nexxo 4681b135db feat(deploy): run under a dedicated account instead of root ... The installer still needs root for apt and the firewall, but it now creates a clupilot service account that owns the checkout and runs Docker, maps the container user to it (HOST_UID/GID), and update.sh refuses to run as root — root-owned files in the checkout are files the application cannot write. The account has no password login: docker group membership is root-equivalent on the host, so it is reachable only via sudo -u or an SSH key. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 23:25:59 +02:00
..
install.sh	feat(deploy): run under a dedicated account instead of root	2026-07-25 23:25:59 +02:00
update.sh	feat(deploy): run under a dedicated account instead of root	2026-07-25 23:25:59 +02:00