Robot-Market/mqtt-security-test
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add MQTT enrollment demo with Gitea deploy pipeline
Test and deploy enrollment demo / test (push) Successful in 7s
Details
Test and deploy enrollment demo / deploy (push) Successful in 1m12s
Details

Browse Source 
Go backend plus C (libsodium) and C++ (OpenSSL) simulated boards enroll
through a Mosquitto 2.1 broker with Dynamic Security using X25519/HKDF/
Ed25519; a web view shows the run live. The Gitea workflow validates and
builds the images, redeploys the stack on the server with the viewer on
port 8099 and fails unless both boards pass all checks.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
Ryan
2026-10-24 21:25:14 +03:30
co-authored by Claude Sonnet 5.5
commit bf40b92c52
109 changed files with 15357 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/broker/entrypoint.sh
+11
View File
@@ -0,0 +1,11 @@
#!/bin/sh
# Demo broker start-up. Dynamic Security state is recreated on every start so each run begins clean:
# `dynsec init` writes a config containing a single admin client ("backend") that may only manage the
# plugin. The backend then creates every other role and client over MQTT.
set -e
mkdir -p /mosquitto/data
rm -f /mosquitto/data/dynamic-security.json
mosquitto_ctrl dynsec init /mosquitto/data/dynamic-security.json backend "$ADMIN_PASSWORD" >/dev/null
chown -R mosquitto:mosquitto /mosquitto/data
echo "[broker] dynamic security initialised; starting mosquitto (anonymous clients allowed, ACLs via dynsec)"
exec mosquitto -c /mosquitto/config/mosquitto.conf