[sec-check] fix: generate kiosk TLS cert and key at first boot instead of sysext build time - #91

Closed

Danathar wants to merge 8 commits into

projectbluefin:mainfrom

Danathar:fix-kiosk-tls-firstboot

Commits on Sep 14, 2026

fix(sec): generate kiosk TLS cert and key at first boot instead of sysext build time
Danathar
committed
49fa35e
fix(kiosk): stop the cert-persistence tmpfiles rule from matching cert.pem/key.pem

Danathar
and
claude
committed
814d878
Merge remote-tracking branch 'origin/main' into refresh-pr-91
castrojo
committed
f0c0e58

Commits on Sep 15, 2026

Commits on Sep 18, 2026

fix(k0s): drop dead [Install] from k0s-kiosk-tls.service

castrojo
and
Copilot
committed
35d368e

Commits on Sep 20, 2026

fix(kiosk): extract host IPs for the SAN without awk

Danathar
and
claude
committed
27b76f1
fix(kiosk): ship TLS generator as script, rotate leaked build-time keys
Copilot
committed
f5d64be