Files
felhom.eu/documentation/audits/catalog-sweep-2026-10-24/tools/envrun.py
T
admin 67053335d1
gates / gates (push) Successful in 13m17s
Catalog sweep 2026-10-24: all 65 catalog apps on a fresh box (52 work, 10 with a problem, 0 broken); register 208 -> 217 (R-1269..R-1277 opened; notes on R-739, R-1267); STATUS + D46; map B1 re-checked; evidence
Every catalog app installed, used, backed up, removed keeping data, reinstalled, restored and removed with data on a
fresh box from the public ISO (demo-hp VM 9360, Tester4), endpoint-level. Worst: a reinstall's capture rewrites the
kept unit so its restore breaks the app (R-1269, P2), the restore still reports success (R-1270, P2), and „use my kept
data" loaded another box's future-dated database (R-1271, P2). Drill catalog fixes for the morning list (n8n usage
data; OpenGist 256M, proven by a cgroup probe). VM 9360 and LXC 9361 destroyed; hub host Tester4-aa9466 left for the
operator. REPORT-catalog-sweep-2026-10-24.md.
2026-10-25 00:13:05 +02:00

13 lines
483 B
Python
Executable File

#!/usr/bin/python3
"""envrun.py — read NAME=base64value lines from stdin until an empty line, put them in the environment, exec argv.
Lets DooPlex hand a secret to a command in the browser LXC without it ever touching a command line."""
import base64, os, sys
env = dict(os.environ)
for line in sys.stdin:
line = line.rstrip("\n")
if not line:
break
k, v = line.split("=", 1)
env[k] = base64.b64decode(v).decode()
os.execvpe(sys.argv[1], sys.argv[1:], env)