secubox-openwrt/package/secubox/luci-app-cloner/root/usr/share/rpcd/acl.d/luci-app-cloner.json
CyberMind-FR b0b27be82f feat(cloner): Implement staged remote flash (KISS v2)
Replaces unreliable nohup-based remote flash with staged approach:

1. remote_prepare_flash: Upload image + store options
2. remote_confirm_flash: Execute sysupgrade directly
3. remote_flash_status: Check flash state
4. remote_cancel_flash: Abort pending flash

Key fixes:
- Use /tmp for firmware (large tmpfs vs small rootfs)
- Direct sysupgrade execution (no nohup, works on OpenWrt)
- Proper dbclient SSH without unavailable commands
- Background job with & instead of nohup

Tested: x86_64 VM successfully flashed from 24.10.5 to 24.10.0

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-25 09:06:12 +01:00

29 lines
1005 B
JSON

{
"luci-app-cloner": {
"description": "Grant access to SecuBox Cloning Station",
"read": {
"ubus": {
"luci.cloner": [
"status", "list_images", "list_tokens", "list_clones", "list_devices",
"build_progress", "build_log", "serial_ports", "serial_read",
"history_list", "storage_info", "image_details",
"list_remotes", "remote_status", "scan_network",
"pending_devices", "inventory", "list_profiles", "discovery_status", "remote_flash_status"
]
}
},
"write": {
"ubus": {
"luci.cloner": [
"generate_token", "build_image", "tftp_start", "tftp_stop",
"delete_token", "delete_image", "serial_start", "serial_stop", "serial_write",
"history_add", "history_clear", "image_rename",
"add_remote", "remove_remote", "remote_upload", "remote_flash",
"approve_device", "reject_device", "bulk_tokens",
"import_preregistered", "toggle_discovery", "remote_prepare_flash", "remote_confirm_flash", "remote_cancel_flash"
]
}
}
}
}