Commit Graph

5 Commits

Author SHA1 Message Date
HackWeasel
1b88782cd2 fix: remove Ollama and nvidia-ctk runtime configure from DGX installer
- Remove Ollama installation functionality (not needed on DGX)
- Remove nvidia-ctk runtime configure command that breaks DGX OS 7
  (DGX uses override.conf, not daemon.json)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-12 19:52:39 -05:00
HackWeasel
773cb23d97 fix: sync tenant DB password from env during init
Root cause: gt2_tenant_user was created with hardcoded password
in init script, but tenant-backend connects with password from .env.

Solution: Add 00c-sync-passwords.sh that runs immediately after
role creation to sync passwords from environment variables.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-12 19:52:32 -05:00
HackWeasel
cb50d99f90 Adjusting Installation Scripts 2025-12-12 19:25:01 -05:00
HackWeasel
9e8133664d fix: remove nvidia-ctk runtime configure from DGX installer (conflicts with DGX OS override.conf) 2025-12-12 18:42:53 -05:00
HackWeasel
b9dfb86260 GT AI OS Community Edition v2.0.33
Security hardening release addressing CodeQL and Dependabot alerts:

- Fix stack trace exposure in error responses
- Add SSRF protection with DNS resolution checking
- Implement proper URL hostname validation (replaces substring matching)
- Add centralized path sanitization to prevent path traversal
- Fix ReDoS vulnerability in email validation regex
- Improve HTML sanitization in validation utilities
- Fix capability wildcard matching in auth utilities
- Update glob dependency to address CVE
- Add CodeQL suppression comments for verified false positives

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-12 17:04:45 -05:00