Files
bare-operating-system/packages/bare-os-seeder
Raven Scott 551d68ac6c - Peer admission: denylist, require-caps JSON, schema-2 results; optional
NDJSON audit + rate limit; env passthrough and handbook/appendix/docs
- /proc/bare_os/security_posture.json schema 4: vaultCryptoPrimitives,
  bareCryptoReportedVersion, expanded peerAdmission
- /proc/bare_os_features: pearIpcConservativeAdvertisement (names only)
- Syscall select returns pollClock with timeout; coreutils test -u/-g/-k
- Host env: BARE_OS_CTX_BARE_SUBPROCESS_SPAWN,
  BARE_OS_REPLICATION_PEER_PRIORITY_JSON, peer audit keys
- Placeholder scan: rename expandCmdsubstEmbedded; sendmsg wording
- Docs: vault threat model, preface Mermaid, protocol/changelog, posix
  matrix, holepunch clone audit refresh, developer-guide/kernel-program Wasm
- ctx.d.ts + gen-ctx-client-helper; booter CHANGELOG maintenance notes
2026-04-05 13:15:12 -04:00
..
2026-04-05 04:33:14 -04:00
2026-04-05 00:45:17 -04:00
2026-04-05 04:33:14 -04:00
2026-04-05 04:33:14 -04:00
2026-04-04 08:31:39 -04:00

bare-os-seeder

Pear / Bare application that owns the canonical system Hyperdrive: it walks a kernel tree on disk, writes /boot/init.js, /bin/*, /etc/* into the drive (no host temp dirs), builds a 512-byte MBR with the drive key, joins Hyperswarm on bare-os-v1, and serves MBR block reads + Protomux bare-os-v1 replication to peers.

Documentation: User manual · Handbook · Seeder reference · Protocol reference.

Run

From package directory (after npm ci at repo root):

node index.js

Or with Bare/Pear:

npm run pear:dev

From repo root (recommended — fixes workspace node_modules for Pear):

npm run os:seeder

Environment

  • BARE_OS_KERNEL_ROOT — Absolute path to kernel tree to stage (default: package kernel/ vendored copy, or repo kernel/ under Node file: URL)
  • BARE_OS_HOST_DATA — Base directory for host state (default ~/.bare-os)
  • BARE_OS_SEED_STORE — Corestore directory (default ~/.bare-os/corestore/seeder)
  • BARE_OS_SEED_CAPABILITY_ATTESTATION_JSON — Optional JSON string for seed RPC bare_os.capability_attestation (operators verify on host; guest does not crypto-verify)

Pear vs Node

  • import.meta.url is file: — seeder may dynamically import bare-os-coreutils/build.mjs and bare-os-bare-libs/build.mjs, rebuilding /bin and kernel/lib/bare before staging.
  • pear: bundle — coreutils and /lib/bare bundles must be pre-built into kernel/; run npm run build -w bare-os-coreutils and npm run build -w bare-os-bare-libs before pear run (root npm run os:seeder does both).

Layout

  • index.js — Entry: Corestore, Hyperdrive, stageKernelTree, swarm, setupSeedChannel (RPCs include optional bare_os.snapshot_hints and bare_os.peer_firewall_stats when implemented)
  • lib/paths.jspackageRootDir, kernel root, Corestore path (Pear RTIaware)
  • kernel/ — Vendored mirror of repo kernel/ for Pear staging — must match kernel/ byte-for-byte (npm test pretest runs scripts/verify-kernel-seeder-parity.mjs)

Dependencies

bare-os-protocol (workspace), hyperdrive, corestore, hyperswarm, protomux, b4a, compact-encoding, safety-catch, bare-os.

See also