flow/security/mirror-cleanup.md to tools/ghcr/cleanup.md - Move flow/security/branch.md to tools/github/branch.md - Move flow/security/repository.md to tools/github/repository.md - Move code/frameworks/ansible.md to tools/ansible.md - Merge code/frameworks/Makefile.md into tools/make.md and extract file rules to artefact/files/makefile.md - Rename tools/makefile.md to tools/make.md - Add .github/workflows/images-mirror-cleanup.yml for manual GHCR cleanup - Apply documentation.md standards: emojis on headlines, no em dashes, filename link text - Fix all cross-references broken by directory restructuring Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1.6 KiB
1.6 KiB
🔐 CA Trust Scripts
This directory contains platform-specific scripts for trusting the Infinito Root CA certificate on the developer's machine. For the canonical Make target index that invokes these helpers, see make.md.
All scripts extract the Root CA from a running Infinito container and install it into the appropriate system trust store, so that browsers and tools accept *.infinito.example TLS certificates without warnings.
📄 Scripts
🐧 linux.sh
Trusts the Infinito Root CA on the Linux host system.
- Extracts
root-ca.crtfrom the running Infinito container viadocker cp - Places it under
/etc/infinito.nexus/ca/root-ca.crt - Installs it into the system trust store via
roles/sys-ca-selfsigned/files/with-ca-trust.sh
Requires INFINITO_CONTAINER to be set to the name of the running container.
🪟 wsl2.sh
Trusts the Infinito Root CA on Windows from inside a WSL2 environment. Only executes when running on WSL2 (detected via /proc/version).
- Extracts
root-ca.crtfrom the running container and copies it to the WindowsDownloadsfolder - Imports the certificate into the Windows CurrentUser Root trust store via PowerShell (no admin required)
- Discovers all configured domains from the nginx config inside the container
- Updates the Windows hosts file (
C:\Windows\System32\drivers\etc\hosts) with127.0.0.1entries for all discovered domains (requires one UAC confirmation)
🔗 Related
../. TLS administration scriptsroles/sys-ca-selfsigned/. generates the self-signed Root CA inside the container