src/libexec/nuageinit/tests, branch main

nuageinit: fix shell injection in power_state_change delay and add test

2026-06-09T16:04:25Z

nuageinit: fix shell command injection in multiple rc.conf.d writes

2026-06-09T16:04:24Z

nuageinit: use single-quote shell escaping for hostname in rc.conf.d

2026-06-09T16:04:24Z

The hostname value was written inside double quotes in /etc/rc.conf.d/hostname. POSIX shell performs command substitution inside double quotes, so a hostname containing $() or backticks would be executed when the file is sourced (e.g., by rc(8)). Switch to using the existing shell_escape() helper, which wraps values in single quotes. In POSIX shell, single-quoted strings are completely literal — no expansion or substitution of any kind is performed. While the hostname is already validated to contain only [a-zA-Z0-9.-], this change provides defense-in-depth so the output format is safe regardless of future validation changes. Reported by: Yazdan Soltani

nuageinit: install certs in /usr/share/certs/trusted

2026-06-06T19:31:21Z

Suggested by: kevans

nuageinit: implement phone_home support

2026-06-05T21:28:25Z

Posts instance data (hostname, instance_id, public keys) to a URL using fetch(1). Supports: - url: target URL - post: list of data items to send, or 'all' - tries: number of retry attempts (default 1)

nuageinit: implement final_message support

2026-06-05T21:03:45Z

nuage.lua: add encode_base64 helper

2026-06-06T06:01:48Z

nuageinit: implement power_state_change and locale support

2026-06-05T20:48:18Z

nuageinit: implement MIME multipart user-data support

2026-06-05T20:45:54Z

Add support for MIME multipart/mixed user-data, allowing a single user-data blob to contain multiple parts with different content types.

nuageinit: implement ca_certs support

2026-06-05T20:27:07Z

Add support for the 'ca_certs' cloud-config key which manages CA certificates by writing them to /etc/ssl/certs/ and running certctl rehash.