Wraps the rescue/chroot/diagnose/fix workflows in a single tool with LUKS-passphrase keyring caching. Subcommands: status, connect rescue, connect chroot, diagnose, fix-boot, fix-network, downgrade-kernel, downgrade-initramfs, reinstall-grub, use-static-ip, upgrade-system, forget-passphrase. connect subcommands accept an optional remote command after the host for non-interactive execution. README updated to reference hal instead of the previous shell scripts. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
30 lines
537 B
JSON
30 lines
537 B
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Edit",
|
|
"Write",
|
|
"Bash(*)",
|
|
"WebFetch(domain:pypi.org)",
|
|
"WebFetch(domain:files.pythonhosted.org)",
|
|
"Bash(python3 -c ' *)",
|
|
"WebFetch(domain:api.github.com)"
|
|
],
|
|
"ask": [
|
|
"Bash(*hal *)",
|
|
"Bash(*hetzner_arch_luks *)",
|
|
"Bash(ssh *)",
|
|
"Bash(scp *)",
|
|
"Bash(sftp *)"
|
|
]
|
|
},
|
|
"sandbox": {
|
|
"enabled": true,
|
|
"autoAllowBashIfSandboxed": true,
|
|
"network": {
|
|
"allowedDomains": [
|
|
"*"
|
|
]
|
|
}
|
|
}
|
|
}
|