Files

Mike-Swanson 6d065cf3ee feat(hooks): block backslashed Windows-path redirects in bash

Adds a PreToolUse(Bash) hook (block-backslash-winpath.sh) that rejects commands
redirecting/writing to a backslashed Windows drive path (e.g. > D:\claudetools\
.claude\current-mode). On Git Bash those strip the backslashes and PUA-substitute
':' (U+F03A), creating garbled junk files that have repeatedly polluted the repo.
The hook quote-strips the command first, so the pattern appearing inside strings
or commit messages does not false-trigger; Windows-tool args (icacls, pwsh -File)
and forward-slash/relative paths pass. Wired into settings.json so every machine
picks it up on /sync. Pairs with the sync.sh staging guard.

Also: CLAUDE.md note on the Windows mode-write path; record jq install on GURU-KALI.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-24 10:38:14 -07:00

4.7 KiB

Raw Blame History

Machine: GURU-KALI

Hostname: GURU-KALI Last Updated: 2026-05-24

Hardware Specs

Spec	Value
Model	Lenovo Legion Pro 5 16IRX9 (laptop)
CPU	Intel Core i9-14900HX (24 cores / 32 threads)
Memory	31 GiB + 31 GiB swap
GPU	NVIDIA RTX 4070 Mobile/Max-Q (8 GB VRAM) + Intel UHD iGPU
Storage	906 GB NVMe (~831 GB free)

Software

Spec	Value
OS	Kali GNU/Linux Rolling, kernel 6.19.14+kali-amd64
Python	3.13.12
Node.js	v24.15.0 / npm 11.12.1
Go	installed
Rust	1.95.0 (rustc + cargo via rustup, `~/.cargo`) — added 2026-05-24
Git	2.53.0
sops	3.13.1 (`~/.local/bin/sops`)
psql	18.3
mysql/mariadb client	11.8.6
nmap	7.99 (Kali security tooling)
GuruRMM build dev libs	libgtk-3-dev, libayatana-appindicator3-dev, libxdo-dev, libssl-dev, pkg-config (for agent + tray builds) — added 2026-05-24
NVIDIA driver	nouveau (open-source) — NO proprietary driver / CUDA
jq	1.8.1 (added 2026-05-24, needed by hooks)
gh / docker / age / op / grepai / ollama	NOT installed

Ollama Models

None — Ollama not installed. If installed, qwen3:8b (5.2 GB) fits the 8 GB VRAM fully (mirrors DESKTOP-0O8A1RL prose model); qwen3.6 / codestral / qwen3:14b would split to CPU. GPU acceleration requires the proprietary NVIDIA driver first (currently nouveau). See .claude/OLLAMA.md.

Claude Code Environment

Working Directory: /home/guru/claudetools
User: guru
Shell: zsh (interactive); bash for scripts
Git: Configured for Gitea (git.azcomputerguru.com)
Identity: mike (identity.json configured)
Vault: /home/guru/vault (SOPS + age, decryption verified working)
Age key: ~/.config/sops/age/keys.txt (mode 600), recipient #1 age1qz7ct84m50u06h97artqddkj3c8se2yu4nxu59clq8rhj945jc0s5excpr
Privileges: guru in sudo group; passwordless sudo enabled (/etc/sudoers.d/guru-nopasswd, 2026-05-24) — Claude can run privileged ops.
GuruRMM clone: /home/guru/gururmm (canonical server-side path) — builds agent + tray locally with cargo; also an enrolled managed agent (id a73ba38e, systemd gururmm-agent.service).

Network

Interface	Address
Wi-Fi (wlan0)	10.2.209.225/16 (gw 10.2.0.1) — NOT company LAN
Tailscale	100.75.148.91 (joined 2026-05-24, mike@)

Field/mobile laptop on wifi; Tailscale now bridges to internal services. pfSense-2 advertises subnet 172.16.0.0/22 into the tailnet and this node runs with --accept-routes, so company LAN host 172.16.3.30 is reachable via tailscale0. Verified 2026-05-24: coord API 172.16.3.30:8001 -> HTTP 200, remote Ollama 100.92.127.64:11434 -> HTTP 200 (5 models). (D2TESTNAS also advertises 192.168.0.0/24 + 192.168.100.0/24.)

Capabilities

Git operations (over public internet)
SOPS vault decryption (verified)
Claude Code CLI
Security tooling (Kali — nmap, etc.)
DB clients present (psql, mariadb) — usable only when on-LAN
coord API / DB reachable (via Tailscale subnet route 172.16.0.0/22)
Tailscale (100.75.148.91)
Tier 0 remote Ollama reachable over Tailscale (100.92.127.64)
Rust toolchain (1.95.0) + GuruRMM agent/tray build deps (GTK/appindicator/openssl)
Passwordless sudo (guru)
Enrolled GuruRMM managed agent (id a73ba38e, systemd service)
Ollama LOCAL (not installed — would add offline Tier 0)
GrepAI semantic search (not installed)
1Password CLI (op not installed)
NVIDIA CUDA compute (nouveau driver — no CUDA)
Docker

Notes

Strongest raw hardware in the fleet for AI inference (i9-14900HX, 31 GB RAM, RTX 4070 8 GB) — but GPU compute is blocked on the nouveau -> proprietary-NVIDIA driver swap (needs a package install + reboot on Kali rolling).
Field/mobile laptop. On wifi off the company LAN, but Tailscale (added 2026-05-24) bridges to internal services, so coord API/DB and remote Ollama work. A local Ollama would still add value for offline use (away from any network).
Onboarding (LINUX_PC_ONBOARDING.md) status: /sync OK, vault OK, identity OK, Tailscale OK; PENDING — local Ollama (optional), GrepAI, 1Password CLI.
2026-05-24: chose Tailscale-only for now; local Ollama + NVIDIA driver deferred.
2026-05-24: set up as the GuruRMM Linux dev/test box — Rust + GTK build env, gururmm cloned, enrolled agent runs the new Linux tray (Unix-socket IPC + GTK) build. See gururmm PR #13 (feat/linux-tray-ipc). The systemd unit was patched locally with RuntimeDirectory=gururmm; service runs an unsigned local build until the PR merges and the pipeline ships a signed agent.

4.7 KiB Raw Blame History