kwila/kwilabook
Watch
1
0
Fork
You've already forked kwilabook
 0
Code Pull requests 1 Releases Activity Actions

feat: add USB kiosk proof of concept #2

Merged
addison merged 8 commits from feat/usb-kiosk-poc into main 2026-08-15 21:34:47 -04:00
Conversation 0 Commits 8 Files changed 6 +381
dev-bot commented 2026-08-15 16:28:00 -04:00
Collaborator
Copy link

Summary

  • add a Nix flake that builds an ephemeral x86_64 NixOS live ISO
  • boot into an automatically logged-in Chromium kiosk session
  • lock the generic installer rescue accounts, console auto-login, SSH, sudo, VT switching, and desktop escape routes
  • provide an offline Wi-Fi setup flow through NetworkManager
  • configure the POC allowlist for kwila.dev and HTTPS subdomains of kwila.cloud

README.md is intentionally unchanged in this proof-of-concept PR.

Validation

  • nix flake check passes
  • nix build .#iso completes successfully
  • generated ISO is a bootable ISO 9660 hybrid image, approximately 2.2 GiB
  • generated kiosk systemd unit passes systemd-analyze verify

To test, check out this branch, run nix build .#iso, write result/iso/*.iso to a USB drive, and boot it. Physical acceptance testing remains required.

## Summary - add a Nix flake that builds an ephemeral x86_64 NixOS live ISO - boot into an automatically logged-in Chromium kiosk session - lock the generic installer rescue accounts, console auto-login, SSH, sudo, VT switching, and desktop escape routes - provide an offline Wi-Fi setup flow through NetworkManager - configure the POC allowlist for `kwila.dev` and HTTPS subdomains of `kwila.cloud` README.md is intentionally unchanged in this proof-of-concept PR. ## Validation - `nix flake check` passes - `nix build .#iso` completes successfully - generated ISO is a bootable ISO 9660 hybrid image, approximately 2.2 GiB - generated kiosk systemd unit passes `systemd-analyze verify` To test, check out this branch, run `nix build .#iso`, write `result/iso/*.iso` to a USB drive, and boot it. Physical acceptance testing remains required.
Amp-Thread-ID: https://ampcode.com/threads/T-01a00710-e289-73dd-afb8-790e48cc97ea
Co-authored-by: Addison Emig <[email protected]>
Amp-Thread-ID: https://ampcode.com/threads/T-01a00710-e289-73dd-afb8-790e48cc97ea
Co-authored-by: Addison Emig <[email protected]>
Amp-Thread-ID: https://ampcode.com/threads/T-01a00710-e289-73dd-afb8-790e48cc97ea
Co-authored-by: Addison Emig <[email protected]>
Amp-Thread-ID: https://ampcode.com/threads/T-01a00710-e289-73dd-afb8-790e48cc97ea
Co-authored-by: Addison Emig <[email protected]>
Amp-Thread-ID: https://ampcode.com/threads/T-01a00710-e289-73dd-afb8-790e48cc97ea
Co-authored-by: Addison Emig <[email protected]>
Amp-Thread-ID: https://ampcode.com/threads/T-01a00823-8090-7238-9125-fe0eed41cf98
Co-authored-by: Amp <[email protected]>
Amp-Thread-ID: https://ampcode.com/threads/T-01a00823-8090-7238-9125-fe0eed41cf98
Co-authored-by: Amp <[email protected]>
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
kwila/kwilabook!2
No description provided.