Skip to content

minute2win 0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Oct 04:13
· 32 commits to main since this release
v0.1.0
8a41e99
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Read first: this release is unit-tested and adversarially reviewed but has never booted a machine. What is unverified, and three accepted risks, are listed concretely in #2.

minute2win deploys Windows with no one at the keyboard. A machine network-boots into WinPE, and minute2win wipes the first eligible internal disk (never USB), applies a verified Windows image and reboots into it. The name is the goal: boot to flashed Windows in about a minute, so every phase is timed.

What's in it

  • Engine (PowerShell 5.1 in WinPE): manifest-driven, no disk prompt. Guards: a one-shot server arm per MAC, a WinPE-only check, an abort countdown. Checks that run before the wipe: image reachable, fits the staging partition, disk big enough, free drive letters.
  • minute2win-server (Go, one static binary, htmx UI built in): arm a MAC from the page; iPXE gets a boot script that consumes the arm and fails closed; a live board shows each phase against a 60 s stopwatch.
  • First-boot bootstrap, logs that survive the reboot (C:\Windows\Logs\minute2win), and a boot-files bundle to upload next to wimboot, boot.wim and install.wim.

Assets

minute2win-server-0.1.0-linux-{amd64,arm64}.tar.gz (server + manifests), minute2win-0.1.0-bootfiles.zip (the windows11/ tree), SHA256SUMS. Verified from this page: checksums match, the amd64 binary runs and serves the UI, an unarmed MAC gets exit 1.

Review

Five adversarial rounds (astra), every finding reproduced against source, logged in docs/dev-process.md. Round 1 found 12 real defects, including an iPXE command injection through the boot URL and a path that could wipe before a failing check; all are fixed.

Known issues

See #2.

Assets 6
Loading