TaiChiOS 0.1.0-mvp.4

TaiChiOS 0.1 MVP prerelease 4

本预发布版修复首个可启动、可安装、可运行 TaiChiOS 镜像的图形控制台交接。它只适用于隔离的 x86_64 虚拟机，不适用于生产设备。

验收合同

发布流水线从同一标签构建二进制 ISO 与对应源码 ISO，并在发布前验证：

• BIOS 与 UEFI 均可在无网络环境启动 Live 系统；
• tty1 实际出现 taichi 用户会话后才输出 TAICHIOS_LIVE_SHELL_READY；
• BIOS 与 UEFI 均可执行整盘安装；
• 移除 Live 介质并断网后可从硬盘启动，且 tty1 实际出现 agetty 用户登录页后才输出 TAICHIOS_INSTALLED_LOGIN_READY；
• 本地主机名解析、固定 Harness 组合和独立 Recovery target 均通过；
• 生成包/源码清单、SHA-256 校验和、发布元数据、构建环境记录与 GitHub 构建来源证明。

请下载 taichios-0.1-amd64.hybrid.iso 并使用 SHA256SUMS 验证。Release 同时提供对应源码 ISO、源码/包清单、构建环境与机器可读兼容性元数据。

相比 mvp.3 的控制台变化

• 串口继续用于自动化验收，tty1 是主要图形控制台。
• Live 启动会等到既有 taichi 自动登录会话附着 tty1，使用户直接进入 Shell，而不是停在启动日志页。
• 安装后不会自动登录；只有 tty1 正在显示用户登录页才算验收通过。
• Install 启动项不执行 Live tty1 交接，避免 getty 重启与受保护的整盘安装器竞争。
• 安装器写入匹配的 IPv4/IPv6 主机名映射，避免本地 sudo 产生主机名解析警告。

限制

• 工厂凭据只用于开发验收；尚未实现生产凭据注册。
• 默认 Provider 是离线 mock；尚未实现生产 Provider 与 Secret Service 注册。
• 固定镜像策略仍禁用 Secure Boot 与额外固件。
• Recovery 支持已记录的 Profile 禁用和托管文件回滚，不提供跨版本完整系统回滚。
• 本预发布版没有生产安全 SLA。请通过 GitHub Security Advisories 报告漏洞。

English

This prerelease corrects the graphical-console handoff of the first public bootable, installable, runnable TaiChiOS image. It is intended for isolated x86_64 virtual machines, not production devices.

Acceptance contract

The release workflow builds the binary ISO and corresponding-source ISO from this exact tag, then gates publication on:

• BIOS and UEFI Live boot without networking;
• a taichi user session actually attached to tty1 before TAICHIOS_LIVE_SHELL_READY is emitted;
• whole-disk installation under BIOS and UEFI;
• installed boot without the Live medium or networking, with agetty actually presenting the tty1 user login page before TAICHIOS_INSTALLED_LOGIN_READY is emitted;
• local hostname resolution, pinned Harness composition, and the independent Recovery target;
• package/source manifests, SHA-256 checksums, release metadata, build-environment recording, and GitHub build-provenance attestation.

Download taichios-0.1-amd64.hybrid.iso and verify it with SHA256SUMS. The Release also contains the corresponding-source ISO, source/package manifests, build environment, and machine-readable compatibility metadata.

Console changes since mvp.3

• The serial console remains available for automated acceptance, while tty1 is the primary graphical console.
• Live boot now waits until the existing taichi autologin session is attached to tty1, leaving the user directly at a shell instead of a boot-log page.
• Installed boot does not autologin. It is accepted only when tty1 is actively presenting the user login page.
• Installer boots are excluded from the Live tty1 handoff, preventing a getty restart from racing the guarded whole-disk installer.
• The installer writes matching IPv4/IPv6 hostname entries so local sudo does not emit a hostname-resolution warning.

Limitations

• Factory credentials remain development-only; production credential enrollment is not implemented.
• The default Provider is an offline mock. Production Provider and Secret Service enrollment are not implemented.
• Secure Boot and additional firmware remain disabled by the pinned image policy.
• Recovery supports the documented Profile-disable and managed-file rollback paths, not full-system cross-release rollback.
• This prerelease has no production security SLA. Report vulnerabilities through GitHub Security Advisories.