thethreemagi/mediabox-bootstrap
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

README: 6 mounts not 8, migration/ in the layout, no-claim rule

Browse Source
This commit is contained in:
thethreemagi
2026-07-31 17:56:59 +01:00
parent 7017e9f4d5
commit 6f6d563569
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+9 -5
View File
@@ -20,10 +20,12 @@ bootstrap.sh orchestrator — runs the stages, fails soft
scripts/ scripts/
00-preflight.sh asserts hardware/BIOS state. Changes nothing. 00-preflight.sh asserts hardware/BIOS state. Changes nothing.
10-secrets.sh idempotent ADD-ONLY seeder for /srv/secrets/stacks.env 10-secrets.sh idempotent ADD-ONLY seeder for /srv/secrets/stacks.env
20-cifs.sh the 8 NAS mounts (--verify mode included) 20-cifs.sh the 6 NAS mounts, named exactly as the DB stores them
30-nvidia.sh NVIDIA 580 + container toolkit 30-nvidia.sh NVIDIA 580 + container toolkit
40-shell-mcp.sh builds and starts the native shell-mcp 40-shell-mcp.sh builds and starts the native shell-mcp
50-plex.sh Plex. Run BY HAND — needs a live claim token. 50-plex.sh Plex against the MIGRATED data dir. No claim token.
60-media-relocate.sh optional, post-soak: move the 337 GB preview cache
migration/ remap.sql, migrate-db.sh, gen-preferences.ps1, README.md
shell-mcp/ amd64 build of the MCP server (server.py, Dockerfile, shell-mcp/ amd64 build of the MCP server (server.py, Dockerfile,
docker-compose.yml, pinned requirements.txt) docker-compose.yml, pinned requirements.txt)
plex/docker-compose.yml Plex service definition plex/docker-compose.yml Plex service definition
@@ -51,9 +53,11 @@ continues; the systemd unit declares `SuccessExitStatus=0 1` so a bad stage can
never wedge boot. There is no keyboard attached to this machine. never wedge boot. There is no keyboard attached to this machine.
**Secrets never ride on removable media.** The CIFS credentials file is created **Secrets never ride on removable media.** The CIFS credentials file is created
*empty* by the autoinstall and filled in post-boot over the MCP. `PLEX_CLAIM` *empty* by the autoinstall and filled in post-boot over the MCP.
tokens expire in four minutes and are passed as a one-shot environment variable,
never written to disk or committed. **No claim token, ever.** The migration preserves `MachineIdentifier`, so this
is the existing server rather than a new one. Claiming would discard shared
users and every client registration.
**One secrets file per host.** This box has its own `/srv/secrets/stacks.env`, **One secrets file per host.** This box has its own `/srv/secrets/stacks.env`,
using the same `[OPERATOR]` / `[VALUES]` / `[MANIFEST]` tiering as arrsstack, but using the same `[OPERATOR]` / `[VALUES]` / `[MANIFEST]` tiering as arrsstack, but