46 lines
1.4 KiB
Bash
46 lines
1.4 KiB
Bash
# AIOS V2R1 Candidate 环境模板
|
|
# 正式环境禁止保存明文 Secret。
|
|
# Provenance/OpenClaw 私钥只用于签发端，不进入应用容器或 Git。
|
|
|
|
# Runtime
|
|
AIOS_V2_HOST=127.0.0.1
|
|
AIOS_V2_PORT=18920
|
|
AIOS_V2_STATE_DIR=/var/lib/aios-v2
|
|
|
|
# OpenClaw Ed25519 Command v2
|
|
AIOS_OPENCLAW_URL=
|
|
AIOS_OPENCLAW_CREDENTIAL_REF=
|
|
AIOS_OPENCLAW_SIGNING_MATERIAL_FILE=/run/credentials/aios-v2.service/openclaw-command-private-key
|
|
AIOS_OPENCLAW_SIGNING_KEY_ID=openclaw-v2r1-candidate-ed25519
|
|
|
|
# Parent Workflow Provenance
|
|
AIOS_REQUIRE_RUN_PROVENANCE=true
|
|
AIOS_PROVENANCE_PUBLIC_KEY_FILE=/etc/aios-v2/provenance/public-key.pem
|
|
AIOS_PROVENANCE_KEY_ID=openclaw-v2r1-candidate-ed25519
|
|
AIOS_PROVENANCE_STORE_FILE=/var/lib/aios-v2/run-provenance.sqlite3
|
|
AIOS_PROVENANCE_RECEIPT_DIR=/var/lib/aios-v2/provenance-receipts
|
|
|
|
# Least-privilege child Grants: production requires all seven IDs.
|
|
AIOS_PROVENANCE_GRANT_CODE_CHANGE_ID=
|
|
AIOS_PROVENANCE_GRANT_GIT_ID=
|
|
AIOS_PROVENANCE_GRANT_DEPLOYMENT_ID=
|
|
AIOS_PROVENANCE_GRANT_RUNTIME_ID=
|
|
AIOS_PROVENANCE_GRANT_EVIDENCE_ID=
|
|
AIOS_PROVENANCE_GRANT_ROLLBACK_ID=
|
|
AIOS_PROVENANCE_GRANT_AUDIT_ID=
|
|
|
|
# Per-operation context. Deployment/rollback wrappers populate these from the
|
|
# approved task execution context; do not hard-code shared production values.
|
|
AIOS_PROVENANCE_ID=
|
|
AIOS_RUN_ID=
|
|
AIOS_TENANT_ID=
|
|
AIOS_TASK_ID=
|
|
AIOS_AGENT_ID=
|
|
AIOS_PRINCIPAL_ID=
|
|
|
|
# 禁止：
|
|
# AIOS_PROVENANCE_PRIVATE_KEY_FILE
|
|
# AIOS_OPENCLAW_TOKEN
|
|
# API_KEY=value
|
|
# PASSWORD=value
|