Skip to content

docs: unpack bws and bw on disk, not in /run/nodkey-setup - #161

Merged
groupsky merged 3 commits into
mainfrom
docs/107-bw-download-on-disk
Nov 9, 2026
Merged

groupsky merged 3 commits into
mainfrom
docs/107-bw-download-on-disk

Conversation

@groupsky

@groupsky groupsky commented Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Refs #107

/run is a small tmpfs (on Debian, 10 % of the RAM). On a 1 GB host the standalone bw zip and the unpacked bw do not fit there together. The downloads hold no secret, so section 5 now unpacks them in a private directory on disk (/root/bw-setup, mode 0700) and removes it after the install. Section 3 says that /run/nodkey-setup is for secrets only.

The guide does not suggest bw --version, so the third point of the issue (remove /root/.config/Bitwarden CLI) needs no text.

Progress

  • Section 5 unpacks bw and bws in a private directory on disk, and removes it after the install.
  • Section 3 says that /run/nodkey-setup is for secrets only.
  • The new steps are tried in a container where /run is limited to 100 MB.

Trial (2026-11-09)

docker run --rm --tmpfs /run:size=100m debian:13, as root, with curl and unzip:

  • Old steps (unzip bw-linux-2026.9.1.zip bw in /run/nodkey-setup): bw: write error (disk full?), bw is probably truncated.
  • New steps for bws 2.1.0 and bw 2026.9.1 in /root/bw-setup: sha256sum prints OK for the bws zip, both install in /usr/local/bin (bw 142967059 bytes, bws 12359704 bytes), and /root/bw-setup is gone at the end.

Reviews

@groupsky
groupsky marked this pull request as ready for review November 9, 2026 04:27
@groupsky
groupsky merged commit 60202fa into main Nov 9, 2026
7 checks passed
@groupsky
groupsky deleted the docs/107-bw-download-on-disk branch November 9, 2026 04:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant