catborise 1547e58e55 fix(console): disable the unauthenticated serial console by default ... socketiod does not validate the console token, keeps a single global PTY and broadcasts its output to every connected client, so anyone who can reach port 6081 can read and write a serial console that someone opened. It is also broken for legitimate users, since console/views.py now writes signed tokens that socketiod cannot parse. Until it is rewritten, turn the serial console off by default: - Add SERIAL_CONSOLE_ENABLED = False to the settings template; installs whose settings.py lacks it are treated as disabled. - The console view shows an error instead of the xterm page for pty consoles while the setting is off. - socketiod refuses to start unless SERIAL_CONSOLE_ENABLED is True. - Supervisor: autostart=false for socketiod; drop -d (debug) from the supervisor and systemd definitions; fix the systemd unit description; conf/systemd/install.sh no longer suggests enabling socketiod. - README: stop opening port 6081 and document how to enable the serial console on a trusted network.		2026-10-02 17:22:20 +03:00
..
daemon	feat(security): implement P0 critical security fixes for API, console, and access control	2026-09-27 10:50:09 +03:00
nginx	feat(install): add openSUSE and SLES 15 distribution support and compute bootstrap	2026-09-25 20:03:02 +03:00
runit	fix(console): fix novncd startup in container and prevent double slashes in websocket url	2026-09-25 23:11:52 +03:00
supervisor	fix(console): disable the unauthenticated serial console by default	2026-10-02 17:22:20 +03:00
systemd	fix(console): disable the unauthenticated serial console by default	2026-10-02 17:22:20 +03:00
requirements.txt	chore(deps): update production and development requirements for Django 4.2 LTS	2026-09-27 00:22:38 +03:00
test-vm.xml	feat(console): remove deprecated SPICE support in favor of noVNC	2026-09-26 22:43:40 +03:00