feat: build for illumos, and keep customer identifiers out of the repo

Adds x86_64-unknown-illumos as a cross-compilation target (official
cross-rs image) and to the release matrix. tvision-rs's os-clipboard
feature is dropped on illumos only, because arboard pulls in Wayland,
which does not build there; the OSC 52 clipboard path remains, which is
the one that works over ssh anyway.

Also removes a customer's identifiers from tracked files. They had
reached the published mdBook and a unit test, while the corresponding
config file was already gitignored for exactly that reason. The stale
controller handoff was entirely customer-operational and is dropped;
its content moves to a private wiki.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: oetiker

.github/workflows/release.yml

@@ -100,10 +100,17 @@ jobs:
             os: ubuntu-latest
             archive: tar.gz
             cross: true
+            rustflags: "-C target-feature=+crt-static"
           - target: aarch64-unknown-linux-musl
             os: ubuntu-latest
             archive: tar.gz
             cross: true
+            rustflags: "-C target-feature=+crt-static"
+          - target: x86_64-unknown-illumos
+            os: ubuntu-latest
+            archive: tar.gz
+            cross: true
+            rustflags: ""
           - target: x86_64-apple-darwin
             os: macos-latest
             archive: tar.gz
@@ -123,14 +130,14 @@ jobs:
         with:
           targets: ${{ matrix.target }}
 
-      - name: Install cross (Linux musl)
+      - name: Install cross (Linux musl, illumos)
         if: matrix.cross
         run: cargo install cross --git https://github.com/cross-rs/cross
 
       - name: Build binary
         run: |
           if [ "${{ matrix.cross }}" = "true" ]; then
-            RUSTFLAGS="-C target-feature=+crt-static" cross build --release --target ${{ matrix.target }}
+            RUSTFLAGS="${{ matrix.rustflags }}" cross build --release --target ${{ matrix.target }}
           else
             cargo build --release --target ${{ matrix.target }}
           fi

.gitignore

@@ -10,7 +10,10 @@
 docs/book/
 .claude
 *~
+# Customer directory configs: real base DNs, bind DNs, Samba SIDs and uid/gid
+# ranges. This repo is public — these live only on the host they serve.
 examples/ds-carbo-feh.toml
+examples/ds-fugu-speag.toml
 
 # SDD / superpowers scratch artifacts
 .superpowers/

CHANGES.md

@@ -8,6 +8,12 @@ All notable changes to eDAPtor are documented here. The format follows
 
 ### New
 
+- **illumos / OmniOS builds.** Releases now include an
+  `x86_64-unknown-illumos` binary, so eDAPtor runs on illumos hosts such as
+  OmniOS. The OS-native clipboard is not compiled in on that platform (its
+  Wayland dependency does not build there); clipboard copy falls back to OSC 52,
+  which is what works over ssh regardless.
+
 ### Changed
 
 ### Fixed

Cargo.lock

@@ -23,8 +23,17 @@ oid = "0.3"
 unicode-width = "0.2"
 # tvision-rs is the TUI framework driving the edaptor browser (tree / leaf list / entry form).
 # 0.14.0: native InputLine masking + RevealEye/MaskedInput (replaces the local password mirror).
+
+# tvision-rs's default `os-clipboard` feature pulls arboard -> wl-clipboard-rs ->
+# wayland-backend, which cannot compile on illumos. Dropping it leaves the OSC 52
+# rung of the clipboard chain — the one that actually works over ssh, which is how
+# edaptor is driven on illumos. Every other platform keeps the native clipboard.
+[target.'cfg(not(target_os = "illumos"))'.dependencies]
 tvision-rs = "0.14.0"
 
+[target.'cfg(target_os = "illumos")'.dependencies]
+tvision-rs = { version = "0.14.0", default-features = false }
+
 [dev-dependencies]
 tempfile = "3"
 

Cargo.toml

@@ -7,5 +7,13 @@ image = "ghcr.io/cross-rs/x86_64-unknown-linux-musl:main"
 [target.aarch64-unknown-linux-musl]
 image = "ghcr.io/cross-rs/aarch64-unknown-linux-musl:main"
 
+# illumos (e.g. OmniOS). NOTE: unlike the musl targets this is a dynamically
+# linked binary — illumos has no static libc, so do NOT pass +crt-static here.
+# Pinned to 0.2.5 deliberately (unlike the musl images' :main) — the illumos
+# image is newer and less exercised upstream, so it is not floated. Do not
+# "fix" this to match the musl targets.
+[target.x86_64-unknown-illumos]
+image = "ghcr.io/cross-rs/x86_64-unknown-illumos:0.2.5"
+
 [build.env]
 passthrough = ["RUSTFLAGS"]

Cross.toml

@@ -29,8 +29,8 @@ Add a `[meta]` block to make a config identifiable in the picker:
 
 ```toml
 [meta]
-name        = "carbo-link production"
-description = "dc=carbo-link,dc=com via ldapi (ds-carbo-feh)"
+name        = "example-corp production"
+description = "dc=example,dc=com via ldapi (ds-example)"
 ```
 
 Both fields are optional.

docs/controller-handoff.md

@@ -23,6 +23,13 @@ self-contained `musl` release binaries can be produced without vendoring a TLS
 library; pre-built static binaries will be published via GitHub Releases once
 the project is pushed.
 
+The release workflow's build matrix is configured to produce binaries for
+Linux (`x86_64`/`aarch64`, static musl), macOS (Intel and Apple Silicon),
+Windows, and **illumos** (`x86_64`, e.g. OmniOS) — but no release has shipped
+yet, so no binaries have actually been published for any of these targets. The
+illumos binary is dynamically linked — illumos has no static libc — and links
+only against base system libraries.
+
 ## Configuration file
 
 eDAPtor reads a single TOML configuration file. Point it at one explicitly with

docs/src/configuration/overview.md

@@ -58,8 +58,8 @@ fn meta_config_parses_both_fields() {
     let cfg: Config = toml::from_str(
         r#"
         [meta]
-        name        = "carbo-link production"
-        description = "dc=carbo-link,dc=com via ldapi"
+        name        = "example-corp production"
+        description = "dc=example,dc=com via ldapi"
         [server]
         uri     = "ldap://x"
         base_dn = "dc=x"
@@ -69,10 +69,10 @@ fn meta_config_parses_both_fields() {
         "#,
     )
     .unwrap();
-    assert_eq!(cfg.meta.name.as_deref(), Some("carbo-link production"));
+    assert_eq!(cfg.meta.name.as_deref(), Some("example-corp production"));
     assert_eq!(
         cfg.meta.description.as_deref(),
-        Some("dc=carbo-link,dc=com via ldapi")
+        Some("dc=example,dc=com via ldapi")
     );
 }
 
@@ -678,8 +678,8 @@ Add a `[meta]` block to make a config identifiable in the picker:
 
 ```toml
 [meta]
-name        = "carbo-link production"
-description = "dc=carbo-link,dc=com via ldapi (ds-carbo-feh)"
+name        = "example-corp production"
+description = "dc=example,dc=com via ldapi (ds-example)"
 ```
 
 Both fields are optional.