workstation

The super-repo for the crank workstation VM — a git-wrapper around Python functions that instantiate, wallet-stamp, and ansible-manage the machine. Forward-only cranks (version-0.0N), each shadow-gated by install.py. No bash.

What it is

- Cranked — every change is install.py --mint: run the shadow gate, then commit + tag the next version-0.0N. A red shadow means no crank. - Wallet-stamped — the machine's SSH identity is jazz_wallet-derived (wallet ssh workstation); the pubkey is pre-installed via the cloud-init autoinstall, and the build is anchored on the ConductorLedger (wallet anchor). Key login survives any in-VM password change. - Ansible-managed — once it's up (ssh :2225), an idempotent playbook configures it. - Instantiation — clones the proven appliance libvirt domain (arm64/HVF, direct-kernel) and boots the standard Ubuntu Desktop ISO via a CIDATA autoinstall seed (no ISO remaster).

Layout

workstation/   wallet.py · seed.py · domain.py · build.py · __main__.py
ansible/       workstation.yml · inventory.ini
tests/         *-shadow.py  (the gate)
install.py · install.json   (the ratchet)

Use

python3 install.py                 # run the shadow gate
python3 install.py --mint -m MSG   # a crank: gate -> commit -> version-0.0N tag
python3 -m workstation build --iso ~/Downloads/ubuntu-*-desktop-arm64.iso
python3 -m workstation ansible     # manage it once ssh :2225 is up